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", 0x1000}, {&(0x7f0000001c40)}], 0x9, 0x0, 0x0, 0x4004084}}], 0x1, 0x4)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
fcntl$setpipe(r2, 0x407, 0x7)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

15:19:44 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

15:19:44 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000000c0))

[ 1991.311597] device wlan1 left promiscuous mode
15:19:44 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = getpgrp(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r1, {0x2b}}, './file0\x00'})
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x20, 0x50, 0x8, 0x20, 0x0, 0xfffffffffffffffe, 0x200, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x800, 0x4}, 0x49ae0, 0x2, 0x2, 0x1, 0xdbf, 0x7f, 0x7fff, 0x0, 0xfffffff7, 0x0, 0x2b32}, r2, 0x4, r3, 0x1)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)
r5 = syz_io_uring_setup(0x7bdf, &(0x7f00000000c0)={0x0, 0x17ad, 0x8, 0x2, 0x2d0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140))
ppoll(&(0x7f0000000180)=[{r0, 0x1}, {0xffffffffffffffff, 0x9601}, {}, {0xffffffffffffffff, 0x30}, {r1}, {r4, 0x9604}, {0xffffffffffffffff, 0x1008}, {0xffffffffffffffff, 0xc400}, {r5, 0x9000}, {0xffffffffffffffff, 0x40}], 0xa, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x5]}, 0x8)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r7, 0xfffff000)
dup2(0xffffffffffffffff, r6)

15:19:44 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x92a8, 0x10, 0x3, 0x102}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

15:19:44 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x5})
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)

15:19:44 executing program 6:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x5})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)

15:19:44 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x92a8, 0x10, 0x3, 0x102}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

15:19:44 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000040)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4003}], 0x0, &(0x7f00000004c0)=ANY=[])
getdents64(r0, &(0x7f0000000080)=""/33, 0x21)
openat(r0, &(0x7f0000000080)='./file1\x00', 0x2c400, 0x8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x149002, 0x190)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240))
fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x20a142, 0x71)
r2 = socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000c, 0x40010, r0, 0x9b371000)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)={0x14, 0x2c, 0xcd2781b960712dff}, 0x14}}, 0x0)
ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000003c0))
getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140))
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10)

15:19:44 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x718}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
signalfd(r0, &(0x7f0000000000)={[0x4]}, 0x8)

[ 1991.456038] device wlan1 entered promiscuous mode
[ 1991.461715] device wlan1 left promiscuous mode
[ 1991.503814] device wlan1 entered promiscuous mode
[ 1991.520645] device wlan1 left promiscuous mode
15:19:57 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x1010000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

15:19:57 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf25650000000c0099800800010007000000523018d95a7738646f4de27846d191bad16a96fe12f9fa8afcd9b4dbbe4a442ef60f91b603c8f7b48b081a4a70c9014578db5b915b72fe439c23a4b8ff531233401dd06f02f204b4eeac4261dbdad961c14e2877307c9bf57ef47c8417d467e5e771fffd591af7d30ef9bb091c70dde9a5e9"], 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x8, 0x2180)
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x4e24, 0x670a, 0x4e20, 0x0, 0xa, 0x30, 0x0, 0x87, 0x0, 0xffffffffffffffff}, {0x1, 0x5, 0x7fffffff, 0x7, 0x3, 0x40, 0x65fc385f}, {0x6, 0x7, 0xcbd, 0xd31}, 0x9, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x32}, 0x0, @in6=@empty, 0x3507, 0x4, 0x1, 0x81, 0x8f2, 0x2, 0xa3a}}, 0xe8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)

15:19:57 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r2 = accept$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r3 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x197f8000)
ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r3, r0, 0x0)

15:19:57 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x10000, 0x0, 0x0, 0x62ec9bd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0xfff})

15:19:57 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x5})
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)

15:19:57 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/211, 0xd3})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=""/170, 0xaa})
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:19:57 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x92a8, 0x10, 0x3, 0x102}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

15:19:57 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @multicast}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x3, 0x6, @multicast}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x3, 0x6, @multicast}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r11=>0x0})
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000080)={r11, 0x3, 0x6, @multicast}, 0x10)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x494, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x1, 0x3f, 0x80000000}, {0x0, 0x1, 0x0, 0x9}, {0x37, 0xfb, 0x5, 0x2}]}}}]}}, {{0x8, 0x1, r8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x205f3864}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0xfffffffffffffe65}, {0x8, 0x4, 0x10001}}, {0x8}}}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x41}, 0x8000)

[ 2004.930060] device wlan1 entered promiscuous mode
15:19:57 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

15:19:57 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
accept(r0, &(0x7f0000000000)=@isdn, &(0x7f00000000c0)=0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

[ 2005.021066] device wlan1 entered promiscuous mode
[ 2005.022789] device wlan1 left promiscuous mode
[ 2005.075361] device wlan1 left promiscuous mode
[ 2005.079956] device wlan1 entered promiscuous mode
[ 2005.143312] device wlan1 left promiscuous mode
15:20:15 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/211, 0xd3})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=""/170, 0xaa})
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:20:15 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

15:20:15 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x0, 0x9, 0x3, 0x0, 0x5, 0x40, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7f, 0x0, @perf_config_ext={0x400, 0xfffffffffffffffb}, 0x14200, 0x7, 0x5, 0x2, 0x3c1, 0x4, 0x1, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x5, 0x4)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200080, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r3, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)

15:20:15 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:20:15 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
r2 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}}, 0xfffff800)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/219, 0xdb, 0x3)
futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{r0, r1/1000+60000}, {0x0, 0x2710}})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x3, 0x3f, 0x0, 0x6, 0x1}, 0x9)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ipvlan0\x00'})

15:20:15 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3b}, 0x0, 0x0, 0x7}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={&(0x7f0000000100), &(0x7f0000000140)=""/244, 0xf4})
syz_open_dev$usbmon(&(0x7f00000000c0), 0x200, 0x80)
writev(r3, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
dup2(0xffffffffffffffff, r0)

15:20:15 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 1)

15:20:15 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3, 0x71, 0x4, 0x4, 0x0, 0x10000, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc47f, 0x2, @perf_config_ext={0x1, 0x2}, 0x202, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7, 0x0, 0x1f, 0x0, 0x4}, 0xffffffffffffffff, 0xc, r0, 0x1)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

15:20:15 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x9, 0x7, 0x38, 0x9, 0x0, 0x8, 0x30000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x100000000, 0x229}, 0x58247, 0x80000009, 0x9, 0x9, 0xd00, 0x800, 0xfffe, 0x0, 0x5, 0x0, 0x9})
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

[ 2022.319636] device wlan1 entered promiscuous mode
15:20:15 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

[ 2022.331622] FAULT_INJECTION: forcing a failure.
[ 2022.331622] name failslab, interval 1, probability 0, space 0, times 0
[ 2022.334840] CPU: 0 PID: 10190 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2022.336584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2022.338699] Call Trace:
[ 2022.339376]  dump_stack+0x107/0x167
[ 2022.340304]  should_fail.cold+0x5/0xa
[ 2022.341287]  ? __alloc_skb+0x6d/0x5b0
[ 2022.342256]  should_failslab+0x5/0x20
[ 2022.343244]  kmem_cache_alloc_node+0x55/0x330
[ 2022.344380]  __alloc_skb+0x6d/0x5b0
[ 2022.345328]  inet_netconf_notify_devconf+0xdd/0x250
[ 2022.346590]  inetdev_event+0x105e/0x1670
[ 2022.347617]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2022.348996]  ? devinet_init_net+0x650/0x650
[ 2022.349985]  ? nh_netdev_event+0x8c/0x370
[ 2022.351036]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 2022.352355]  raw_notifier_call_chain+0xb3/0x110
[ 2022.353550]  call_netdevice_notifiers_info+0xba/0x130
[ 2022.354862]  unregister_netdevice_many+0x852/0x1490
[ 2022.356113]  ? netdev_pick_tx+0xc70/0xc70
[ 2022.357191]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2022.358520]  ? queue_delayed_work_on+0xb4/0xe0
[ 2022.359675]  ? trace_hardirqs_on+0x5b/0x180
[ 2022.360770]  unregister_netdevice_queue+0x201/0x2c0
[ 2022.361840]  ? unregister_netdevice_many+0x1490/0x1490
[ 2022.363188]  ? linkwatch_fire_event+0x63/0x190
[ 2022.364363]  __tun_detach+0xfc1/0x12b0
[ 2022.365380]  tun_chr_close+0xc4/0x250
[ 2022.366344]  __fput+0x285/0x9f0
[ 2022.367171]  ? __tun_detach+0x12b0/0x12b0
[ 2022.368235]  task_work_run+0xe2/0x1a0
[ 2022.369215]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2022.370452]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2022.371665]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2022.372979] RIP: 0033:0x7fa43fdb1b19
15:20:15 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/65, 0x41})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)

[ 2022.373950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2022.378727] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2022.380642] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2022.382473] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2022.384288] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2022.386133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2022.387954] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:20:15 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x3, 0x102}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

15:20:15 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x4040, 0x0)
fcntl$setpipe(r0, 0x407, 0x10000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r1, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x1, 0x5, [0x3, 0x2, 0x1, 0x1000, 0x4, 0x0, 0x34, 0x6]}})
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)
r2 = pidfd_open(0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000000c0)="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")

15:20:15 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
syz_io_uring_complete(r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)

[ 2022.487725] device wlan1 left promiscuous mode
15:20:15 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000c, 0x4000010, r0, 0xfffff000)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/165, 0xa5})
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000180), &(0x7f0000000500)=""/4096, 0x1000})

15:20:15 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2022.639396] device wlan1 entered promiscuous mode
[ 2022.640814] device wlan1 left promiscuous mode
15:20:30 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
pread64(r0, &(0x7f00000000c0)=""/138, 0x8a, 0xfff)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x11102, 0x7, 0x81, 0x4, 0x8, 0x6, 0x7, 0x0, 0x45731cd1, 0x0, 0xfffffffffffffffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
syz_io_uring_setup(0x1543, &(0x7f0000000300)={0x0, 0x9405, 0x0, 0x3, 0xfb}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000240))
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x1, 0x0, 0x1}, 0x1)
dup2(0xffffffffffffffff, r1)

15:20:30 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:20:30 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x102}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

15:20:30 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 2)

15:20:30 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f00000005c0)='ns/ipc\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r2, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x52, 0x2, 0x4, 0x0, 0xffffffff, 0x12200, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp, 0x4, 0x65, 0x0, 0xe, 0x8, 0x52b9, 0x1, 0x0, 0x3ed, 0x0, 0x80}, r1, 0xffffffffffffffff, r2, 0x8)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

15:20:30 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000000b03030000002f6475762f75738b8d08626d6f6e230000000008000240000000234b864e796cf9bc733d6dcd4953984296b9a6490200000000000000eaacbfd350d2c3caf66ce22e2450c054e57afd3121e17949eb93181f7c305c86655ea5bf3a68bd3458774d3142dfd0ac40384bbd0a144f9e11b537396edb50b44000213b88c44c5ea1d271f600d77de1fd9bc46de5465af5f58d83bbef20fd8c6ac82bbccc417b7bc400000000199c7b8149230ffaa9b93e5088a684325357e5628a9a020d1f2a965c1d213aeb38a692739b24cf5ca7b2c7d93198c68471a866f8629e"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x4000805)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205)
r2 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x10, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$inet(0x2, 0x1, 0x3)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x4007, @fd_index=0x5, 0x9, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x873)

15:20:30 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/211, 0xd3})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000002c0)={&(0x7f00000001c0), &(0x7f0000000200)=""/170, 0xaa})
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:20:30 executing program 4:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/usbhid', 0x2, 0x10a)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x800, 0x1}, 0xe)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)

[ 2037.840778] FAULT_INJECTION: forcing a failure.
[ 2037.840778] name failslab, interval 1, probability 0, space 0, times 0
[ 2037.842574] CPU: 0 PID: 10245 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2037.843538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2037.844698] Call Trace:
[ 2037.845073]  dump_stack+0x107/0x167
[ 2037.845589]  should_fail.cold+0x5/0xa
[ 2037.846119]  ? create_object.isra.0+0x3a/0xa30
[ 2037.846752]  should_failslab+0x5/0x20
[ 2037.847280]  kmem_cache_alloc+0x5b/0x310
[ 2037.847862]  create_object.isra.0+0x3a/0xa30
[ 2037.848480]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2037.849181]  kmem_cache_alloc_node+0x169/0x330
[ 2037.849836]  __alloc_skb+0x6d/0x5b0
[ 2037.850357]  inet_netconf_notify_devconf+0xdd/0x250
[ 2037.851058]  inetdev_event+0x105e/0x1670
[ 2037.851627]  ? devinet_init_net+0x650/0x650
[ 2037.852265]  ? nh_netdev_event+0x8c/0x370
[ 2037.852851]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 2037.853600]  raw_notifier_call_chain+0xb3/0x110
[ 2037.854259]  call_netdevice_notifiers_info+0xba/0x130
[ 2037.854972]  unregister_netdevice_many+0x852/0x1490
[ 2037.855662]  ? netdev_pick_tx+0xc70/0xc70
[ 2037.856269]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2037.856999]  ? queue_delayed_work_on+0xb4/0xe0
[ 2037.857647]  ? trace_hardirqs_on+0x5b/0x180
[ 2037.858248]  unregister_netdevice_queue+0x201/0x2c0
[ 2037.858934]  ? unregister_netdevice_many+0x1490/0x1490
[ 2037.859669]  ? linkwatch_fire_event+0x63/0x190
[ 2037.860326]  __tun_detach+0xfc1/0x12b0
[ 2037.860877]  tun_chr_close+0xc4/0x250
[ 2037.861413]  __fput+0x285/0x9f0
[ 2037.861872]  ? __tun_detach+0x12b0/0x12b0
[ 2037.862461]  task_work_run+0xe2/0x1a0
[ 2037.862997]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2037.863678]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2037.864356]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2037.865078] RIP: 0033:0x7fa43fdb1b19
[ 2037.865602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2037.868135] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2037.869196] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2037.870186] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2037.871183] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2037.872169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2037.873156] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:20:30 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000180)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
fallocate(0xffffffffffffffff, 0x4a, 0x2, 0x320)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r0, 0x10000000)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x1, &(0x7f00000000c0)="336ab7b948353748332461163e568c38cd622b6c0eeec7aaf799f07fa17447f25c5155f3e1f23e09f6eea01faa4c3abbb0f0aacc4d247a72b36f339f5b1473cee51d73a18df36e587ecae9da43a9cafc17a1af4ddc5781e6f0ef7b06e31f3caea5cd47f6d8e88b69882f5452d897a0ae25dfa67d18ab077bdef340cf556ebf94de8497995d1c81bb3fb8f62ba92b", 0x0, 0x0, 0x1, {0x3, r5}}, 0xd4f)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4, &(0x7f0000000040), 0x1, 0x0, 0x0, {0x0, r5}}, 0x1)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2fda, 0xfe6d, 0x1, &(0x7f0000000240)={[0x1]}, 0x8)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x69)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)

15:20:30 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x102}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

[ 2037.920434] device wlan1 entered promiscuous mode
[ 2037.923705] device wlan1 left promiscuous mode
15:20:30 executing program 2:
kexec_load(0xb7, 0x2, &(0x7f0000000380)=[{&(0x7f0000000240)="92c79a2a922697f00ecf773fa98b56e2159f076d731e03ed96c71d1706a26b39d067553b3919c0044a75a14290d3f62ec3d0a7bacef70e2a45bc6118e14230a23e6aca7f38c46de5d4903e23eacc00434a4f98e5bc883345", 0x58, 0x10000, 0x1}, {&(0x7f00000002c0)="a432a4fa3aca59a6ba7761e144b6444485d7aab57f31c377c3ca273501228498d5ca2b590859a3eef9f1b1c1f9a0ddfd8450258462880b836509f96e98336db33fe381b8f171516c48d8f5d4a3621e5ff50bb431879d37e1ffa9336932dc7689aaa6decee3c756972f7465235218fe75a12856989c9e9dfb426761d1ea8b745b7c8b430378bfb75235209f63b1fafc6ec70b994949b348af4fb4", 0x9a, 0x1, 0x95e}], 0x2)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
fstat(r1, &(0x7f0000000000))
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x1, &(0x7f00000000c0)="336ab7b948353748332461163e568c38cd622b6c0eeec7aaf799f07fa17447f25c5155f3e1f23e09f6eea01faa4c3abbb0f0aacc4d247a72b36f339f5b1473cee51d73a18df36e587ecae9da43a9cafc17a1af4ddc5781e6f0ef7b06e31f3caea5cd47f6d8e88b69882f5452d897a0ae25dfa67d18ab077bdef340cf556ebf94de8497995d1c81bb3fb8f62ba92b", 0x0, 0x0, 0x1, {0x3, r6}}, 0xd4f)
r7 = syz_open_dev$usbmon(&(0x7f0000000200), 0x6, 0x2400)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x3ff, &(0x7f0000000140)=[r1, r1, r2, r3, r4, r1, r0, r7, r5], 0x9, 0x0, 0x0, {0x0, r6}}, 0x5)

15:20:30 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 3)

15:20:30 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1, 0x140)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1)

15:20:30 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:20:30 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

[ 2038.049304] device wlan1 entered promiscuous mode
[ 2038.055612] device wlan1 left promiscuous mode
15:20:30 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r1, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)

[ 2038.077930] FAULT_INJECTION: forcing a failure.
[ 2038.077930] name failslab, interval 1, probability 0, space 0, times 0
[ 2038.082833] CPU: 1 PID: 10274 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2038.084405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2038.086277] Call Trace:
[ 2038.086872]  dump_stack+0x107/0x167
[ 2038.087702]  should_fail.cold+0x5/0xa
[ 2038.088567]  should_failslab+0x5/0x20
[ 2038.089439]  __kmalloc_node_track_caller+0x74/0x3b0
[ 2038.090556]  ? inet_netconf_notify_devconf+0xdd/0x250
[ 2038.091732]  __alloc_skb+0xb1/0x5b0
[ 2038.092555]  inet_netconf_notify_devconf+0xdd/0x250
[ 2038.093693]  inetdev_event+0x105e/0x1670
[ 2038.094614]  ? devinet_init_net+0x650/0x650
[ 2038.095599]  ? nh_netdev_event+0x8c/0x370
[ 2038.096544]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 2038.097723]  raw_notifier_call_chain+0xb3/0x110
[ 2038.098784]  call_netdevice_notifiers_info+0xba/0x130
[ 2038.099946]  unregister_netdevice_many+0x852/0x1490
[ 2038.101068]  ? netdev_pick_tx+0xc70/0xc70
[ 2038.102013]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2038.103195]  ? queue_delayed_work_on+0xb4/0xe0
[ 2038.104211]  ? trace_hardirqs_on+0x5b/0x180
[ 2038.105184]  unregister_netdevice_queue+0x201/0x2c0
[ 2038.106321]  ? unregister_netdevice_many+0x1490/0x1490
[ 2038.107509]  ? linkwatch_fire_event+0x63/0x190
[ 2038.108539]  __tun_detach+0xfc1/0x12b0
[ 2038.109434]  tun_chr_close+0xc4/0x250
[ 2038.110298]  __fput+0x285/0x9f0
[ 2038.111039]  ? __tun_detach+0x12b0/0x12b0
[ 2038.111979]  task_work_run+0xe2/0x1a0
[ 2038.112853]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2038.113980]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2038.115069]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2038.116220] RIP: 0033:0x7fa43fdb1b19
[ 2038.117065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2038.121224] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2038.122925] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2038.124533] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2038.126141] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2038.127749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2038.129355] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2051.433849] device wlan1 entered promiscuous mode
15:20:44 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/211, 0xd3})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:20:44 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000100))

15:20:44 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000, 0x7, 0x800000, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)

15:20:44 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000c, 0x4000010, r0, 0xfffff000)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/165, 0xa5})
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000180), &(0x7f0000000500)=""/4096, 0x1000})

15:20:44 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8140, 0x1, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0))
r3 = getpid()
r4 = syz_open_procfs$namespace(r3, &(0x7f00000005c0)='ns/ipc\x00')
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x5)
r6 = syz_open_dev$evdev(&(0x7f0000004b00), 0xfffffffffffffffa, 0x30100)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r7, 0xfffff000)
r8 = getpid()
syz_open_procfs$namespace(r8, &(0x7f00000005c0)='ns/ipc\x00')
getgroups(0x3, &(0x7f0000004b40)=[0xffffffffffffffff, <r9=>0xee00, 0x0])
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001500)={0x390, 0x33, 0x2, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x3, 0x0, 0x0, @pid}, @typed={0x6, 0x6c, 0x0, 0x0, @str='\xa4\x00'}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@local}, @typed={0x42, 0x89, 0x0, 0x0, @binary="863f7e7df5a1cee6cbb30bcb87877e85707159afb54566ebd06b50c9660230382ca68fcd63e375150553b4a3dd68a1a7865973260f8387debdc801422477"}, @generic="12cf1de94cdba4e7e49fd94e51ba2d551fe983bd14fa10a2b869f8ba88e528695a0e6251ea204f91ae731c244a9aa550671f1932599cb6efcd128b72e50d1a0a6e026bfff05424825877391285d5ab72bba812", @nested={0x2a7, 0xe, 0x0, 0x1, [@typed={0xf, 0x77, 0x0, 0x0, @str='{,-+:/^[$-\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x81, 0x0, 0x0, @pid}, @generic="55f49891dffc3f70cc7489feb263043c265c56f0b06da75fe4442b36965907398adc19293fd0590fbe67b76fc91c76c3455a183e02599c0cb44bb6517dab6562c122a79910dfe3022ce053a83ae85ed4597625c4a82458346cb4086d26eb9c6671305cbd2321446b72ca2e6816dd9abd3b52cfddd7f03529cd29c528bd2fa21ca1000674d573cd716c", @generic="648c15d481c0da2a722228ecfe2386f1a6526346022b4a699f1bd039f0b11e6f4688ce9478b24762c968d00de0d020bc46e636d9116cf9b24b21ba954d66edff14cb524a7c2d6c7a1ee62584a8bd79dca129fef09f24ab75f9a7fd7dbee2162ae5f26d072f8e2db7dec9307d5bd3cb8e2f187628199635a6408305190b76c4ead831ab21bebd9f2af37e43b64f1c6d63b4fe03cf55922e90c5e40f26c48f204fc69a1935a46804143470a04a7617da420a41267b94fd6383f1a0f87840ae83f06e45cc2a401c2e20ce139509fac75f441f88383ea643292857ed02c51a6fe25da3f8ad3e63f21324cf", @typed={0x4, 0x58, 0x0, 0x0, @binary}, @generic, @generic="04d637eca431cbf906cb873462c32e00cd6c228268494994358c7f38356b903a7be8f194e5e4ceb326938908371358d652e7333d324226ed8906a5a5cd64889abb0de2eeb49f8ed9b60af9dfc9aa45957116fe6dad971c468fbdd3c406ce9aa8aeb9c85995acbc87f9ba60733b03fe36ec58af39144d76912686706498d3e6569e99c22a002bcf1009a1f9504588ec78f2004b0d51f35acbe8f6735d5c439f7ac2b91c0583f412e687e93465aeed635d0e7970ea4c43ad44df1f01360c89cbbf7cfb15febfe8f28b2bfb8ea0276aecb0bf64e6ce211fd9ad0d1d0d84627d83c611a824c45e9afd34d996fe4de70946a679", @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@empty}]}, 0x390}, {&(0x7f00000018c0)={0x15c4, 0x42, 0x20, 0x70bd27, 0x25dfdbfd, "", [@nested={0x144d, 0x5d, 0x0, 0x1, [@generic="eab0fe8fb4a603af29d76a4c7c052ffafd2bd3ef6d7247b8b2e5c0c22a548c4e001d0e5bc1f72526158b9a63ed226d7c742743b2c694d85a8e567d4469f3a29d84d09b3b6c25815b2a5c8e9eab76eb8dbd52968a7e5fd4", @generic="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", @generic="bcba2716e49b1bc75cdfd1adfa66d5c8c666a55f3297e86842f8b1426d360c8a74eafffd648378b4b13d6c88fb607f5ec69cb203b36af910c09f81944256ca9908d25ebd0c984466467f222b94e012e0c186774f00243a26b74620b526e6aa9a7b6e24dcd99d18b0797301e2388b0ab9de6164731c87df72aa97ed8c40fc2b2eacde4552ec5e1410c2103912517e8eda7f0bbcbb704f9e06652accb682e0fafc228013f051b476a4a70aebdd8c5d2cc68b2d3028efebc2fc", @generic="486e86eae6fe38cdb00f0edb2a29dbc4bcca0a53630e55fb6a8982657e43c8b5714b04e89f5524497ffd7fd4b050ab2f64fdf1cce09878abe9a9c6aa242556f54fa3d9b5d1ed9318912901ec849638647e2d67fd5fd03e81ce7fafe3e7bfb8e0cd2ba1dcd57002039a827c65edb4394f76a0c7685c17604392e675b434c55d566db52f4dfe896f59fd00779a9614054f6b7200556f9371", @typed={0x101, 0x6c, 0x0, 0x0, @binary="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"}, @generic="5d72ddc4baa9494444e78788a76452ac98cead9963416753f815260946fae422391b851e7395d1b22a83a24afe5e2931c420c371df67c78345d22ff35cf9fe2f8bfab4207d7682edb4c0aafdba3bb3067a0d40549613acc4d84311790e8dc32db815db1451bee5e89be8d9886d39073b0f5fe81227a8b4969ae0445cc378a562ccb17d85f28b494b", @typed={0x8, 0x5d, 0x0, 0x0, @fd}, @generic="9f6c6103ed2bb47b6df9478207cf8f8bc44b28ed4595af6d5a51f31518d30c960324633ffc6db452e302d3046d32def9ec176dbfd85baa42c03c1c64f7547a07fb5fa2fad5096adbc4f6ad36ad82f16c45f9c81245ef7798d9327fa11161cb6ed02273ea0edc765741ba65d7e9cbb09bae49a9d47613bfd950065549ad992c5cc08801448814cc1acc457791580a3366b5905ca2bf15b6656f197b1904d70bdc04c7693c5eae185c07024cee97d81b7df190b145699f0d4bae652d18d41dfd79", @generic="6663424e353e62ad982f3d17d0cc61d6082e9e1e954004db94fa38639a60ce2436bfa26cf331b573a45f04bdf9750ec10a6656467a3675bbe4f93faf3f2c9f609691e62878b6ca", @typed={0x8, 0x26, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x15b, 0x7, 0x0, 0x1, [@generic="da6649974f2967993167d54501dc30f9306218b17b3d8bbfa980ecb12525c24669e94e541916e4cd0bdeca75e3ea7fcccf12da46fe5ea6d789a9cf51340e8c0253f0c2a876b811906f0200fbeca1c167d97e879885e76dbcdc6986605e47094fc9b6cf8b5f889f8f64f0417a2ef8dd23309b892c0b82d16eee93dba39435b0ef19ddc4bf91cec68c98f76a", @generic="4f2c2a0c9a7163ad0e219534fbb85c63862d1b76145a1a15256705ff25bb1df3bca8f9489b61847c3082151d250aab54cf8439f1a2fabb08ef8e7d1fe40e299e4f1008dc5db3bf84dcec9ae682f53f9a3fd83f5afeed6e1935caa53e8dfee0135d569f42612bb0042e57a41d9df1e9176eb15c6f128b8fb1948e86f3ae4bfdd2122158ae0ee563a763769f978569bcc744e99c397a9ddae298a93762b73572c5912349561403cf870f2b5012ad5900a835a8b914a889b359b09aeca17cdce73732ef414f5e76fa59bbe594dc"]}, @typed={0x8, 0x40, 0x0, 0x0, @uid=0xee00}]}, 0x15c4}, {&(0x7f0000002ec0)={0x18a8, 0x1d, 0x20, 0x70bd26, 0x25dfdbfc, "", [@generic="6481c31ba8b715f901a11f594bb3b4646b42ce28151ceb8871a48ae175e75b9cf95d0a5822d284194ab85d", @generic="96ac9c1af431e7b01b38c097a0ba57c20a3c7d15f7ff8b1b2e0056727c6bff6dea09046f037f6f749c863ea29d4d22ad7ce363d47ba4cfad75345ecde080c1f10809eb9e55018b49e693e81c117e7ec1670832e6f76b4472e1d32bbe055560991d1f5b98d735a9e966a57f2d1fa21591ac9595c2e80e43857c781fa0f02b006ae27c7378952fc05c2fb1329f144ad2897d23fc50cedf36c1c30c558ae7ad9f62f3ec4d6a2237bb25d3e8903f63556f6606cd0a0d86e3262aa0109498f3da4f4cf28a2a9086561d6640c1b910bc8a5f6bbc3dfae05229b59e67ab149cd030f42962f92e647cafbc691eef788839a541b96f91cd", @nested={0x13cd, 0x5a, 0x0, 0x1, [@generic="691476c08d3ad83951fff6b4b5d4e469d49862853f77bd8966979f3515855731881d4ea233e72200ccdb48590df0e4df190d8e7f3e002860e3f6a1b8fc53fcb763471581e3889098988b566e7cf92e65fcf2741e2711a801555ace1f848a17cc876e4fe52717f4210a9483eab08972c4d93c85b705dd8e16cfe8c1a5ff7e1b8ebc4b5b52d322c1c921a0db1bba81cba12f2ec1869910697e462e0e8c20442aa4fb66170317aa9bccb248e21bba63704a5403d89284d2d4dffe000e6f220add3e3807103d2fc143f8a8b84de966a99cc3625e77429cd8ea87fe520ef9d6619a70e31006a9df77bc3a61", @typed={0x8, 0x77, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x32, 0x0, 0x0, @uid}, @typed={0xed, 0x1a, 0x0, 0x0, @binary="7286351ed0eebebb7a5dcfc16e031249b224f702cab7e2d549fa2d4a3092cd72f9c20c293e7dcf7e135c8734719ebee40edfeee0b36b1ca5a127da4bf558929e10381b428fb171938fb724446e8e91aaccfa1f17803d3995d95c2cf47132c3468a26085dfd8b6c6f00489dcc3d3b382fbe274fc6907796d539e99b018d923838ad25ee11f5c82dc1f6a831c3a965636f49ea0e15e03e941c0ddac0b8d0e47122332b5b077dc864a58e9d42acf2cfe59da5ff18cf867e25306d8957d49c2e44dbebba3207aae32d044098eaab6cf9613403f9ad56f3fb24f4e334e220b22d7e9c5b62f99aff965b5d27"}, @generic="324d9deb6e1a3527275f4f48dacae400728bcc59578b25ed045f3de7ca34150cc7e353d85ed36e5569d0162dffb697660c7716a1a6bf34d6d24dd234d38ce9015f40eb66399a5de984bd548c709e85157e7149b72731b261d05a750c431f8ebb17de87f6a5a92751a6a8150f55cd8cdd34deb41c1fe35b8592a3ca410c0d7fc043848b4e6941f42d246c5344552f8551ba1246b7e75e1ccd0551331700fe7f07565fbecdef674f974d4680c0fe4a17b5489660de302074c27ecd964c84920c69282711b972d7668a0aa50db8d0693e2a3771c7c0e1f1275940ebee55f804cbf0cb74fc24b04ed8f1ba2585c38fa7d311654b", @typed={0xc, 0x27, 0x0, 0x0, @u64=0xffffffffffff8bd7}, @generic="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", @generic="eede76714060e1d952798733b57ba84db06b2d61dc36434b785ccfc26eb184e95ab3279747a34ad77f527dcaa95ae3779f9260dd73accd45a173d54de814aade949b6bea9ea9773ad1c023b2d1e62755e37bac6cd02238bb11baf3d91669e89008eaba91dede8bdde893c62bf4e559c833d5c70eca13270a7bae219241e3e209e8a7f832236fd7ca8286ac6f16402babdce270c94f11ff862ac2d7eada7e413d047cfa85f3c10a665cf30bee45b6828d3f175860c3818683a8c1c64acbe637d4b35df7c7581e3350ee93e10b74a08b292ee009e8520eea764d49e764441f56641cd6"]}, @nested={0x1f3, 0x6f, 0x0, 0x1, [@generic="8f1c34838c4bf5beff22dcd31b59d168ac0417388b37d2e9418b1748dc9aa77605548a", @typed={0x8, 0x41, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x5b65}, @generic="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", @typed={0x7, 0x67, 0x0, 0x0, @str='^)\x00'}, @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}, @generic="6ced711783b36a3420091f3ce8ba590a2e8e1832c7ccab01aeb9b94c47241bac0163fefa095835dfd855be82a7d3abcb75b0561d261522f9b03424a075679d40659e3758afe4bc218eda0b109e2e9c42760c8056216390aa3aebbaf1b5046beb221c1a3db55e8eb5006c2b7617ca6ab87251b632d81faa98416233c062efc04bf06e62ca9c895fe106eb62035903005f3043bd9c0f3e05a98e537bd0b6a2bce67181"]}, @nested={0x1b2, 0x8a, 0x0, 0x1, [@generic="66a6e3008f7e034a92729dd8c5679d13ce46764a364c02f3a5f2beba0ddf4670a99c5535c24729a6b6c39cee403d2f375cf48887faa953d68069c999c5f794367f35c066f3e0f6772fd079f29bc40422ff03dd921fa4c17ce24d71bbe77e214113263366c6d78d1b013123e148a93b926320521bfa9c365b75a320c47ec9fef4fcf4f6ddafdaa253abc9c4236f0cef08fbc636ebf71354bc16ee6257e264ccb6bc6107cd81f65266f5a739aca6714e1f256adb6eff8b07df6142b9abea727d9313952189172fe1a029d4fa2c7030", @generic="6a33266782101877abd16d362d66a29a1aedf5013105cf9ec68510234f7e79679bdc9a64859776b90faedf7f387b61f3443fc1ac18b8dcc4c66bdb3668c83ef6de1bb58bf8bcdf8de3a74e1a7d55572b64d86b3711269920bb766fbc8d76d9b4", @typed={0x8, 0x8, 0x0, 0x0, @u32=0x7ff}, @generic="92ef875dfe59616ebfaade23b96c2137ed84d534fc2240048564698f61e71ba99dfd6a52381630abf30ce620b8bdc1a81e9cb3dea66e10c5fd7ec8e7c78bde3b4d9054304f69f67ce12ddae4fa3bd2bdee7e3bfab423fd10492f573e17e18623af074bbe8e6f05c3cfd6e4396fcb3bed8b168e4e", @typed={0x4, 0x4a}]}]}, 0x18a8}, {&(0x7f0000000380)={0x60, 0x1d, 0x800, 0x70bd2a, 0x25dfdbff, "", [@generic="12d3d464be527ed60f83db3d166dcd62c8872fcfd59bca2c86d44f3f882bbe7a99019c53b91751d3f5c219432ff38f30234e871efb161688b3f7ed2c7c417ca4f33f89df20f3b4c4", @typed={0x8, 0x6d, 0x0, 0x0, @fd}]}, 0x60}, {&(0x7f0000000b40)=ANY=[@ANYBLOB="800300003a0000002bbd7000fcdbdf25ac1d67ac90a2240ff263b68376ed8009d2c553777a95ae4ef435dabd6f4f85878f2310befae82eed1117ac0fa4612fb2b366ad0c73a6bec1146c2e5b1ba9012be52bea982f495784e511ea0b6dd692137ba617bf719148ee16c7eca2390e10795215baf7484adc2faa426d6c92497bdb04c0992e0d20efd2902981e1376184402b58bd9ff0362a779f8b211f594b5805d64232bda679093ad64ef53f76392b12dc2fa1cbe569650c7e2f664f39dbeb24a4b96d04eebba1534a637f65493cef360705a32712eada20a52c793ae1aac5ec78f112f07834de251e78b2afc58d937f48470b9c51bfc08444d05dcbfe4a793739c572a4e686fd7ca825001900ef65fdf8c3968972e32f8e46b15ed380afb286cc18e0d4986b57c5bf03d8dcd18200000033c3177616800f175b57ee97ef3b657cc6981c37899aaa2eb4aa43257efc8f4236539e284f7e22af60f54a90cc32a2c82e7fb0b02e84bd2e8256466cdeafb42d17495d0aa7450a603ec6bd5c852667a76407695a3fbb4d510a303901e86798c2be85334776164c0ff6f9fa4d84c490eb9539e31b6490e2beea533ec35836e7565355e5572f5627294b15b47cf6cbd21a3a3d581309026984b45cc2da6464f5f176138addb894827024bdaf85647ef711f02ea1298e5edf5241bb0ef5f3147cdb4c62e3bfd173ca17ebc15dd7fde8ae9ff40d927b68b901d509d4849aa4d09a7753b33321d85d011f8008006400", @ANYRES32=r3, @ANYBLOB="0400160098d6884262b2b110d0d504f87feec1fcff24e151108fbd4323137fc8e079a89d9ddb0143b6d06707963014315ff3bee80b1f26081c1a14d1333607c286350f66d73add723ae3d08414136c78a4d165e563a993eac82a491693356e130cbd9695c3775a72c164d269bf1a50805d06af20ddcbf2ae6a5e4ea121f8e4b0cb5cb4c550d36890e6dc6a275b2bcd794e5a06e778e5783f000000304f896d0f79fe03535b149f97f4d99070615c4e3b20d69e4383a36234366df4d374c100f4f88f46f2ab041c72ca98635df48bc158afcd56d6f67759931b024ca2683aad627d7763401e7acced039d70c5f6e441fbfcc0a372d98f77095e065cd7d0b1c7b41b40bce894ea7259f0c1c43f72f68b9e3ccb99810fff178b5929903e48e08a5131515354430164ca906ec2e9bc98a6b51df86065827540d74b80abb24f96de0ad49ffbdbc92ba516f1d22d0c0039006cbb00000000000000000008000d00ac1e01010000ea284b4e1c32dc612203382f266eecd40be76bb6809d795ee1e64934d2529a1e8e2ae8df4a50ad660caab24ba3ed6a50cc72fc4406ae1de59f6c7fbcc8fd1e5a7af3d37a091ff218a7fb7a489acde199e402d7bdee54015c7dee7a5b6b00911a0de2f1a2217779b0c4614cbdfdc5e3a3c243d220724a946f491d2430db91cafc378b8288bf6f37bb271b11142118ec14e9629b906ed6ae0f825436e8a0fdadf3c656578e899de1fa671ad7fa197db6e2adbffcc8520cfec0755466b603707d148c3ab19fd45692a2fb350c738f28082c022e680ba22e3550b209ebf4f34aac442698b354301447f01f744d8f653a024085bbde5ff08fcf8d14d28634cc6fbdfc190cde045cf7d130211e7f83a95c29641252ae01faf83b78311f166fa3badc760da211803f7e725ac0cf96608abb4629736a311e1f17be2876b175b2970329a280313327336b5efc202c1e64556521bd7fbae24fe88f2e02edb2f5e5b2ef7bc1768f632efd0cce9b2dad302bba262dd535eda0735324d399461142c4b3c25f6d26765e2a4cfa8923f5300602adc431e8e9fe7efffe4ffa259fbdc815521303116af4bf3a78549cc233d6311a2484c384a6463c5d12f9"], 0x380}], 0x5, &(0x7f0000004b80)=[@rights={{0x1c, 0x1, 0x1, [r2, r5, r6]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}], 0x58, 0x24000000}, 0x0)
chdir(0x0)
setns(r4, 0x0)
r10 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FITRIM(r10, 0xc0185879, &(0x7f0000000300)={0x5000000, 0xaa000000})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)

15:20:44 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 4)

15:20:44 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x80000000000, 0x10000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='&/\x06\x00\x00\x00\x8d\xbc\xd9&i\x9fsx\xf8\xab\x8a\xb2$\xc6/-\xbb\xb1\xeb\xeb\xb9\xc1\xf6\x90\xbfFX\x8be@M\xfaLwht\x14\xbb\x83\xe6\x85\xc4\x81\xd4\xe4\xe5\xd9\x9fw\x9b\xaa3\x1e\xfe\x06\x03\xc4\x1f5$|*\xedC\x9e dO/Ij]\xdcc\xd9\xaf\xce#\xc0\xbd\xf95\xa5\xa7bGHZ\no: \xec\xaa\b;w-\xe5\xc0{\b\xcd\xd2\xf4\xba\xfbw\n\x88s\x0e\"{>\xed\x9e\x116\xd3\xefL\xe5\xbb\xf7\x9dc\x9d\x934!\xff\xc8\x88\x8b\x1dG\xf6\xb1\xb8`nW\xa7-\xdfKW\xc1\xcaLo\xdehD.\xde\x9c|\x9e\x83C\x94D\xa8^\xd0\xb9\xe3\xe6 Jm\xcf\xd1a\x10\x9c\x9b\x9c\xefVrm\x1a\xf8\xa1\x17\xa5\xd2\xe6`\xfbW\x01}\x91\x8f%\x86rO4n\x94`\x02E\x06\x80d\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)='%%!-/\be\xd0\xfb\xdc\xdax\xa6\x84\xd7\x88E\xfe\xc2z\x92\xdf\x1e\xa9:\xe2\r\x13J\v\xbc\x8e\xff\xa3\xa0\xc23\x00\xca]\xc4\x94\x95\xf5Fr\x80\x014\xc2u\xd9PZ\x8a\xeb\x81\xb4~\x7f]:\xd7M\xb0\xe2\xcc\xc0#c9\x8e\xbdh\x17\xd3XBvc$\xc92a;o\x84\x85\xfd\xc2\x00Y\xcd\x11C\x8f8P\\$\x0fv\xbf/l\x1cX\x1c\xc2L\xa4\xe9\xe7\x12\xb4=;\xce\x0f_\t\x9bT |26\xa4Wm\x89l\xb7\xa1.0\xf6\xa1\xd6\v\xf6T*d\xb6\xe1\x90&\xebX\x81\xc4!j\xe5f\x90\xc1\xb8r*\xee\x1b\x8bgWw\xac4*\b\x19\x7fg\xec\x8ad\x84\x84\xcb\x18\xbfeR\xe7\x8d\xa4\xbf(\xa1\xc2;D@\x18\xa5\x19>&\xce\x9e\x17\xe7\x17(\xa9\xb0~\x8f\xbc\x9as\xf7\xc1\xbf\xd3\x93\xd4\xf2\xf6\xa27\xc9\xd1\xf6I\xcb\xbe\xec\x06\xf1\x1e\x127]b\xa8\xa8\xd7u\xf5\x9d1\x0e\xf0\xd6.\x19\x9d\xd4\xd0$\xb8\x13\x00'/269, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x9})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)

15:20:44 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2051.451703] device wlan1 left promiscuous mode
15:20:44 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000100))

[ 2051.468032] FAULT_INJECTION: forcing a failure.
[ 2051.468032] name failslab, interval 1, probability 0, space 0, times 0
[ 2051.469582] CPU: 0 PID: 10303 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2051.470418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2051.471428] Call Trace:
[ 2051.471781]  dump_stack+0x107/0x167
[ 2051.472346]  should_fail.cold+0x5/0xa
[ 2051.472818]  ? create_object.isra.0+0x3a/0xa30
[ 2051.473451]  should_failslab+0x5/0x20
[ 2051.473923]  kmem_cache_alloc+0x5b/0x310
[ 2051.474427]  create_object.isra.0+0x3a/0xa30
[ 2051.474965]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2051.475595]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 2051.476219]  ? inet_netconf_notify_devconf+0xdd/0x250
[ 2051.476855]  __alloc_skb+0xb1/0x5b0
[ 2051.477310]  inet_netconf_notify_devconf+0xdd/0x250
[ 2051.477937]  inetdev_event+0x105e/0x1670
[ 2051.478440]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2051.479098]  ? devinet_init_net+0x650/0x650
[ 2051.479631]  ? nh_netdev_event+0x8c/0x370
[ 2051.480140]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 2051.480775]  raw_notifier_call_chain+0xb3/0x110
[ 2051.481361]  call_netdevice_notifiers_info+0xba/0x130
[ 2051.482012]  unregister_netdevice_many+0x852/0x1490
[ 2051.482614]  ? netdev_pick_tx+0xc70/0xc70
[ 2051.483123]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2051.483744]  ? queue_delayed_work_on+0xb4/0xe0
[ 2051.484290]  ? trace_hardirqs_on+0x5b/0x180
15:20:44 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0xc0d2, 0x0, 0x10000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x4, 0xff, 0x7f, 0x0, 0x3, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x400, 0x4, @perf_bp={&(0x7f0000000040)}, 0x1148, 0x4, 0x0, 0x4, 0x3f, 0x3, 0xff, 0x0, 0xffff, 0x0, 0x2}, 0x0, 0x2, r0, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x80}}, './file0\x00'})
ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400))
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)

[ 2051.484808]  unregister_netdevice_queue+0x201/0x2c0
[ 2051.485538]  ? unregister_netdevice_many+0x1490/0x1490
[ 2051.486160]  ? linkwatch_fire_event+0x63/0x190
[ 2051.486702]  __tun_detach+0xfc1/0x12b0
[ 2051.487169]  tun_chr_close+0xc4/0x250
[ 2051.487625]  __fput+0x285/0x9f0
[ 2051.488010]  ? __tun_detach+0x12b0/0x12b0
[ 2051.488504]  task_work_run+0xe2/0x1a0
[ 2051.488969]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2051.489566]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2051.490139]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2051.490740] RIP: 0033:0x7fa43fdb1b19
[ 2051.491190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2051.493367] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2051.494267] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2051.495117] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2051.495961] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2051.496811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2051.497681] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:20:44 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:20:44 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000100))

[ 2051.589601] device wlan1 entered promiscuous mode
[ 2051.593215] device wlan1 left promiscuous mode
15:20:44 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x1, 0x0, 0x1, {0x0, r4}}, 0x8)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

15:20:44 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), 0x0)

15:20:44 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:20:44 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
io_uring_enter(r0, 0x42db, 0x13b78, 0x0, &(0x7f0000000040)={[0x5]}, 0x8)
r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x658, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="0d5cf357024ee1867f470cf78b628c1b7a0a7d415f45d7083528ad198d2565e8b4d1141d6c73d8ed79396a4258c387b5580143eb82c7e3fdc17f5779435c4a1a74c8d7edb562ded15915ef09a0ec9d82326aac569e36ac33509b10d1b95dee1a0b9ac1df085d78b4f5fddfd0db1ebf54bd4fb68bd7d3058842053009e9a583d70decbdc19b3b584ae49354423c7ffe6d31f4c2fcaf4de4ba5c", 0x99, 0x4}], 0x1000, &(0x7f0000000500)={[{@rodir}, {@shortname_mixed}, {@shortname_lower}, {@fat=@showexec}, {@uni_xlateno}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@utf8no}, {@shortname_winnt}, {@utf8}], [{@smackfsfloor={'smackfsfloor', 0x3d, ']$}\xe1\xd65y\xedcgz\x96\xb5}Rm2\x8a\xcf\xc6\x8b|\xa9\xcbYuU\x80\x95\xf7\xb5qO\xf3z'}}, {@audit}, {@seclabel}]})
openat(r1, &(0x7f0000000300)='./file0\x00', 0x80000, 0x103)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000240))
r4 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0)
syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r8, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x1, &(0x7f00000000c0)="336ab7b948353748332461163e568c38cd622b6c0eeec7aaf799f07fa17447f25c5155f3e1f23e09f6eea01faa4c3abbb0f0aacc4d247a72b36f339f5b1473cee51d73a18df36e587ecae9da43a9cafc17a1af4ddc5781e6f0ef7b06e31f3caea5cd47f6d8e88b69882f5452d897a0ae25dfa67d18ab077bdef340cf556ebf94de8497995d1c81bb3fb8f62ba92b", 0x0, 0x0, 0x1, {0x3, r9}}, 0xd4f)
syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f0000000340), &(0x7f0000000280)='./file0/file0\x00', 0x200, 0x6000, 0x0, {0x0, r9}}, 0x80000000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)
dup2(0xffffffffffffffff, r2)

[ 2051.671375] loop5: detected capacity change from 0 to 1536
[ 2051.685746] loop5: detected capacity change from 0 to 1536
[ 2051.742453] device wlan1 entered promiscuous mode
[ 2051.744994] device wlan1 left promiscuous mode
15:20:57 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 5)

15:20:57 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0x8, 0x81, 0x3f, 0x0, 0x7, 0x8200, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8004, 0xff}, 0x8406, 0x891, 0xffffffff, 0x5, 0xfffffffffffffff8, 0xc5, 0x1ff, 0x0, 0x0, 0x0, 0xb1cf}, 0x0, 0x2, r0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)

15:20:57 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:20:57 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000040)={0x0, 0x7fffffff})
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x10002, 0x80)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r3}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0/file0\x00'})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)

15:20:57 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000180)=""/54, 0x36}], 0x2, &(0x7f0000000200)=""/219, 0xdb}, 0x0, 0x0, 0x0, {0x3}}, 0x2)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r5, 0xfffff000)
dup2(0xffffffffffffffff, r0)

15:20:57 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), 0x0)

15:20:57 executing program 2:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000c, 0x4000010, r0, 0xfffff000)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/165, 0xa5})
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000180), &(0x7f0000000500)=""/4096, 0x1000})

15:20:57 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/211, 0xd3})
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2064.643884] FAULT_INJECTION: forcing a failure.
[ 2064.643884] name failslab, interval 1, probability 0, space 0, times 0
[ 2064.645516] CPU: 1 PID: 10343 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2064.646325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2064.647301] Call Trace:
[ 2064.647623]  dump_stack+0x107/0x167
[ 2064.648049]  should_fail.cold+0x5/0xa
[ 2064.648497]  ? __alloc_skb+0x6d/0x5b0
[ 2064.648942]  should_failslab+0x5/0x20
[ 2064.649388]  kmem_cache_alloc_node+0x55/0x330
[ 2064.649943]  __alloc_skb+0x6d/0x5b0
[ 2064.650394]  inet6_netconf_notify_devconf+0x84/0x1a0
[ 2064.651012]  addrconf_sysctl_unregister+0x134/0x1c0
[ 2064.651620]  addrconf_ifdown.isra.0+0x1230/0x15f0
[ 2064.652217]  ? addrconf_dad_run+0x180/0x180
[ 2064.652753]  ? find_held_lock+0x2c/0x110
[ 2064.653256]  addrconf_notify+0x161/0x2390
[ 2064.653769]  ? tun_device_event+0x71/0x1160
[ 2064.654296]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 2064.654926]  ? inet6_ifinfo_notify+0x150/0x150
[ 2064.655484]  ? failover_register+0x530/0x530
[ 2064.656022]  ? cfg80211_netdev_notifier_call+0x298/0x10c0
[ 2064.656692]  ? igmp_netdev_event+0x31/0x810
[ 2064.657216]  ? ipmr_device_event+0x192/0x1f0
[ 2064.657760]  raw_notifier_call_chain+0xb3/0x110
[ 2064.658337]  call_netdevice_notifiers_info+0xba/0x130
[ 2064.658962]  unregister_netdevice_many+0x852/0x1490
[ 2064.659565]  ? netdev_pick_tx+0xc70/0xc70
[ 2064.660071]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2064.660705]  ? queue_delayed_work_on+0xb4/0xe0
[ 2064.661262]  ? trace_hardirqs_on+0x5b/0x180
[ 2064.661796]  unregister_netdevice_queue+0x201/0x2c0
[ 2064.662399]  ? unregister_netdevice_many+0x1490/0x1490
[ 2064.663037]  ? linkwatch_fire_event+0x63/0x190
[ 2064.663588]  __tun_detach+0xfc1/0x12b0
[ 2064.664064]  tun_chr_close+0xc4/0x250
[ 2064.664526]  __fput+0x285/0x9f0
[ 2064.664925]  ? __tun_detach+0x12b0/0x12b0
[ 2064.665433]  task_work_run+0xe2/0x1a0
[ 2064.665913]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2064.666512]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2064.667096]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2064.667718] RIP: 0033:0x7fa43fdb1b19
[ 2064.668170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2064.670409] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2064.671331] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2064.672200] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2064.673060] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2064.673930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2064.674793] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2064.691015] device wlan1 entered promiscuous mode
15:20:57 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), 0x0)

[ 2064.732727] device wlan1 left promiscuous mode
15:20:57 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 6)

15:20:57 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'caif0\x00'})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)

15:20:57 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hci_vhci', 0x80, 0x10)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3, 0x50, 0x5, 0x40, 0x0, 0x6, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x18008, 0xc03, 0x4, 0x6, 0xbde, 0x5, 0x8, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xf, r0, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

15:20:57 executing program 5:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r1, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x8}}}, 0x9)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)
dup2(0xffffffffffffffff, r2)

[ 2064.791963] FAULT_INJECTION: forcing a failure.
[ 2064.791963] name failslab, interval 1, probability 0, space 0, times 0
[ 2064.793462] CPU: 1 PID: 10369 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2064.794275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2064.795225] Call Trace:
[ 2064.795536]  dump_stack+0x107/0x167
[ 2064.795956]  should_fail.cold+0x5/0xa
[ 2064.796399]  ? create_object.isra.0+0x3a/0xa30
[ 2064.796923]  should_failslab+0x5/0x20
[ 2064.797362]  kmem_cache_alloc+0x5b/0x310
[ 2064.797840]  create_object.isra.0+0x3a/0xa30
[ 2064.798346]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2064.798933]  kmem_cache_alloc_node+0x169/0x330
[ 2064.799470]  __alloc_skb+0x6d/0x5b0
[ 2064.799915]  inet6_netconf_notify_devconf+0x84/0x1a0
[ 2064.800498]  addrconf_sysctl_unregister+0x134/0x1c0
[ 2064.801091]  addrconf_ifdown.isra.0+0x1230/0x15f0
[ 2064.801660]  ? addrconf_dad_run+0x180/0x180
[ 2064.802154]  ? find_held_lock+0x2c/0x110
[ 2064.802630]  addrconf_notify+0x161/0x2390
[ 2064.803106]  ? tun_device_event+0x71/0x1160
[ 2064.803608]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 2064.804199]  ? inet6_ifinfo_notify+0x150/0x150
[ 2064.804722]  ? failover_register+0x530/0x530
[ 2064.805228]  ? cfg80211_netdev_notifier_call+0x298/0x10c0
[ 2064.805868]  ? igmp_netdev_event+0x31/0x810
[ 2064.806363]  ? ipmr_device_event+0x192/0x1f0
[ 2064.806871]  raw_notifier_call_chain+0xb3/0x110
[ 2064.807408]  call_netdevice_notifiers_info+0xba/0x130
[ 2064.807997]  unregister_netdevice_many+0x852/0x1490
[ 2064.808571]  ? netdev_pick_tx+0xc70/0xc70
[ 2064.809052]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2064.809662]  ? queue_delayed_work_on+0xb4/0xe0
[ 2064.810186]  ? trace_hardirqs_on+0x5b/0x180
[ 2064.810684]  unregister_netdevice_queue+0x201/0x2c0
[ 2064.811253]  ? unregister_netdevice_many+0x1490/0x1490
[ 2064.811857]  ? linkwatch_fire_event+0x63/0x190
[ 2064.812387]  __tun_detach+0xfc1/0x12b0
[ 2064.812835]  tun_chr_close+0xc4/0x250
[ 2064.813267]  __fput+0x285/0x9f0
[ 2064.813654]  ? __tun_detach+0x12b0/0x12b0
[ 2064.814130]  task_work_run+0xe2/0x1a0
[ 2064.814571]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2064.815137]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2064.815689]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2064.816278] RIP: 0033:0x7fa43fdb1b19
[ 2064.816703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2064.818817] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2064.819688] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2064.820495] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2064.821308] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2064.822126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2064.822930] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:20:57 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:20:57 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:20:57 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 7)

[ 2064.899426] device wlan1 entered promiscuous mode
15:20:57 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x1, 0x408181)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x4ffdd)

[ 2064.906690] device wlan1 left promiscuous mode
[ 2064.919892] device wlan1 entered promiscuous mode
15:20:57 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x1)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40004307, 0x22c01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0xac00, 0x0, 0x10000, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x1, 0x1, 0xf9, 0x0, 0x40, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x470fd4cf, 0x2, @perf_config_ext={0x7f, 0x80000001}, 0x8002, 0x7ff, 0x3ff, 0x5, 0xfffffffffffffffd, 0x3, 0xfff, 0x0, 0x10000, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x1)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x7, 0x80, 0x6, 0x2, 0x0, 0x3ff, 0x8b00, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x0, 0x1000}, 0x841, 0x9e, 0x0, 0x8, 0x6, 0x401, 0x1f, 0x0, 0x80000000, 0x0, 0x7fff}, 0x0, 0x3, 0xffffffffffffffff, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r2, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x4e22, @local}}}, 0x88)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=<r3=>0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x8, 0x81, 0x0, 0x3ff, 0x10004, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb6, 0x2, @perf_bp, 0x401, 0x3, 0xffffff00, 0x9, 0x7, 0xfffffffa, 0x3, 0x0, 0xfffffd0a, 0x0, 0x3}, r3, 0x4, r2, 0x1)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x6d542)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)

[ 2064.937861] device wlan1 left promiscuous mode
15:20:57 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, @out_args}, './file0\x00'})
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x20, 0x80, 0x81, 0x5, 0x0, 0x100000001, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x8, 0x0, 0x5, 0xf, 0x0, 0xa5d, 0xf801, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r2, 0x1)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

[ 2064.947423] FAULT_INJECTION: forcing a failure.
[ 2064.947423] name failslab, interval 1, probability 0, space 0, times 0
[ 2064.948748] CPU: 1 PID: 10386 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2064.949531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2064.950458] Call Trace:
[ 2064.950760]  dump_stack+0x107/0x167
[ 2064.951172]  should_fail.cold+0x5/0xa
[ 2064.951606]  should_failslab+0x5/0x20
[ 2064.952036]  __kmalloc_node_track_caller+0x74/0x3b0
[ 2064.952596]  ? inet6_netconf_notify_devconf+0x84/0x1a0
[ 2064.953188]  __alloc_skb+0xb1/0x5b0
[ 2064.953608]  inet6_netconf_notify_devconf+0x84/0x1a0
[ 2064.954177]  addrconf_sysctl_unregister+0x134/0x1c0
[ 2064.954739]  addrconf_ifdown.isra.0+0x1230/0x15f0
[ 2064.955286]  ? addrconf_dad_run+0x180/0x180
[ 2064.955770]  ? find_held_lock+0x2c/0x110
[ 2064.956234]  addrconf_notify+0x161/0x2390
[ 2064.956701]  ? tun_device_event+0x71/0x1160
[ 2064.957189]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 2064.957777]  ? inet6_ifinfo_notify+0x150/0x150
[ 2064.958294]  ? failover_register+0x530/0x530
[ 2064.958794]  ? cfg80211_netdev_notifier_call+0x298/0x10c0
[ 2064.959418]  ? igmp_netdev_event+0x31/0x810
[ 2064.959902]  ? ipmr_device_event+0x192/0x1f0
[ 2064.960404]  raw_notifier_call_chain+0xb3/0x110
[ 2064.960934]  call_netdevice_notifiers_info+0xba/0x130
[ 2064.961524]  unregister_netdevice_many+0x852/0x1490
[ 2064.962089]  ? netdev_pick_tx+0xc70/0xc70
[ 2064.962560]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2064.963150]  ? queue_delayed_work_on+0xb4/0xe0
[ 2064.963662]  ? trace_hardirqs_on+0x5b/0x180
[ 2064.964150]  unregister_netdevice_queue+0x201/0x2c0
[ 2064.964713]  ? unregister_netdevice_many+0x1490/0x1490
[ 2064.965310]  ? linkwatch_fire_event+0x63/0x190
[ 2064.965832]  __tun_detach+0xfc1/0x12b0
[ 2064.966276]  tun_chr_close+0xc4/0x250
[ 2064.966711]  __fput+0x285/0x9f0
[ 2064.967082]  ? __tun_detach+0x12b0/0x12b0
[ 2064.967550]  task_work_run+0xe2/0x1a0
[ 2064.967986]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2064.968541]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2064.969086]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2064.969678] RIP: 0033:0x7fa43fdb1b19
[ 2064.970097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2064.972176] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2064.973035] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2064.973858] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2064.974664] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2064.975474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2064.976280] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:20:57 executing program 3:
openat$sr(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2065.017636] device wlan1 entered promiscuous mode
[ 2065.018873] device wlan1 left promiscuous mode
15:21:10 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:21:10 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8140, 0x1, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0))
r3 = getpid()
r4 = syz_open_procfs$namespace(r3, &(0x7f00000005c0)='ns/ipc\x00')
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x5)
r6 = syz_open_dev$evdev(&(0x7f0000004b00), 0xfffffffffffffffa, 0x30100)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r7, 0xfffff000)
r8 = getpid()
syz_open_procfs$namespace(r8, &(0x7f00000005c0)='ns/ipc\x00')
getgroups(0x3, &(0x7f0000004b40)=[0xffffffffffffffff, <r9=>0xee00, 0x0])
[ 2077.319241] device wlan1 entered promiscuous mode
[ 2077.320575] device wlan1 left promiscuous mode
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001500)={0x390, 0x33, 0x2, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x3, 0x0, 0x0, @pid}, @typed={0x6, 0x6c, 0x0, 0x0, @str='\xa4\x00'}, @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@local}, @typed={0x42, 0x89, 0x0, 0x0, @binary="863f7e7df5a1cee6cbb30bcb87877e85707159afb54566ebd06b50c9660230382ca68fcd63e375150553b4a3dd68a1a7865973260f8387debdc801422477"}, @generic="12cf1de94cdba4e7e49fd94e51ba2d551fe983bd14fa10a2b869f8ba88e528695a0e6251ea204f91ae731c244a9aa550671f1932599cb6efcd128b72e50d1a0a6e026bfff05424825877391285d5ab72bba812", @nested={0x2a7, 0xe, 0x0, 0x1, [@typed={0xf, 0x77, 0x0, 0x0, @str='{,-+:/^[$-\x00'}, @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x81, 0x0, 0x0, @pid}, @generic="55f49891dffc3f70cc7489feb263043c265c56f0b06da75fe4442b36965907398adc19293fd0590fbe67b76fc91c76c3455a183e02599c0cb44bb6517dab6562c122a79910dfe3022ce053a83ae85ed4597625c4a82458346cb4086d26eb9c6671305cbd2321446b72ca2e6816dd9abd3b52cfddd7f03529cd29c528bd2fa21ca1000674d573cd716c", @generic="648c15d481c0da2a722228ecfe2386f1a6526346022b4a699f1bd039f0b11e6f4688ce9478b24762c968d00de0d020bc46e636d9116cf9b24b21ba954d66edff14cb524a7c2d6c7a1ee62584a8bd79dca129fef09f24ab75f9a7fd7dbee2162ae5f26d072f8e2db7dec9307d5bd3cb8e2f187628199635a6408305190b76c4ead831ab21bebd9f2af37e43b64f1c6d63b4fe03cf55922e90c5e40f26c48f204fc69a1935a46804143470a04a7617da420a41267b94fd6383f1a0f87840ae83f06e45cc2a401c2e20ce139509fac75f441f88383ea643292857ed02c51a6fe25da3f8ad3e63f21324cf", @typed={0x4, 0x58, 0x0, 0x0, @binary}, @generic, @generic="04d637eca431cbf906cb873462c32e00cd6c228268494994358c7f38356b903a7be8f194e5e4ceb326938908371358d652e7333d324226ed8906a5a5cd64889abb0de2eeb49f8ed9b60af9dfc9aa45957116fe6dad971c468fbdd3c406ce9aa8aeb9c85995acbc87f9ba60733b03fe36ec58af39144d76912686706498d3e6569e99c22a002bcf1009a1f9504588ec78f2004b0d51f35acbe8f6735d5c439f7ac2b91c0583f412e687e93465aeed635d0e7970ea4c43ad44df1f01360c89cbbf7cfb15febfe8f28b2bfb8ea0276aecb0bf64e6ce211fd9ad0d1d0d84627d83c611a824c45e9afd34d996fe4de70946a679", @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@empty}]}, 0x390}, {&(0x7f00000018c0)={0x15c4, 0x42, 0x20, 0x70bd27, 0x25dfdbfd, "", [@nested={0x144d, 0x5d, 0x0, 0x1, [@generic="eab0fe8fb4a603af29d76a4c7c052ffafd2bd3ef6d7247b8b2e5c0c22a548c4e001d0e5bc1f72526158b9a63ed226d7c742743b2c694d85a8e567d4469f3a29d84d09b3b6c25815b2a5c8e9eab76eb8dbd52968a7e5fd4", @generic="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", @generic="bcba2716e49b1bc75cdfd1adfa66d5c8c666a55f3297e86842f8b1426d360c8a74eafffd648378b4b13d6c88fb607f5ec69cb203b36af910c09f81944256ca9908d25ebd0c984466467f222b94e012e0c186774f00243a26b74620b526e6aa9a7b6e24dcd99d18b0797301e2388b0ab9de6164731c87df72aa97ed8c40fc2b2eacde4552ec5e1410c2103912517e8eda7f0bbcbb704f9e06652accb682e0fafc228013f051b476a4a70aebdd8c5d2cc68b2d3028efebc2fc", @generic="486e86eae6fe38cdb00f0edb2a29dbc4bcca0a53630e55fb6a8982657e43c8b5714b04e89f5524497ffd7fd4b050ab2f64fdf1cce09878abe9a9c6aa242556f54fa3d9b5d1ed9318912901ec849638647e2d67fd5fd03e81ce7fafe3e7bfb8e0cd2ba1dcd57002039a827c65edb4394f76a0c7685c17604392e675b434c55d566db52f4dfe896f59fd00779a9614054f6b7200556f9371", @typed={0x101, 0x6c, 0x0, 0x0, @binary="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"}, @generic="5d72ddc4baa9494444e78788a76452ac98cead9963416753f815260946fae422391b851e7395d1b22a83a24afe5e2931c420c371df67c78345d22ff35cf9fe2f8bfab4207d7682edb4c0aafdba3bb3067a0d40549613acc4d84311790e8dc32db815db1451bee5e89be8d9886d39073b0f5fe81227a8b4969ae0445cc378a562ccb17d85f28b494b", @typed={0x8, 0x5d, 0x0, 0x0, @fd}, @generic="9f6c6103ed2bb47b6df9478207cf8f8bc44b28ed4595af6d5a51f31518d30c960324633ffc6db452e302d3046d32def9ec176dbfd85baa42c03c1c64f7547a07fb5fa2fad5096adbc4f6ad36ad82f16c45f9c81245ef7798d9327fa11161cb6ed02273ea0edc765741ba65d7e9cbb09bae49a9d47613bfd950065549ad992c5cc08801448814cc1acc457791580a3366b5905ca2bf15b6656f197b1904d70bdc04c7693c5eae185c07024cee97d81b7df190b145699f0d4bae652d18d41dfd79", @generic="6663424e353e62ad982f3d17d0cc61d6082e9e1e954004db94fa38639a60ce2436bfa26cf331b573a45f04bdf9750ec10a6656467a3675bbe4f93faf3f2c9f609691e62878b6ca", @typed={0x8, 0x26, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x15b, 0x7, 0x0, 0x1, [@generic="da6649974f2967993167d54501dc30f9306218b17b3d8bbfa980ecb12525c24669e94e541916e4cd0bdeca75e3ea7fcccf12da46fe5ea6d789a9cf51340e8c0253f0c2a876b811906f0200fbeca1c167d97e879885e76dbcdc6986605e47094fc9b6cf8b5f889f8f64f0417a2ef8dd23309b892c0b82d16eee93dba39435b0ef19ddc4bf91cec68c98f76a", @generic="4f2c2a0c9a7163ad0e219534fbb85c63862d1b76145a1a15256705ff25bb1df3bca8f9489b61847c3082151d250aab54cf8439f1a2fabb08ef8e7d1fe40e299e4f1008dc5db3bf84dcec9ae682f53f9a3fd83f5afeed6e1935caa53e8dfee0135d569f42612bb0042e57a41d9df1e9176eb15c6f128b8fb1948e86f3ae4bfdd2122158ae0ee563a763769f978569bcc744e99c397a9ddae298a93762b73572c5912349561403cf870f2b5012ad5900a835a8b914a889b359b09aeca17cdce73732ef414f5e76fa59bbe594dc"]}, @typed={0x8, 0x40, 0x0, 0x0, @uid=0xee00}]}, 0x15c4}, {&(0x7f0000002ec0)={0x18a8, 0x1d, 0x20, 0x70bd26, 0x25dfdbfc, "", [@generic="6481c31ba8b715f901a11f594bb3b4646b42ce28151ceb8871a48ae175e75b9cf95d0a5822d284194ab85d", @generic="96ac9c1af431e7b01b38c097a0ba57c20a3c7d15f7ff8b1b2e0056727c6bff6dea09046f037f6f749c863ea29d4d22ad7ce363d47ba4cfad75345ecde080c1f10809eb9e55018b49e693e81c117e7ec1670832e6f76b4472e1d32bbe055560991d1f5b98d735a9e966a57f2d1fa21591ac9595c2e80e43857c781fa0f02b006ae27c7378952fc05c2fb1329f144ad2897d23fc50cedf36c1c30c558ae7ad9f62f3ec4d6a2237bb25d3e8903f63556f6606cd0a0d86e3262aa0109498f3da4f4cf28a2a9086561d6640c1b910bc8a5f6bbc3dfae05229b59e67ab149cd030f42962f92e647cafbc691eef788839a541b96f91cd", @nested={0x13cd, 0x5a, 0x0, 0x1, [@generic="691476c08d3ad83951fff6b4b5d4e469d49862853f77bd8966979f3515855731881d4ea233e72200ccdb48590df0e4df190d8e7f3e002860e3f6a1b8fc53fcb763471581e3889098988b566e7cf92e65fcf2741e2711a801555ace1f848a17cc876e4fe52717f4210a9483eab08972c4d93c85b705dd8e16cfe8c1a5ff7e1b8ebc4b5b52d322c1c921a0db1bba81cba12f2ec1869910697e462e0e8c20442aa4fb66170317aa9bccb248e21bba63704a5403d89284d2d4dffe000e6f220add3e3807103d2fc143f8a8b84de966a99cc3625e77429cd8ea87fe520ef9d6619a70e31006a9df77bc3a61", @typed={0x8, 0x77, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x32, 0x0, 0x0, @uid}, @typed={0xed, 0x1a, 0x0, 0x0, @binary="7286351ed0eebebb7a5dcfc16e031249b224f702cab7e2d549fa2d4a3092cd72f9c20c293e7dcf7e135c8734719ebee40edfeee0b36b1ca5a127da4bf558929e10381b428fb171938fb724446e8e91aaccfa1f17803d3995d95c2cf47132c3468a26085dfd8b6c6f00489dcc3d3b382fbe274fc6907796d539e99b018d923838ad25ee11f5c82dc1f6a831c3a965636f49ea0e15e03e941c0ddac0b8d0e47122332b5b077dc864a58e9d42acf2cfe59da5ff18cf867e25306d8957d49c2e44dbebba3207aae32d044098eaab6cf9613403f9ad56f3fb24f4e334e220b22d7e9c5b62f99aff965b5d27"}, @generic="324d9deb6e1a3527275f4f48dacae400728bcc59578b25ed045f3de7ca34150cc7e353d85ed36e5569d0162dffb697660c7716a1a6bf34d6d24dd234d38ce9015f40eb66399a5de984bd548c709e85157e7149b72731b261d05a750c431f8ebb17de87f6a5a92751a6a8150f55cd8cdd34deb41c1fe35b8592a3ca410c0d7fc043848b4e6941f42d246c5344552f8551ba1246b7e75e1ccd0551331700fe7f07565fbecdef674f974d4680c0fe4a17b5489660de302074c27ecd964c84920c69282711b972d7668a0aa50db8d0693e2a3771c7c0e1f1275940ebee55f804cbf0cb74fc24b04ed8f1ba2585c38fa7d311654b", @typed={0xc, 0x27, 0x0, 0x0, @u64=0xffffffffffff8bd7}, @generic="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", @generic="eede76714060e1d952798733b57ba84db06b2d61dc36434b785ccfc26eb184e95ab3279747a34ad77f527dcaa95ae3779f9260dd73accd45a173d54de814aade949b6bea9ea9773ad1c023b2d1e62755e37bac6cd02238bb11baf3d91669e89008eaba91dede8bdde893c62bf4e559c833d5c70eca13270a7bae219241e3e209e8a7f832236fd7ca8286ac6f16402babdce270c94f11ff862ac2d7eada7e413d047cfa85f3c10a665cf30bee45b6828d3f175860c3818683a8c1c64acbe637d4b35df7c7581e3350ee93e10b74a08b292ee009e8520eea764d49e764441f56641cd6"]}, @nested={0x1f3, 0x6f, 0x0, 0x1, [@generic="8f1c34838c4bf5beff22dcd31b59d168ac0417388b37d2e9418b1748dc9aa77605548a", @typed={0x8, 0x41, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x5b65}, @generic="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", @typed={0x7, 0x67, 0x0, 0x0, @str='^)\x00'}, @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}, @generic="6ced711783b36a3420091f3ce8ba590a2e8e1832c7ccab01aeb9b94c47241bac0163fefa095835dfd855be82a7d3abcb75b0561d261522f9b03424a075679d40659e3758afe4bc218eda0b109e2e9c42760c8056216390aa3aebbaf1b5046beb221c1a3db55e8eb5006c2b7617ca6ab87251b632d81faa98416233c062efc04bf06e62ca9c895fe106eb62035903005f3043bd9c0f3e05a98e537bd0b6a2bce67181"]}, @nested={0x1b2, 0x8a, 0x0, 0x1, [@generic="66a6e3008f7e034a92729dd8c5679d13ce46764a364c02f3a5f2beba0ddf4670a99c5535c24729a6b6c39cee403d2f375cf48887faa953d68069c999c5f794367f35c066f3e0f6772fd079f29bc40422ff03dd921fa4c17ce24d71bbe77e214113263366c6d78d1b013123e148a93b926320521bfa9c365b75a320c47ec9fef4fcf4f6ddafdaa253abc9c4236f0cef08fbc636ebf71354bc16ee6257e264ccb6bc6107cd81f65266f5a739aca6714e1f256adb6eff8b07df6142b9abea727d9313952189172fe1a029d4fa2c7030", @generic="6a33266782101877abd16d362d66a29a1aedf5013105cf9ec68510234f7e79679bdc9a64859776b90faedf7f387b61f3443fc1ac18b8dcc4c66bdb3668c83ef6de1bb58bf8bcdf8de3a74e1a7d55572b64d86b3711269920bb766fbc8d76d9b4", @typed={0x8, 0x8, 0x0, 0x0, @u32=0x7ff}, @generic="92ef875dfe59616ebfaade23b96c2137ed84d534fc2240048564698f61e71ba99dfd6a52381630abf30ce620b8bdc1a81e9cb3dea66e10c5fd7ec8e7c78bde3b4d9054304f69f67ce12ddae4fa3bd2bdee7e3bfab423fd10492f573e17e18623af074bbe8e6f05c3cfd6e4396fcb3bed8b168e4e", @typed={0x4, 0x4a}]}]}, 0x18a8}, {&(0x7f0000000380)={0x60, 0x1d, 0x800, 0x70bd2a, 0x25dfdbff, "", [@generic="12d3d464be527ed60f83db3d166dcd62c8872fcfd59bca2c86d44f3f882bbe7a99019c53b91751d3f5c219432ff38f30234e871efb161688b3f7ed2c7c417ca4f33f89df20f3b4c4", @typed={0x8, 0x6d, 0x0, 0x0, @fd}]}, 0x60}, {&(0x7f0000000b40)=ANY=[@ANYBLOB="800300003a0000002bbd7000fcdbdf25ac1d67ac90a2240ff263b68376ed8009d2c553777a95ae4ef435dabd6f4f85878f2310befae82eed1117ac0fa4612fb2b366ad0c73a6bec1146c2e5b1ba9012be52bea982f495784e511ea0b6dd692137ba617bf719148ee16c7eca2390e10795215baf7484adc2faa426d6c92497bdb04c0992e0d20efd2902981e1376184402b58bd9ff0362a779f8b211f594b5805d64232bda679093ad64ef53f76392b12dc2fa1cbe569650c7e2f664f39dbeb24a4b96d04eebba1534a637f65493cef360705a32712eada20a52c793ae1aac5ec78f112f07834de251e78b2afc58d937f48470b9c51bfc08444d05dcbfe4a793739c572a4e686fd7ca825001900ef65fdf8c3968972e32f8e46b15ed380afb286cc18e0d4986b57c5bf03d8dcd18200000033c3177616800f175b57ee97ef3b657cc6981c37899aaa2eb4aa43257efc8f4236539e284f7e22af60f54a90cc32a2c82e7fb0b02e84bd2e8256466cdeafb42d17495d0aa7450a603ec6bd5c852667a76407695a3fbb4d510a303901e86798c2be85334776164c0ff6f9fa4d84c490eb9539e31b6490e2beea533ec35836e7565355e5572f5627294b15b47cf6cbd21a3a3d581309026984b45cc2da6464f5f176138addb894827024bdaf85647ef711f02ea1298e5edf5241bb0ef5f3147cdb4c62e3bfd173ca17ebc15dd7fde8ae9ff40d927b68b901d509d4849aa4d09a7753b33321d85d011f8008006400", @ANYRES32=r3, @ANYBLOB="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"], 0x380}], 0x5, &(0x7f0000004b80)=[@rights={{0x1c, 0x1, 0x1, [r2, r5, r6]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}], 0x58, 0x24000000}, 0x0)
chdir(0x0)
setns(r4, 0x0)
r10 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FITRIM(r10, 0xc0185879, &(0x7f0000000300)={0x5000000, 0xaa000000})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)

15:21:10 executing program 2:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:21:10 executing program 3:
openat$sr(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:21:10 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r4, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x1, &(0x7f00000000c0)="336ab7b948353748332461163e568c38cd622b6c0eeec7aaf799f07fa17447f25c5155f3e1f23e09f6eea01faa4c3abbb0f0aacc4d247a72b36f339f5b1473cee51d73a18df36e587ecae9da43a9cafc17a1af4ddc5781e6f0ef7b06e31f3caea5cd47f6d8e88b69882f5452d897a0ae25dfa67d18ab077bdef340cf556ebf94de8497995d1c81bb3fb8f62ba92b", 0x0, 0x0, 0x1, {0x3, r5}}, 0xd4f)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r4, 0x0, &(0x7f00000000c0)="2a9ec9a77bb8f55cf02de3d44f1f92541e4d73c84011ca68c271560b783a636cbdae174456601cd84776ac75d60735bbb12fe7f599187ba79717dadb02140505ca5f6e7e89e0a5c4725d5dca11e4060eb3b31f1ddedbc95d05af3bc03259", 0x5e, 0x2101, 0x1, {0x0, r5}}, 0xbb3)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r4, &(0x7f0000000180)={0x111183, 0x122, 0x1}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r5}}, 0x2)
r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r6, 0xfffff000)
ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000000000))
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)

15:21:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)
r2 = getpid()
syz_open_procfs$namespace(r2, &(0x7f00000005c0)='ns/ipc\x00')
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x444000, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000100)={0x0, 0x5, [0x1, 0x7, 0x2, 0x40, 0xfffffffffffffff9, 0x3f]})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xc1, 0xcc, 0x24, 0x2, 0x0, 0xe000000000000000, 0x51020, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3, 0x401}, 0x901, 0x7fffffff, 0x9, 0x1, 0x530d, 0x9469, 0x7f, 0x0, 0x6, 0x0, 0x1}, r2, 0xf, r3, 0xa)

15:21:10 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8208, 0x8000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x8)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x82)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xbe76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r1, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
write$P9_RSYMLINK(r1, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x2, 0x1, 0x7}}, 0x14)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x108, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
openat(r1, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x87)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, 0xffffffffffffffff, 0xfffff000)

15:21:10 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 8)

15:21:10 executing program 1:
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)

[ 2077.349591] FAULT_INJECTION: forcing a failure.
[ 2077.349591] name failslab, interval 1, probability 0, space 0, times 0
[ 2077.350938] CPU: 0 PID: 10415 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2077.351715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2077.352651] Call Trace:
[ 2077.352959]  dump_stack+0x107/0x167
[ 2077.353371]  should_fail.cold+0x5/0xa
[ 2077.353814]  ? create_object.isra.0+0x3a/0xa30
[ 2077.354330]  should_failslab+0x5/0x20
[ 2077.354763]  kmem_cache_alloc+0x5b/0x310
[ 2077.355224]  create_object.isra.0+0x3a/0xa30
[ 2077.355721]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2077.356300]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 2077.356874]  ? inet6_netconf_notify_devconf+0x84/0x1a0
[ 2077.357470]  __alloc_skb+0xb1/0x5b0
[ 2077.357906]  inet6_netconf_notify_devconf+0x84/0x1a0
[ 2077.358486]  addrconf_sysctl_unregister+0x134/0x1c0
[ 2077.359052]  addrconf_ifdown.isra.0+0x1230/0x15f0
[ 2077.359602]  ? addrconf_dad_run+0x180/0x180
[ 2077.360095]  ? find_held_lock+0x2c/0x110
[ 2077.360565]  addrconf_notify+0x161/0x2390
[ 2077.361042]  ? tun_device_event+0x71/0x1160
[ 2077.361534]  ? __sanitizer_cov_trace_switch+0x45/0x80
[ 2077.362129]  ? inet6_ifinfo_notify+0x150/0x150
[ 2077.362646]  ? failover_register+0x530/0x530
[ 2077.363147]  ? cfg80211_netdev_notifier_call+0x298/0x10c0
[ 2077.363775]  ? igmp_netdev_event+0x31/0x810
[ 2077.364269]  ? ipmr_device_event+0x192/0x1f0
[ 2077.364770]  raw_notifier_call_chain+0xb3/0x110
[ 2077.365303]  call_netdevice_notifiers_info+0xba/0x130
[ 2077.365894]  unregister_netdevice_many+0x852/0x1490
[ 2077.366464]  ? netdev_pick_tx+0xc70/0xc70
[ 2077.366938]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2077.367529]  ? queue_delayed_work_on+0xb4/0xe0
[ 2077.368048]  ? trace_hardirqs_on+0x5b/0x180
[ 2077.368540]  unregister_netdevice_queue+0x201/0x2c0
[ 2077.369104]  ? unregister_netdevice_many+0x1490/0x1490
[ 2077.369717]  ? linkwatch_fire_event+0x63/0x190
[ 2077.370238]  __tun_detach+0xfc1/0x12b0
[ 2077.370685]  tun_chr_close+0xc4/0x250
[ 2077.371118]  __fput+0x285/0x9f0
[ 2077.371493]  ? __tun_detach+0x12b0/0x12b0
[ 2077.371972]  task_work_run+0xe2/0x1a0
[ 2077.372411]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2077.372978]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2077.373527]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2077.374123] RIP: 0033:0x7fa43fdb1b19
[ 2077.374546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2077.376642] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2077.377509] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2077.378322] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2077.379131] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2077.379940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2077.380749] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:21:10 executing program 3:
openat$sr(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:21:10 executing program 1:
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)

[ 2077.438507] device wlan1 entered promiscuous mode
[ 2077.439827] device wlan1 left promiscuous mode
[ 2077.442509] device wlan1 entered promiscuous mode
[ 2077.452477] device wlan1 left promiscuous mode
15:21:10 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2, 0x13, 0xffffffffffffffff, 0x8000000)
r2 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x9, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x1}, 0x8)
r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r6, 0xfffff000)
dup2(0xffffffffffffffff, r0)

15:21:24 executing program 1:
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)

15:21:24 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 9)

15:21:24 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xffffd000)

15:21:24 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r0=>0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4307, 0x83080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000, 0x0, 0x63}, r0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40100, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
dup2(0xffffffffffffffff, r1)

15:21:24 executing program 0:
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)
r2 = getpid()
syz_open_procfs$namespace(r2, &(0x7f00000005c0)='ns/ipc\x00')
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x444000, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000100)={0x0, 0x5, [0x1, 0x7, 0x2, 0x40, 0xfffffffffffffff9, 0x3f]})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xc1, 0xcc, 0x24, 0x2, 0x0, 0xe000000000000000, 0x51020, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x3, 0x401}, 0x901, 0x7fffffff, 0x9, 0x1, 0x530d, 0x9469, 0x7f, 0x0, 0x6, 0x0, 0x1}, r2, 0xf, r3, 0xa)

15:21:24 executing program 2:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/65, 0x41})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)

15:21:24 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:21:24 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x5, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r5, 0xfffff000)
fcntl$dupfd(r5, 0x406, r0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)

[ 2091.729324] FAULT_INJECTION: forcing a failure.
[ 2091.729324] name failslab, interval 1, probability 0, space 0, times 0
[ 2091.732265] CPU: 0 PID: 10439 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2091.733792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2091.735602] Call Trace:
[ 2091.736182]  dump_stack+0x107/0x167
[ 2091.736978]  should_fail.cold+0x5/0xa
[ 2091.737823]  ? __alloc_skb+0x6d/0x5b0
[ 2091.738650]  should_failslab+0x5/0x20
[ 2091.739480]  kmem_cache_alloc_node+0x55/0x330
[ 2091.740462]  __alloc_skb+0x6d/0x5b0
[ 2091.741262]  rtmsg_ifinfo_build_skb+0x77/0x1b0
[ 2091.742276]  unregister_netdevice_many+0x8e3/0x1490
[ 2091.743370]  ? netdev_pick_tx+0xc70/0xc70
[ 2091.744281]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2091.745421]  ? queue_delayed_work_on+0xb4/0xe0
[ 2091.746422]  ? trace_hardirqs_on+0x5b/0x180
15:21:24 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x1010, r0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

[ 2091.747361]  unregister_netdevice_queue+0x201/0x2c0
[ 2091.748614]  ? unregister_netdevice_many+0x1490/0x1490
[ 2091.749729]  ? linkwatch_fire_event+0x63/0x190
[ 2091.750717]  __tun_detach+0xfc1/0x12b0
[ 2091.751553]  tun_chr_close+0xc4/0x250
[ 2091.752359]  __fput+0x285/0x9f0
[ 2091.753060]  ? __tun_detach+0x12b0/0x12b0
[ 2091.753958]  task_work_run+0xe2/0x1a0
[ 2091.754785]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2091.755822]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2091.757003]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2091.758098] RIP: 0033:0x7fa43fdb1b19
[ 2091.758885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2091.762778] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2091.764381] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2091.765899] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2091.767402] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2091.768909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2091.770432] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:21:24 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000002200)={'syztnl2\x00', &(0x7f0000002180)={'syztnl1\x00', <r0=>0x0, 0x4, 0xff, 0xff, 0x7, 0x0, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7800, 0x2, 0x4}})
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f00000000c0)="50b7c6fd13a5d923ccc951e8210b33f39399ef8437335e50ba0afd79cae4039921c3d171efb9d3023bcbed27fef2be7a2b0a7998bdfd22c6d00ca2299bd111b52ac199d1728e842cfe8d3b3074fb475b44764b5bea0d261fed9736a696b9bb79db3d9cb674562bb98bf6ef68c59ffd73892a8c30b9212cdfdfad087a0fa03274c35e9a01c8bdf1474d78afa7f415b0816f487894b77575c2f4d63e91374d86132172b568bda7ff7668d6afbbee4a25", 0xaf}, {&(0x7f0000000180)="9827a5ef8e87eb3f97e60e55174013834e17b1fdde6e3f5c640ee8ed2d58d11b875e89f42d7d3d5b2c88434dafa923d6a026d903337845d3489e960f0ff3e934773a5ff0fd3aa3a53a4e70803138e0", 0x4f}, {&(0x7f0000000200)="e6c819b95ffbcc2ea557caaa35d6b68beaa017160a30c8b73805e2784348d988a384e97e2aea09417b0b5def20cae6693de27697abcb94b61e42f3d9c01fb41936267cf16cbd943a16201f30672229647f11f0fd13f001a551b784f4ba943d4cb62519ca9b619d975106dc55b1e9ca49d1", 0x71}, {&(0x7f0000000040)="3c74d76c258479219581e3e3b810d023", 0x10}, {&(0x7f0000000280)="135c2f6950977e232cad5d598f017b606f4fcd423318e16370f6980ae6a543274cf57265ec0db2a5b3260a14e0e1a410e6b544", 0x33}, {&(0x7f00000002c0)="8f43c504560192b221f40c4071f139e668bae67a98d38875946c6988b48c086d93c9c416ff6ca7d9652e981861e6ad7952f771e9a1ef678b486b8d0a1454581cfef8bb90f149a2eb4cb6c4c6cd9fe5d8cbe39065c3ab561d3493a96576a4bb5f4a284ca36a8d155dcaa7f092c03b842511a5bf9615b4a537e5a371c6706ca095b5c9689029f3cd5a3e3a1dd7d151b6d49efbd364a324add87d7ddc53cfd06fe82e203c095835bcc665d822b084aa188eaa18757f1575d4d599db677c559ffd19825bba02a5b586db2a9bd55fe3fea52b0f1aa0e0dad7a02f6ff7cee46ee59411315096ba32", 0xe5}, {&(0x7f00000003c0)="3dabd56a962986a9633c4d7e1db7f77ddbe9be06b1ec402aa968190a", 0x1c}, {&(0x7f0000000500)="d6d00dd586b2b7993271c0fce73135e140bb9b04ad73e6b497806a82a46cdf2001253b607e3936fc51e62881398cc1607e18f766e59e74071f2ebbb418e918573d3b035ad82fa70ca7b5269eaa1e7935e28332c51add0eb26826e2948e4331eab281437b9793ce76d6e7a8b241d1e8cb718a53ea3d426a5f5bc6377fc2c98dfa7980843981d66456d40def29598d649672958dab9d080a32f2e510e19b7d5d", 0x9f}, {&(0x7f00000005c0)="ab22331e7905459fb90adc216f3fec8f1c112793fced606732bbf969949fbededa5773d944bfc8ffec989d793c605170e0b91753bdbfc4e02850c75dcb435ec4a90def039e4db63a95cfa8aa2f9d481de3fd8cef8be41ae7aff37398e753591a723bc4e3069e2af4f239cc55620013ad3d325a00d44d1b1655780db85402af73cff83316c47d33bbac18e0fdfbe19b62948b2ec06c4eddb5561f19437266a4a665edd84a8b", 0xa5}, {&(0x7f0000000680)="e2e1bf2cc9f9fc4d21b89ee8388d9bea7a2bf5acb12c56d79073360c17f41b220d5d2c61cca77e1eebcb30239b3c0a9fabbeb1ad79c2319f226b4c24efe3b152372020b2311842e40d8e4ed52e8055cdc87f1ba3304fe3295a53793deee2fdd57675a446d37bb83c4e1199d8d9d8506deb5d756937cc0a937fafd1631722fe0526c9d0ae0fcb85624fa1c7df7ad97492687dc29046979f8c8db78b6909915ebfb38cf4eb0ba4c1dba1fddcbf73877bd7779f28dd66f503214093813607198e325c2f08e8", 0xc4}], 0xa, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}}, {{&(0x7f0000000440)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000000840)="1658a5ff5c36b73653e4588471a742b46619abd5af8351674a6a56171e4737fe22584716b11a02d53cd13bf0428d646b9ec58bb52a22deec3382cc9fc90923a86b56826bff5ce7625c2b8ef1e8f2db3de71cc0ae7585a5b1c90c81ceccba7f6905671fed223321e54b730ef8da2805080ac02c0e126d074f09390a6e53463ee5bef6e2d6357b6c729e94d813d316ee743188f05609e06a04b9d63085", 0x9c}, {&(0x7f0000000900)="e5a4674fafbff8202c2f5d35a8575d7ebdf23cc272e83584e9935da8884b099cd1772b364ee664bbc10b2627b92c2c382bc0959bfc776ea14f0a526eb4496dfed41b56c5b92635e153c1971d53851f3268277e246881c1ee55989c882b9bc88cf5c8d423a91e0d1e4c6e1be22dad0a689aefd4186ae085867e941f28b6481bb531b8046662104552f91179089e350144c3eead3c61fd610d756d2424940bb5c8294ea563b5aa1d5caa419583e04d063c7da83fa39e8254d4", 0xb8}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)="b7ea0f54ab9af46a229e85afc4ed1d306146ad2a72b5fca279533a29bedab29e3f16de529541e6d2f44fc67bd33206bc75ffddcef7837ec0b0a7611f4fc12feb638a2580487d0b79163d9766867eafa4e8c7e80840a45a4f6bb7d1daa91f66487ac9cae1", 0x64}, {&(0x7f0000000a80)="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", 0x1000}], 0x5, &(0x7f0000001b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x44, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x87, [@private=0xa010101, @multicast1, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @end, @timestamp={0x44, 0x14, 0x63, 0x0, 0x4, [0x0, 0xfff, 0x80000001, 0x0]}, @end]}}}], 0x78}}, {{&(0x7f0000001b80)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="86710532310f85d2345b32f08abdd8348df19d05f491a41fbd56a7e9d0261e0ed3e5a147207315ba8bf48d357d308a1a45cd3a38d505f8e1c7d435295b1567430ca9ca05b23fd8cf53f849c198e5492496c18faefecb92bae48cde9a2afb01aae92e3dee4e05fd50c2ebc6351ae79721649808ed178080aace3fb0f9a55f850cf3c4ca257e54bcb25dc8fa059ea6f79c0de9ba4164c68996032ea7edafa7c2a3b56bc33922f437111dbcdf878506953f1a42d3fb06245cb6a7e61a9e5cdd7d6412c2a78078dbb8a78f3e47ccc53e91e11394584c2e27c451207263143bfb", 0xde}], 0x1, &(0x7f0000001d00)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xde, 0x0, 0x0, [0xc1c2, 0x2, 0x2, 0xfffffffa, 0xfff, 0x1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}], 0x60}}, {{&(0x7f0000001d80)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002100)=[{&(0x7f0000001dc0)="d46188c16b3fe0998fc69db97789ac429c2d4f751f23733001b5ec07bc3581ce2c5102c7f5a286c322779e22ac60afdc71c7ce35acb4a7da6ba8d5a5", 0x3c}, {&(0x7f0000001e00)="29ec256aa31ffa2dc84abb5872bddde3368e29c0f676aabad8f7af1d1b378e76bef33373912597038d01ed4553f2e5cd84f4f4dd0663a1dcd628a3bac14cfee8c1d78f6ba810452138ad189f522dce523051c1d53a51e7aab4e51925be361e0d01c6d595abcb3a01a8a745674169b2cd2cac6cdfc05c1cd5daf725971b16cecc9d5aeda723693d1250028706b78da5de55817170f9802bb625e74d759220267ea010b0ba9ac20653a81c1f57887848315ea5b029aae87156eb32346fc08fee81e29978e99757098ae6cfe6165ff5c70824659dbe6a73e90e02998db8f8f029c3a91eafcbb8b5978c", 0xe8}, {&(0x7f0000001f00)="885ac36fd6c3689c52e14e66a8b8f531fc71570892a0672ea002c39d51adcffd4df563a558d2fa13437876049c75e8bed112fdb26b18b3beb4da3c44e4f3adfca8fee20cc49f1a089ab69ece61093f41c514a6ea2f8e1cda3d029d25308ad5f43675a6d9dd82ecd39116923e820f87b215ef141894874a3858f69ee9ef97cb669ad08c75ce07a7255aa19f90042727fc021a9f32acd3cb52647bce45d7163fbdaf2e1e4476ba4d02b04bd8d5014b72f6bf17d4498566db8807b014c2ffb12b0ca92b3907411dfcee2e1fac84add420f7", 0xd0}, {&(0x7f0000002000)="b790fd23e3410bbd7dc9a21959f9c1e10251961d95798fb1", 0x18}, {&(0x7f0000002040)="8f5340f46e81f4f43c68bf40afd62af030d37c41043a753ec3aa3306c6deac2bc8d1643bda010bb4fd07ce4c05a54252ac3f8e25e7bdde6c53b9c53986b39ba879dc4dbd52c6e12d3482d5afb8569d2b3c8678499caaf507450334d3fdb075e6a99a04643364daf0f01cd0905924928380dd63727455c7a056eb0feab645009c32aa9a85268f02caa75677b010c006cdcbdf24d3cd", 0x95}], 0x5, &(0x7f0000002240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xcf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6486}}, @ip_retopts={{0x60, 0x0, 0x7, {[@cipso={0x86, 0x3e, 0xffffffffffffffff, [{0x5, 0x3, "1d"}, {0x2, 0xf, "2c06064d4ab8abc090fa0dae64"}, {0x0, 0x12, "27b0c25898be77e4cb51cae04a470808"}, {0x5, 0x8, "551a883941b1"}, {0x2, 0x7, "289357c0c7"}, {0x7, 0x5, "83c5b9"}]}, @ra={0x94, 0x4}, @noop, @generic={0x88, 0x3, '@'}, @generic={0x146, 0x5, "b1b7bd"}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xe0}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002340)="65e56b14854c6fe3efe764de23a24ecad5d0554e9aac5d46db81f6e02ffbd37c05abf6ee4d35f1f5f06f25d40989f321dbcf3dff120a94607a015d067baec40f80a761428856434b65225756184eb02d4d33398a5dd655521ca2d9735eb8ae8ecf7f73e3ffaa967d77df93550668edae341091b9ce105478dcace0171fb2b2fe6c5e76026b17271ee7d1a0a4a9a0d8741c9df17abaeda7c0221f719414098394a6326f3486feaace81dce02066ffbd0d5fcd03aec2a629bece84aac3794f28b08b329c1fc2b7890a353583a3e89e16beea1781c817b5f07b1b6dcec9dfbf254b5b", 0xe1}, {&(0x7f0000002440)="39548ac743a23678597449e89530748623b06cabe63df3c40cac967fb29a884452d7727504e68dcc7b3f57051538e21b896bf609e7531bc9b914936b9b662a7ae11e2c3baa4ef64ca7d052be8bf0613beee9689c8f7595b5d7d3314a988cdffe06e0d674854dce56559e5fce3e5048ba046f9d2ccd37815a8ad989cae5ce6bdda863ebc2a211a3462a008057e8989c1dffff6490fc720c9a5c53b2a659f4a08cc77d7465c1ca930791f6da63c1c5f6357950e279e9c71be7adb2936a0f16f69fa810072f", 0xc4}, {&(0x7f0000002540)="577751748639435b038c46c55c43926c8ec0128383c7429bc79044c3bec99c1ff79befb4d512cb9e011ad4f52e71d39d067e6e8c9402e0239b4fe00010d5f8f2da2890234dfd124c5f55aedba6c661b69e18d1598739b27385218e3ffce729c24daf5377886cfb324f9d899167f56d59ed1f8ff668c1ffa36d43332228fdaf2825f1fca1d669b95d2b5769d3aa8965c9fe42d6a048ac5e786a2dbe83e83c8d9f1417d4b11c1a86408c35f56c7366a8d406675780c4b3a964ce0774528c133215a4fcd8a45f9b3a1d058906aac64499f1", 0xd0}, {&(0x7f0000002640)="7c8602de86ea53f1f454ff2247162350758e7597f3b3975bddee661fd00eb555055a0a22077f8bbc9b479b401d33365de0e19d49a15476fe6224d2d3d72e1026e04406ac275aad23c43c3cd6e772f6aec1b79359fc69d7e4bc9f6baab33eaa4ded213489ce0a1842f3ddff117847a757e3a932f35bdd89f7a12230478d07e4ab24ca806c47d35dff7d5d82a6821c9ed5dfb8553c61352b4a4c0d8192ed3c9cd80302bb081af5072694c69c7811418b364ee17f42c8bb2334af3d96cc7807e41747fc656d7d977fe130164cbfde22728cbe357920e49c1a99696a263051abc0ad5464b7a2ca9364a86b7159f3744f46be5d96fd96c5ed3afd7d3ae02efbce", 0xfe}, {&(0x7f0000002740)="3fc5c5b4fe24b64155143be599a393bd0877641974d4bb8e84c995d71fe9559a0e1a5596fa936dd0633c347525ac152443ab53dc0cee29e9687f1d9aa80dbf28c5b009", 0x43}, {&(0x7f00000027c0)}, {&(0x7f0000002800)="35751902", 0x4}, {&(0x7f0000002840)="c8dca3ca275911b4c1af487144c6a9541aab33e5c3e64c4a7e69feb1453484b0aee62bbe485afabcdca51bf826f93bc1f3c0289304ed90279b86009f045859325d0edb70d31a235cc0efef35432f2159a6fbf004f179ee0916aaa089882b51ad16cd5a0935cafd55059a3a7f90b018cb50c1a2dd189b2344853688a7a197", 0x7e}], 0x8, &(0x7f0000002940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x68, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x1b, 0xcf, [@multicast2, @loopback, @multicast1, @empty, @private=0xa010100, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x41, 0x1, 0x1, [{@empty, 0xaa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@rand_addr=0x64010101, 0x7}, {@remote, 0x4}]}, @rr={0x7, 0x3, 0x45}, @timestamp_prespec={0x44, 0x14, 0xad, 0x3, 0x0, [{@empty, 0xf9e}, {@local, 0x1fac}]}]}}}], 0x80}}], 0x5, 0x20004040)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x10, 0xffffffffffffffff, 0xfffff000)

15:21:24 executing program 1:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:21:24 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)

15:21:24 executing program 0:
openat$sr(0xffffffffffffff9c, 0x0, 0x1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2091.890819] device wlan1 entered promiscuous mode
15:21:24 executing program 4:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x9, 0x7, 0x38, 0x9, 0x0, 0x8, 0x30000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x100000000, 0x229}, 0x58247, 0x80000009, 0x9, 0x9, 0xd00, 0x800, 0xfffe, 0x0, 0x5, 0x0, 0x9})
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

[ 2091.894264] device wlan1 left promiscuous mode
15:21:24 executing program 1:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:21:24 executing program 7:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x26, 0x26, 0x5, 0x5, 0x7, 0x9, 0x3, 0x4, 0x1})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x2, 0x17, 0x12, 0x1a, 0x7, 0x22a, 0x6, 0x4e})
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd=r0, 0x1ff, 0x550000, 0x7, 0x18, 0x1, {0x1}}, 0xfffffff9)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$RTC_UIE_OFF(r0, 0x7004)
eventfd(0x6)

15:21:24 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 10)

15:21:24 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2091.977801] device wlan1 entered promiscuous mode
[ 2091.988625] device wlan1 left promiscuous mode
15:21:24 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x0, 0x9, 0x3, 0x0, 0x5, 0x40, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7f, 0x0, @perf_config_ext={0x400, 0xfffffffffffffffb}, 0x14200, 0x7, 0x5, 0x2, 0x3c1, 0x4, 0x1, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x5, 0x4)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200080, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r3, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)

[ 2092.078164] device wlan1 entered promiscuous mode
[ 2092.083360] device wlan1 left promiscuous mode
[ 2092.100578] FAULT_INJECTION: forcing a failure.
[ 2092.100578] name failslab, interval 1, probability 0, space 0, times 0
[ 2092.103439] CPU: 1 PID: 10486 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2092.104931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2092.106710] Call Trace:
[ 2092.107290]  dump_stack+0x107/0x167
[ 2092.108073]  should_fail.cold+0x5/0xa
[ 2092.108896]  ? create_object.isra.0+0x3a/0xa30
[ 2092.109877]  should_failslab+0x5/0x20
[ 2092.110700]  kmem_cache_alloc+0x5b/0x310
[ 2092.111589]  create_object.isra.0+0x3a/0xa30
[ 2092.112531]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2092.113639]  kmem_cache_alloc_node+0x169/0x330
[ 2092.114645]  __alloc_skb+0x6d/0x5b0
[ 2092.115461]  rtmsg_ifinfo_build_skb+0x77/0x1b0
[ 2092.116445]  unregister_netdevice_many+0x8e3/0x1490
[ 2092.117518]  ? netdev_pick_tx+0xc70/0xc70
[ 2092.118434]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2092.119568]  ? queue_delayed_work_on+0xb4/0xe0
[ 2092.120550]  ? trace_hardirqs_on+0x5b/0x180
[ 2092.121489]  unregister_netdevice_queue+0x201/0x2c0
[ 2092.122548]  ? unregister_netdevice_many+0x1490/0x1490
[ 2092.123679]  ? linkwatch_fire_event+0x63/0x190
[ 2092.124641]  __tun_detach+0xfc1/0x12b0
[ 2092.125477]  tun_chr_close+0xc4/0x250
[ 2092.126290]  __fput+0x285/0x9f0
[ 2092.126981]  ? __tun_detach+0x12b0/0x12b0
[ 2092.127869]  task_work_run+0xe2/0x1a0
[ 2092.128705]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2092.129769]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2092.130833]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2092.131938] RIP: 0033:0x7fa43fdb1b19
[ 2092.132726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2092.136610] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2092.138235] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2092.139727] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2092.141232] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2092.142731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2092.144229] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:21:38 executing program 1:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:21:38 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 11)

15:21:38 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:21:38 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @multicast}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x3, 0x6, @multicast}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x3, 0x6, @multicast}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r11=>0x0})
setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000000080)={r11, 0x3, 0x6, @multicast}, 0x10)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x494, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x1, 0x3f, 0x80000000}, {0x0, 0x1, 0x0, 0x9}, {0x37, 0xfb, 0x5, 0x2}]}}}]}}, {{0x8, 0x1, r8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x205f3864}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0xfffffffffffffe65}, {0x8, 0x4, 0x10001}}, {0x8}}}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x41}, 0x8000)

15:21:38 executing program 2:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/65, 0x41})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)

15:21:38 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000000, 0x11, 0xffffffffffffffff, 0x0)
r5 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000001cc0)}, 0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0)
syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r9 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x80800)
socketpair(0x1e, 0x6, 0xffffffff, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
r11 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r11, 0xfffff000)
syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x400, &(0x7f0000000140)=[r1, r9, r3, r10, r2, r1, r11], 0x7, 0x0, 0x1}, 0xffffffc0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x80010, r3, 0x6c43a000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r2, 0xfffff000)
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x581000, 0x0)
dup2(0xffffffffffffffff, r0)

15:21:38 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 1)

15:21:38 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x200180)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r5, 0xfffff000)
r6 = eventfd(0xa0)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r7, 0xfffff000)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x8001, 0x0, &(0x7f0000000040)=[r0, r2, r3, r0, r1, r4, r5, r6, r7]}, 0x9)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

[ 2105.673572] FAULT_INJECTION: forcing a failure.
[ 2105.673572] name failslab, interval 1, probability 0, space 0, times 0
[ 2105.675257] CPU: 1 PID: 10497 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2105.676140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2105.677186] Call Trace:
[ 2105.677525]  dump_stack+0x107/0x167
[ 2105.678003]  should_fail.cold+0x5/0xa
[ 2105.678489]  should_failslab+0x5/0x20
[ 2105.678974]  __kmalloc_node_track_caller+0x74/0x3b0
[ 2105.679608]  ? rtmsg_ifinfo_build_skb+0x77/0x1b0
[ 2105.680211]  __alloc_skb+0xb1/0x5b0
[ 2105.680683]  rtmsg_ifinfo_build_skb+0x77/0x1b0
[ 2105.681266]  unregister_netdevice_many+0x8e3/0x1490
[ 2105.681898]  ? netdev_pick_tx+0xc70/0xc70
[ 2105.682449]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2105.683127]  ? queue_delayed_work_on+0xb4/0xe0
[ 2105.683702]  ? trace_hardirqs_on+0x5b/0x180
[ 2105.684253]  unregister_netdevice_queue+0x201/0x2c0
[ 2105.684886]  ? unregister_netdevice_many+0x1490/0x1490
[ 2105.685558]  ? linkwatch_fire_event+0x63/0x190
[ 2105.686141]  __tun_detach+0xfc1/0x12b0
[ 2105.686675]  tun_chr_close+0xc4/0x250
[ 2105.687171]  __fput+0x285/0x9f0
[ 2105.687598]  ? __tun_detach+0x12b0/0x12b0
[ 2105.688145]  task_work_run+0xe2/0x1a0
[ 2105.688652]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2105.689283]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2105.689888]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2105.690574] RIP: 0033:0x7fa43fdb1b19
[ 2105.691052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2105.692748] FAULT_INJECTION: forcing a failure.
[ 2105.692748] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2105.693394] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2105.696976] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2105.697872] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2105.698775] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2105.699665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2105.700585] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2105.701516] CPU: 0 PID: 10505 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2105.703093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2105.704944] Call Trace:
[ 2105.705529]  dump_stack+0x107/0x167
[ 2105.706369]  should_fail.cold+0x5/0xa
[ 2105.707232]  _copy_from_user+0x2e/0x1b0
[ 2105.708128]  io_uring_setup+0x9b/0x2980
[ 2105.709005]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2105.710093]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2105.711228]  ? wait_for_completion_io+0x270/0x270
[ 2105.712340]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2105.713409]  ? vfs_write+0x354/0xb10
[ 2105.714264]  ? fput_many+0x2f/0x1a0
[ 2105.715093]  ? ksys_write+0x1a9/0x260
[ 2105.715925]  ? __ia32_sys_read+0xb0/0xb0
[ 2105.716826]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2105.718026]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2105.719161]  do_syscall_64+0x33/0x40
[ 2105.719983]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2105.721132] RIP: 0033:0x7fd237085b19
[ 2105.721977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2105.725956] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2105.727683] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2105.729275] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2105.730883] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2105.732477] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
15:21:38 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
r3 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000000c0))
dup2(0xffffffffffffffff, r0)

[ 2105.734062] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2105.759598] device wlan1 entered promiscuous mode
[ 2105.762954] device wlan1 entered promiscuous mode
[ 2105.777312] device wlan1 left promiscuous mode
15:21:38 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)

15:21:38 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 12)

15:21:38 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:21:38 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
fcntl$setlease(r2, 0x400, 0x2)

15:21:38 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)

[ 2105.899469] FAULT_INJECTION: forcing a failure.
[ 2105.899469] name failslab, interval 1, probability 0, space 0, times 0
[ 2105.901302] CPU: 1 PID: 10530 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2105.902160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2105.903185] Call Trace:
[ 2105.903530]  dump_stack+0x107/0x167
[ 2105.903989]  should_fail.cold+0x5/0xa
[ 2105.904480]  ? create_object.isra.0+0x3a/0xa30
[ 2105.905041]  should_failslab+0x5/0x20
[ 2105.905524]  kmem_cache_alloc+0x5b/0x310
[ 2105.906045]  create_object.isra.0+0x3a/0xa30
[ 2105.906592]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2105.907232]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 2105.907858]  ? rtmsg_ifinfo_build_skb+0x77/0x1b0
[ 2105.908440]  __alloc_skb+0xb1/0x5b0
[ 2105.908894]  rtmsg_ifinfo_build_skb+0x77/0x1b0
[ 2105.909449]  unregister_netdevice_many+0x8e3/0x1490
[ 2105.910076]  ? netdev_pick_tx+0xc70/0xc70
[ 2105.910591]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2105.911232]  ? queue_delayed_work_on+0xb4/0xe0
[ 2105.911765]  ? trace_hardirqs_on+0x5b/0x180
[ 2105.912269]  unregister_netdevice_queue+0x201/0x2c0
[ 2105.912843]  ? unregister_netdevice_many+0x1490/0x1490
[ 2105.913466]  ? linkwatch_fire_event+0x63/0x190
[ 2105.914000]  __tun_detach+0xfc1/0x12b0
[ 2105.914466]  tun_chr_close+0xc4/0x250
[ 2105.914908]  __fput+0x285/0x9f0
[ 2105.915304]  ? __tun_detach+0x12b0/0x12b0
[ 2105.915800]  task_work_run+0xe2/0x1a0
[ 2105.916259]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2105.916876]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2105.917489]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2105.918136] RIP: 0033:0x7fa43fdb1b19
[ 2105.918598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2105.920818] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2105.921742] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2105.922623] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2105.923474] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2105.924309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2105.925143] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:21:38 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000100)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x80)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x8000, 0x3, 0x10000, 0x5, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, 0x2b, 0x20, 0x70bd2a, 0x25dfdbff, {0x5}, [@nested={0x70, 0x85, 0x0, 0x1, [@typed={0x60, 0x75, 0x0, 0x0, @binary="94b626ad7a48cb2a1c12a90eebb4e268cf4a869e6ab6f0c22eaa0057114b2b7a8142abf4ff256ad1bdee081590b31c2abf738264c02e0414bf2afb5608a7b99cf35dffd242c184a635c4693515aa8d027485bc66bd94ff91e0af0df3"}, @typed={0x4, 0x94}, @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x1)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x1, &(0x7f00000000c0)="336ab7b948353748332461163e568c38cd622b6c0eeec7aaf799f07fa17447f25c5155f3e1f23e09f6eea01faa4c3abbb0f0aacc4d247a72b36f339f5b1473cee51d73a18df36e587ecae9da43a9cafc17a1af4ddc5781e6f0ef7b06e31f3caea5cd47f6d8e88b69882f5452d897a0ae25dfa67d18ab077bdef340cf556ebf94de8497995d1c81bb3fb8f62ba92b", 0x0, 0x0, 0x1, {0x3, r1}}, 0xd4f)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2000, @fd_index=0x7, 0xd5, 0x4, 0x19, 0x8, 0x1, {0x1, r1}}, 0x20)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)

15:21:38 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 2)

[ 2105.968047] FAULT_INJECTION: forcing a failure.
[ 2105.968047] name failslab, interval 1, probability 0, space 0, times 0
[ 2105.969441] CPU: 1 PID: 10544 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2105.970262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2105.971219] Call Trace:
[ 2105.971538]  dump_stack+0x107/0x167
[ 2105.971975]  should_fail.cold+0x5/0xa
[ 2105.972433]  ? io_uring_setup+0x258/0x2980
[ 2105.972939]  should_failslab+0x5/0x20
[ 2105.973396]  kmem_cache_alloc_trace+0x55/0x320
[ 2105.973948]  io_uring_setup+0x258/0x2980
[ 2105.974435]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2105.975017]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2105.975604]  ? wait_for_completion_io+0x270/0x270
[ 2105.976191]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2105.976792]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2105.977405]  do_syscall_64+0x33/0x40
[ 2105.977839]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2105.978448] RIP: 0033:0x7fd237085b19
[ 2105.978887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2105.981021] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2105.981891] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2105.982714] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2105.983534] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2105.984366] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2105.985181] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2105.994373] device wlan1 entered promiscuous mode
[ 2105.996957] device wlan1 left promiscuous mode
[ 2106.012869] device wlan1 left promiscuous mode
15:21:54 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 13)

15:21:54 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:21:54 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)

15:21:54 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x4, 0xb176, 0x401, 0x4, 0xfffffffffffffffb]}, &(0x7f0000000040)=0x78)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x7)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

15:21:54 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xd, 0x4042050, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000000c0))
r3 = dup2(0xffffffffffffffff, r0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
r5 = dup(r3)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r6, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x80, @none, 0x2de, 0x3}, 0xe)
fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x2, 0x3, 0x7, 0x8e7e})
syz_io_uring_setup(0x62f1, &(0x7f0000000100)={0x0, 0x62dc, 0x8, 0x1, 0x16c, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0))
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r5, 0x10000000)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x8, &(0x7f0000000200), 0x1, 0x1, 0x1, {0x0, r9}}, 0x3)

15:21:54 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 3)

15:21:54 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x200180)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r5, 0xfffff000)
r6 = eventfd(0xa0)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r7, 0xfffff000)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x8001, 0x0, &(0x7f0000000040)=[r0, r2, r3, r0, r1, r4, r5, r6, r7]}, 0x9)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

15:21:54 executing program 2:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/65, 0x41})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)

[ 2121.168558] FAULT_INJECTION: forcing a failure.
[ 2121.168558] name failslab, interval 1, probability 0, space 0, times 0
[ 2121.171327] CPU: 0 PID: 10557 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2121.172958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2121.174920] Call Trace:
[ 2121.175554]  dump_stack+0x107/0x167
[ 2121.176425]  should_fail.cold+0x5/0xa
[ 2121.177336]  ? create_object.isra.0+0x3a/0xa30
[ 2121.178440]  should_failslab+0x5/0x20
[ 2121.179347]  kmem_cache_alloc+0x5b/0x310
[ 2121.180330]  create_object.isra.0+0x3a/0xa30
[ 2121.181386]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2121.182630]  kmem_cache_alloc_trace+0x151/0x320
[ 2121.183756]  io_uring_setup+0x258/0x2980
[ 2121.184735]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2121.185901]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2121.187142]  ? wait_for_completion_io+0x270/0x270
[ 2121.188330]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2121.189606]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2121.190867]  do_syscall_64+0x33/0x40
[ 2121.191771]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2121.193015] RIP: 0033:0x7fd237085b19
[ 2121.193924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2121.198448] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2121.200308] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2121.202055] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2121.203817] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2121.205585] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2121.207361] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2121.222539] FAULT_INJECTION: forcing a failure.
[ 2121.222539] name failslab, interval 1, probability 0, space 0, times 0
[ 2121.225263] CPU: 1 PID: 10562 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2121.226797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2121.228619] Call Trace:
[ 2121.229207]  dump_stack+0x107/0x167
[ 2121.230007]  should_fail.cold+0x5/0xa
[ 2121.230856]  ? kobject_uevent_env+0x22b/0xfd0
[ 2121.231844]  should_failslab+0x5/0x20
[ 2121.232686]  kmem_cache_alloc_trace+0x55/0x320
[ 2121.233694]  kobject_uevent_env+0x22b/0xfd0
[ 2121.234661]  __kobject_del+0x27c/0x320
[ 2121.235566]  kobject_put+0x215/0x270
[ 2121.236543]  net_rx_queue_update_kobjects+0x375/0x480
[ 2121.237702]  netdev_unregister_kobject+0x157/0x280
[ 2121.238796]  unregister_netdevice_many+0xbb7/0x1490
[ 2121.239894]  ? netdev_pick_tx+0xc70/0xc70
[ 2121.240815]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2121.241965]  ? queue_delayed_work_on+0xb4/0xe0
[ 2121.242972]  ? trace_hardirqs_on+0x5b/0x180
[ 2121.243925]  unregister_netdevice_queue+0x201/0x2c0
[ 2121.245018]  ? unregister_netdevice_many+0x1490/0x1490
[ 2121.246183]  ? linkwatch_fire_event+0x63/0x190
[ 2121.247192]  __tun_detach+0xfc1/0x12b0
[ 2121.248056]  tun_chr_close+0xc4/0x250
[ 2121.248889]  __fput+0x285/0x9f0
[ 2121.249612]  ? __tun_detach+0x12b0/0x12b0
[ 2121.250537]  task_work_run+0xe2/0x1a0
[ 2121.251384]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2121.252466]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2121.253523]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2121.254657] RIP: 0033:0x7fa43fdb1b19
[ 2121.255473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2121.259535] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2121.261207] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2121.262782] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2121.264349] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2121.265913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2121.267491] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2121.297189] device wlan1 entered promiscuous mode
15:21:54 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xca, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
dup2(r0, r1)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1101)
ioctl$TCSBRK(r3, 0x5409, 0x7ff)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$FITHAW(r2, 0xc0045878)
dup2(0xffffffffffffffff, r0)

15:21:54 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 4)

[ 2121.303751] device wlan1 left promiscuous mode
15:21:54 executing program 1:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
r3 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000000c0))
dup2(0xffffffffffffffff, r0)

15:21:54 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r4, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
syz_io_uring_submit(0x0, r2, &(0x7f0000001cc0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000001c80)={&(0x7f0000000000)=@nfc={0x27, 0x1, 0x2}, 0x80, &(0x7f0000001640)=[{&(0x7f00000000c0)="4d2755feb6e597dbbbd6531b9d1b43b7233e790426b6c67c02943eaa6825486446c3288eb287de78778d689a606cc17dfb1286fb1312c0191883e4c3992f7123348cafb1babf04f84c10b18fc54351f43d7af3c0348a2db754261a25fda1f48451ff0a685d0f477066c94a03408f5b81aad247be18c7f2db296ebede894f514f12de3c963dd0573feb1eba3d4ba8efbc302214178b3f9f5268b1599a257c188ab4335384", 0xa4}, {&(0x7f0000000180)="9208c3eba04ecf46c5f5da448e8a1bf1f8d733f8e97d1a0a03af38428da5b63233034cc2145d6dea452b33013a82e48734b49686411fe394282b3ba41766a63bc86467e1398e496389a9d2bc4c5ea6edfd80b0b413e6a200115abe62f553f1e98021385c595ffd328ab5dd3d03b0d30b18218de5ae9da66cafc2c64c2dc8530570e8e6ce0ea4d3", 0x87}, {&(0x7f0000000240)="f49809101115461b0b0c8b0341e90c220990641fbbad8014a67ea49eef9b48716ab7a174c57335d2f21a52b0603bd4b73fa712c486e625e790ec8ce840bb77be2870ce8c4f915907668bbd2e1f3c4d660efb532124d00967a338ace862178c0182c041e2d3eec21f1e12c7e1f9d581df037e358df2cf9a71b83d1586f48ce888de5084a6fddfe91002bf8b1e2e043af1e2657c845e2a3900043bd0ffac5165741ced247323aa4f449e0e7a16f455f32d479d4e512c3d226f2046d9c6bd4bd9a8b9137aa3548976d8432f7f335086f9091d4d50ad615b2f8815d4e9831a3a4b2f6e52f4a6bb047227ff710ebfc930df5cc5a4dd0764081d", 0xf7}, {&(0x7f0000000340)="efdd7092fe737663a5a640c7b342f93847f9a4ffaaccc22249559be16eadd09b9a43c8729cea0bb0441225ca3309c0973fdaca93e86fc7696e860ba12f0c250db86df3185f133144cec98b02e9ba253a55b230a5013ae7b722566bc708e76f01ec29ef9d3860ed0a0f65e23ee88d4c67d2dc59864c19b1337a00e7cb3ad2d1add70b32ed13fbd2c4b2bfbbaa24c18c", 0x8f}, {&(0x7f0000000500)="7a78dde89346ae93ed6d45b35a05ff1b79b0af0c38a17d43773a53a8bfe2c52050fc6444b1b32bf5ca62956effdc592306b18616425f288df17fa6d3c8ba6c55de47000dfc3e56b72ae79239c3e37d4f7a167bd34dabd76b9f59326381ff52048d1ee98371fbf7aad8ee08beea14cf7baa0f5c135eff26c18e99bcb3f7ffaed37199be3a188dca4ce1082c1b2332c6915d2da87c890f81ef4398611f61e3823c44d9cc5b4c000336fba6eb6b661af63c0c5449c5adcb1a", 0xb7}, {&(0x7f0000000400)="c3bcf2d4ab5fd9a3da255f5e0d22cefbebd08834df28c55f9cf6d2f1c7346cb2e313f4fb", 0x24}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000440)}, {&(0x7f00000015c0)="d83233cdc23dcb0651c375f31bb7ac2dabc5e2149f6ca8715c391c77b6aad4bc81d8cbe62d65fd0845d0350da14803a981f0d5d159a4222bcb6db9a20bb58c77f21a81f1f933fc3fbd82bc787919472f", 0x50}], 0x9, &(0x7f0000001700)=[{0x68, 0x111, 0x9e5, "91b5cd0d4a2f01bf39279b710d680db342f9d8db5cf2a51be0cef99c77a37a93efb39167a3b98cc7c2f17e7b70235899d9df06116d047613922aea34d764195f785d43e17c065d094d3e4cecd3f0684cf103eaec6ccc2e"}, {0x20, 0x10c, 0xacfc, "ecf9f9b2c699c23515"}, {0xf0, 0x29, 0x80000000, "89363536717fbdfe8becc7b7514986e3ef8ea951951589800dff3be88455d3a36ab1f754f0e3d414ed4e93e551698a9696e46cf2c72ba170a919d46b2c03e88b980d2ddadc21dd4acd2c8aaf4d0e52840f0307b8a9d62f67c2722cc8612117f30cdd717e343686d7da4e5d75b3df1eb20321094e29d796272ccb087bfc67f8f332cd0bb875fa2ba3bf452cbec8724d33a6e090e5a0970b3f24865326f9d7e11a1cb4097369ddb9d7caa424d68693d8b5d99474c1c049aaa7df84934da43f9a6cb264cf7ecdc7f8b63aaf1e355b4575d0c7d52164b730a7a4af98c5"}, {0xc8, 0x112, 0x8, "d0c602111f98da70277a512b62ee4efcb8f476f798853bccd1243cdf4299bf7f0570f209ce5b6b1f23b2e88e06d5c2e82c33c6b00e37d41a7d8414f34140d699cd6aae420d820aa8e81711c2cb0dc0350e9261c938e1b5a157b9d3d0ddf5df6c13c2d5b95ac1bbe18e9716d36a36b5f29581b0ab4aead98bb0dd01629254320c9624b4bd20471a9a040b5928bbdae986efd0b8a0b1361e81426a30e296513a9e010ac9f5ef08d4824e2a6ee74d84b8e620bf0eb75fb2d52f"}, {0x38, 0x1, 0x1ff, "52ec512f3ea71727befc0d1ceacd8fa82349470251009158e5490138b3642b99d9b78f8c61"}, {0x90, 0x16, 0x9, "89d305674c87bb49e575b2f9c8c7cc721758f3826e1f1afbca9fdd6e123df650f673eea20668e2eb6c86dd9b5211028fc3a3b75065f15858e4760376d2d27eb14d9c1c656bef22608976a82d1594de68bcd000c731a8238ad1559bafd9b1262444081ad2f275dbea471781d225dbae541e539506f2d94086e61ec7c4e6c923"}, {0x88, 0x104, 0x5, "013c221293cd900be4e947951731b3f808cb706ea7750a1f10cbcc5a03bd06339688870cd800144e8919664071b4e3c95a34d86adac27b142861d9c36a8c3a420e00e382a9bb6db115343bd1893248511a4e734631b3f5983c3144a2c1a8de0699fc27200404b3623373d9cfda91f7a154b4f7"}, {0xa8, 0x10a, 0x7f, "1a894016e8b230b3964cec1ec68809fc0520c19eae8c330cfcf5d7fcd3d29544024598d0ce06d0086364c7b28c924c0a70e8f6509cfb760787cf33b9510f1f2522ab2d17f48215713ec9231fc904390f6e3a4d849ae930d7122dea79e98de274338949d9a0766f6b0820ee2ecf613eaf060df1acd391fe962ec572deb078efec232f06edd548f82723cb89d46876441bd4481cbaa626870e"}, {0x18, 0x107, 0x7, "b1b4"}, {0x108, 0x102, 0x200, "e7e938e041dfa9dd0a2ef52c29162b0ea4853bc37081ad2db1ca1af75a7316d7251b9ab0c1840c4ec1e421ca608546528f6cb5527ea05a6fcf81c320145a625914241a3f9150e79b059dd274e398d080ff76d70221f33c40a8a8cb13d0e784ff4befb965c2525c8c3efbee0e8e9dad5ce85750ff45c5b3f1090a11c2ca637ab98d4947e9d1605fb552649d7a16b82b25c200755712f3e0a2859e7c5c9aa4fcea9cc646aca1c7887dbdc5856c053eb633d73506c09cf2dcb2453248e544886b518671809acf146412717102d99b563fda01180f807076484ffc201ecac3267c66bff5aeb83a72645e9312ede95ede1f723069268476"}], 0x558}, 0x0, 0x8080, 0x1}, 0x3)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r5, 0xfffff000)

15:21:54 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 14)

15:21:54 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x200180)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r5, 0xfffff000)
r6 = eventfd(0xa0)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r7, 0xfffff000)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x8001, 0x0, &(0x7f0000000040)=[r0, r2, r3, r0, r1, r4, r5, r6, r7]}, 0x9)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

15:21:54 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2121.404433] FAULT_INJECTION: forcing a failure.
[ 2121.404433] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2121.407275] CPU: 0 PID: 10575 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2121.408886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2121.410828] Call Trace:
[ 2121.411451]  dump_stack+0x107/0x167
[ 2121.412306]  should_fail.cold+0x5/0xa
[ 2121.413205]  __alloc_pages_nodemask+0x182/0x600
[ 2121.414297]  ? lock_release+0x680/0x680
[ 2121.415226]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2121.416646]  ? lock_downgrade+0x6d0/0x6d0
[ 2121.417623]  alloc_pages_current+0x187/0x280
[ 2121.418671]  kmalloc_order+0x35/0x160
[ 2121.419571]  kmalloc_order_trace+0x14/0xa0
[ 2121.420564]  io_uring_setup+0x33c/0x2980
[ 2121.421522]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2121.422673]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2121.423865]  ? wait_for_completion_io+0x270/0x270
[ 2121.425016]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2121.426246]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2121.427452]  do_syscall_64+0x33/0x40
[ 2121.428319]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2121.429512] RIP: 0033:0x7fd237085b19
[ 2121.430388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2121.434709] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
15:21:54 executing program 1:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2121.436482] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2121.438410] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2121.440187] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2121.441856] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2121.443538] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:21:54 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
dup(r2)
dup2(0xffffffffffffffff, r0)

[ 2121.486860] FAULT_INJECTION: forcing a failure.
[ 2121.486860] name failslab, interval 1, probability 0, space 0, times 0
[ 2121.489523] CPU: 1 PID: 10579 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2121.491015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2121.492784] Call Trace:
[ 2121.493353]  dump_stack+0x107/0x167
[ 2121.494134]  should_fail.cold+0x5/0xa
[ 2121.494960]  ? create_object.isra.0+0x3a/0xa30
[ 2121.495949]  should_failslab+0x5/0x20
[ 2121.496761]  kmem_cache_alloc+0x5b/0x310
[ 2121.497631]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2121.498671]  create_object.isra.0+0x3a/0xa30
[ 2121.499597]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2121.500675]  kmem_cache_alloc_trace+0x151/0x320
[ 2121.501670]  kobject_uevent_env+0x22b/0xfd0
[ 2121.502600]  __kobject_del+0x27c/0x320
[ 2121.503424]  kobject_put+0x215/0x270
[ 2121.504223]  net_rx_queue_update_kobjects+0x375/0x480
[ 2121.505321]  netdev_unregister_kobject+0x157/0x280
[ 2121.506380]  unregister_netdevice_many+0xbb7/0x1490
[ 2121.507451]  ? netdev_pick_tx+0xc70/0xc70
[ 2121.508340]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2121.509450]  ? queue_delayed_work_on+0xb4/0xe0
[ 2121.510423]  ? trace_hardirqs_on+0x5b/0x180
[ 2121.511342]  unregister_netdevice_queue+0x201/0x2c0
[ 2121.512402]  ? unregister_netdevice_many+0x1490/0x1490
[ 2121.513519]  ? linkwatch_fire_event+0x63/0x190
[ 2121.514507]  __tun_detach+0xfc1/0x12b0
[ 2121.515339]  tun_chr_close+0xc4/0x250
[ 2121.516145]  __fput+0x285/0x9f0
[ 2121.516841]  ? __tun_detach+0x12b0/0x12b0
[ 2121.517726]  task_work_run+0xe2/0x1a0
[ 2121.518554]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2121.519597]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2121.520623]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2121.521707] RIP: 0033:0x7fa43fdb1b19
[ 2121.522513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2121.526428] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2121.528045] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2121.529554] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2121.531066] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2121.532577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2121.534094] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2121.568286] device wlan1 entered promiscuous mode
[ 2121.571267] device wlan1 left promiscuous mode
[ 2121.608434] device wlan1 entered promiscuous mode
[ 2121.613571] device wlan1 left promiscuous mode
15:22:08 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x26, 0x26, 0x5, 0x5, 0x7, 0x9, 0x3, 0x4, 0x1})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x2, 0x17, 0x12, 0x1a, 0x7, 0x22a, 0x6, 0x4e})
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2004, @fd=r0, 0x1ff, 0x550000, 0x7, 0x18, 0x1, {0x1}}, 0xfffffff9)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$RTC_UIE_OFF(r0, 0x7004)
eventfd(0x6)

15:22:08 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r1, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x8b}}, './file0\x00'})
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000040)='/dev/usbmon#\x00', &(0x7f00000000c0)='./file0\x00', r2)
signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)

15:22:08 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001700)={0x0, 0x0}) (fail_nth: 1)

15:22:08 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_config_ext={0x1000, 0x3f}, 0x8000, 0x7d, 0x10000}, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'L+', 0xbe0}, 0x16, 0x0)
dup2(0xffffffffffffffff, r0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180))
dup(0xffffffffffffffff)

15:22:08 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 15)

15:22:08 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:22:08 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) (fail_nth: 1)

15:22:08 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 5)

[ 2135.716893] FAULT_INJECTION: forcing a failure.
[ 2135.716893] name failslab, interval 1, probability 0, space 0, times 0
[ 2135.717456] FAULT_INJECTION: forcing a failure.
[ 2135.717456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2135.719906] CPU: 1 PID: 10608 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2135.722994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2135.725132] Call Trace:
[ 2135.725813]  dump_stack+0x107/0x167
[ 2135.726766]  should_fail.cold+0x5/0xa
[ 2135.727753]  ? create_object.isra.0+0x3a/0xa30
[ 2135.728924]  should_failslab+0x5/0x20
[ 2135.729902]  kmem_cache_alloc+0x5b/0x310
[ 2135.730972]  create_object.isra.0+0x3a/0xa30
[ 2135.732097]  ? kasan_unpoison_shadow+0x33/0x50
[ 2135.733271]  kmalloc_order+0xfe/0x160
[ 2135.734254]  kmalloc_order_trace+0x14/0xa0
[ 2135.735356]  io_uring_setup+0x33c/0x2980
[ 2135.736401]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2135.737643]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2135.738953]  ? wait_for_completion_io+0x270/0x270
[ 2135.740219]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2135.741566]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2135.742902]  do_syscall_64+0x33/0x40
[ 2135.743863]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2135.745179] RIP: 0033:0x7fd237085b19
[ 2135.746135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2135.750249] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2135.751903] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2135.753450] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2135.754992] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2135.756535] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2135.758076] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2135.759656] CPU: 0 PID: 10610 Comm: syz-executor.1 Not tainted 5.10.252 #1
[ 2135.760518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2135.761464] Call Trace:
[ 2135.761785]  dump_stack+0x107/0x167
[ 2135.762215]  should_fail.cold+0x5/0xa
[ 2135.762672]  _copy_to_user+0x2e/0x180
[ 2135.763118]  simple_read_from_buffer+0xcc/0x160
[ 2135.763663]  proc_fail_nth_read+0x198/0x230
[ 2135.764172]  ? proc_sessionid_read+0x230/0x230
[ 2135.764702]  ? security_file_permission+0xb1/0xe0
[ 2135.765299]  ? proc_sessionid_read+0x230/0x230
[ 2135.765984]  vfs_read+0x228/0x620
[ 2135.766407]  ksys_read+0x12d/0x260
[ 2135.766812]  ? vfs_write+0xb10/0xb10
[ 2135.767254]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2135.767859]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2135.768481]  do_syscall_64+0x33/0x40
[ 2135.768940]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2135.769543] RIP: 0033:0x7f1f7f48369c
[ 2135.769981] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2135.772083] RSP: 002b:00007f1f7ca46170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2135.773027] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1f7f48369c
[ 2135.773948] RDX: 000000000000000f RSI: 00007f1f7ca461e0 RDI: 0000000000000004
[ 2135.774814] RBP: 00007f1f7ca461d0 R08: 0000000000000000 R09: 0000000000000000
[ 2135.775721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2135.776677] R13: 00007fffe290ab7f R14: 00007f1f7ca46300 R15: 0000000000022000
15:22:08 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
fcntl$dupfd(r1, 0x0, r0)
dup2(0xffffffffffffffff, r0)

[ 2135.794769] FAULT_INJECTION: forcing a failure.
[ 2135.794769] name failslab, interval 1, probability 0, space 0, times 0
[ 2135.796551] CPU: 0 PID: 10607 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2135.797473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2135.798438] Call Trace:
[ 2135.798749]  dump_stack+0x107/0x167
[ 2135.799172]  should_fail.cold+0x5/0xa
[ 2135.799624]  ? kobject_get_path+0xc5/0x1f0
[ 2135.800120]  should_failslab+0x5/0x20
[ 2135.800556]  __kmalloc+0x72/0x390
[ 2135.800965]  ? trace_hardirqs_on+0x5b/0x180
[ 2135.801472]  kobject_get_path+0xc5/0x1f0
[ 2135.801949]  kobject_uevent_env+0x251/0xfd0
[ 2135.802475]  __kobject_del+0x27c/0x320
[ 2135.802935]  kobject_put+0x215/0x270
[ 2135.803385]  net_rx_queue_update_kobjects+0x375/0x480
[ 2135.803998]  netdev_unregister_kobject+0x157/0x280
[ 2135.804575]  unregister_netdevice_many+0xbb7/0x1490
[ 2135.805169]  ? netdev_pick_tx+0xc70/0xc70
[ 2135.805659]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2135.806284]  ? queue_delayed_work_on+0xb4/0xe0
[ 2135.806807]  ? trace_hardirqs_on+0x5b/0x180
[ 2135.807311]  unregister_netdevice_queue+0x201/0x2c0
[ 2135.807898]  ? unregister_netdevice_many+0x1490/0x1490
[ 2135.808526]  ? linkwatch_fire_event+0x63/0x190
[ 2135.809061]  __tun_detach+0xfc1/0x12b0
[ 2135.809525]  tun_chr_close+0xc4/0x250
[ 2135.809975]  __fput+0x285/0x9f0
[ 2135.810374]  ? __tun_detach+0x12b0/0x12b0
[ 2135.810864]  task_work_run+0xe2/0x1a0
[ 2135.811316]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2135.811902]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2135.812466]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2135.813070] RIP: 0033:0x7fa43fdb1b19
[ 2135.813512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2135.815681] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2135.816571] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2135.817410] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2135.818246] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2135.819088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2135.819927] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2135.830739] FAULT_INJECTION: forcing a failure.
[ 2135.830739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2135.832112] CPU: 0 PID: 10618 Comm: syz-executor.2 Not tainted 5.10.252 #1
[ 2135.832921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2135.833891] Call Trace:
[ 2135.834198]  dump_stack+0x107/0x167
[ 2135.834685]  should_fail.cold+0x5/0xa
[ 2135.835128]  _copy_from_user+0x2e/0x1b0
[ 2135.835599]  mon_bin_ioctl+0x84f/0xcc0
[ 2135.836061]  ? wait_for_completion_io+0x270/0x270
[ 2135.836628]  ? mon_bin_get_event+0x440/0x440
[ 2135.837146]  ? selinux_file_ioctl+0xb6/0x270
[ 2135.837661]  ? mon_bin_get_event+0x440/0x440
[ 2135.838186]  __x64_sys_ioctl+0x19a/0x210
[ 2135.838679]  do_syscall_64+0x33/0x40
[ 2135.839113]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2135.839715] RIP: 0033:0x7f3febf59b19
[ 2135.840154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2135.842320] RSP: 002b:00007f3fe94ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2135.843207] RAX: ffffffffffffffda RBX: 00007f3fec06d020 RCX: 00007f3febf59b19
[ 2135.844035] RDX: 0000000020001700 RSI: 0000000040189206 RDI: 0000000000000004
[ 2135.844875] RBP: 00007f3fe94ae1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2135.845710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2135.846578] R13: 00007ffebfb7a3bf R14: 00007f3fe94ae300 R15: 0000000000022000
15:22:08 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x3ada00)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)

15:22:08 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6) (fail_nth: 1)

15:22:08 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:22:08 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = dup2(0xffffffffffffffff, r0)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14)

[ 2135.900688] FAULT_INJECTION: forcing a failure.
[ 2135.900688] name failslab, interval 1, probability 0, space 0, times 0
[ 2135.903184] CPU: 1 PID: 10624 Comm: syz-executor.4 Not tainted 5.10.252 #1
[ 2135.904688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2135.906528] Call Trace:
[ 2135.907098]  dump_stack+0x107/0x167
[ 2135.907875]  should_fail.cold+0x5/0xa
[ 2135.908690]  ? mon_bin_ioctl+0x46f/0xcc0
[ 2135.909553]  should_failslab+0x5/0x20
[ 2135.910376]  __kmalloc+0x72/0x390
[ 2135.911120]  mon_bin_ioctl+0x46f/0xcc0
[ 2135.911951]  ? wait_for_completion_io+0x270/0x270
[ 2135.912980]  ? mon_bin_get_event+0x440/0x440
[ 2135.913923]  ? selinux_file_ioctl+0xb6/0x270
[ 2135.914873]  ? mon_bin_get_event+0x440/0x440
[ 2135.915813]  __x64_sys_ioctl+0x19a/0x210
[ 2135.916680]  do_syscall_64+0x33/0x40
[ 2135.917475]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2135.918575] RIP: 0033:0x7f1c3e971b19
[ 2135.919371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2135.923515] RSP: 002b:00007f1c3bee7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2135.925119] RAX: ffffffffffffffda RBX: 00007f1c3ea84f60 RCX: 00007f1c3e971b19
[ 2135.926656] RDX: 000000000007daf6 RSI: 0000000000009204 RDI: 0000000000000003
[ 2135.928166] RBP: 00007f1c3bee71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2135.929674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2135.931199] R13: 00007ffc12e31c5f R14: 00007f1c3bee7300 R15: 0000000000022000
[ 2135.939586] device wlan1 entered promiscuous mode
[ 2135.945029] device wlan1 left promiscuous mode
15:22:08 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2136.093115] device wlan1 entered promiscuous mode
[ 2136.099324] device wlan1 left promiscuous mode
[ 2149.797426] FAULT_INJECTION: forcing a failure.
[ 2149.797426] name failslab, interval 1, probability 0, space 0, times 0
[ 2149.801232] CPU: 1 PID: 10643 Comm: syz-executor.4 Not tainted 5.10.252 #1
[ 2149.802699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2149.804428] Call Trace:
[ 2149.804977]  dump_stack+0x107/0x167
[ 2149.805744]  should_fail.cold+0x5/0xa
[ 2149.806554]  ? create_object.isra.0+0x3a/0xa30
[ 2149.807511]  should_failslab+0x5/0x20
[ 2149.808306]  kmem_cache_alloc+0x5b/0x310
[ 2149.809156]  create_object.isra.0+0x3a/0xa30
[ 2149.810065]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2149.811153]  __kmalloc+0x16e/0x390
15:22:22 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6) (fail_nth: 2)

15:22:22 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001700)={0x0, 0x0}) (fail_nth: 2)

15:22:22 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:22:22 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0xff, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x8000, 0x0, 0x10000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = signalfd4(r0, &(0x7f0000000040)={[0x1]}, 0x8, 0x800)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x6)

15:22:22 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 16)

[ 2149.811901]  mon_bin_ioctl+0x46f/0xcc0
15:22:22 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0xc, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}, {&(0x7f0000000280)=""/36, 0x24}], 0x4}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2004, @fd_index=0x5, 0x54cc, 0x1, 0x81, 0x4}, 0x1)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={r4, r5+60000000}, 0x1, 0x1, 0x1}, 0x9)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r7, 0xfffff000)
dup2(0xffffffffffffffff, r6)

[ 2149.812871]  ? wait_for_completion_io+0x270/0x270
[ 2149.814071]  ? mon_bin_get_event+0x440/0x440
[ 2149.815023]  ? selinux_file_ioctl+0xb6/0x270
[ 2149.815948]  ? mon_bin_get_event+0x440/0x440
[ 2149.816883]  __x64_sys_ioctl+0x19a/0x210
[ 2149.817742]  do_syscall_64+0x33/0x40
[ 2149.818536]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2149.819619] RIP: 0033:0x7f1c3e971b19
[ 2149.820406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2149.824312] RSP: 002b:00007f1c3bee7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
15:22:22 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 6)

15:22:22 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x2)

[ 2149.825921] RAX: ffffffffffffffda RBX: 00007f1c3ea84f60 RCX: 00007f1c3e971b19
[ 2149.827625] RDX: 000000000007daf6 RSI: 0000000000009204 RDI: 0000000000000003
[ 2149.828211] FAULT_INJECTION: forcing a failure.
[ 2149.828211] name failslab, interval 1, probability 0, space 0, times 0
[ 2149.829130] RBP: 00007f1c3bee71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2149.829141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2149.829151] R13: 00007ffc12e31c5f R14: 00007f1c3bee7300 R15: 0000000000022000
[ 2149.836996] CPU: 0 PID: 10649 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2149.838570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2149.840445] Call Trace:
[ 2149.841048]  dump_stack+0x107/0x167
[ 2149.841887]  should_fail.cold+0x5/0xa
[ 2149.842767]  ? io_uring_setup+0x40b/0x2980
[ 2149.843728]  should_failslab+0x5/0x20
[ 2149.844592]  kmem_cache_alloc_trace+0x55/0x320
[ 2149.845630]  io_uring_setup+0x40b/0x2980
[ 2149.846563]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2149.847653]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2149.848793]  ? wait_for_completion_io+0x270/0x270
[ 2149.849912]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2149.851110]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2149.852280]  do_syscall_64+0x33/0x40
[ 2149.853124]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2149.854280] RIP: 0033:0x7fd237085b19
[ 2149.855138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2149.859341] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2149.861073] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2149.862713] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2149.864343] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2149.865960] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2149.867586] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:22:22 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x80}}, './file0\x00'})
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)

[ 2149.908831] FAULT_INJECTION: forcing a failure.
[ 2149.908831] name failslab, interval 1, probability 0, space 0, times 0
[ 2149.911487] CPU: 1 PID: 10640 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2149.912949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2149.914715] Call Trace:
[ 2149.915282]  dump_stack+0x107/0x167
[ 2149.916056]  should_fail.cold+0x5/0xa
[ 2149.916872]  ? create_object.isra.0+0x3a/0xa30
[ 2149.917834]  should_failslab+0x5/0x20
[ 2149.918652]  kmem_cache_alloc+0x5b/0x310
[ 2149.919512]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2149.920524]  create_object.isra.0+0x3a/0xa30
[ 2149.921443]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2149.922530]  __kmalloc+0x16e/0x390
[ 2149.923288]  kobject_get_path+0xc5/0x1f0
[ 2149.924153]  kobject_uevent_env+0x251/0xfd0
[ 2149.925064]  __kobject_del+0x27c/0x320
[ 2149.925876]  kobject_put+0x215/0x270
[ 2149.926663]  net_rx_queue_update_kobjects+0x375/0x480
15:22:22 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 7)

[ 2149.927760]  netdev_unregister_kobject+0x157/0x280
[ 2149.929041]  unregister_netdevice_many+0xbb7/0x1490
[ 2149.930089]  ? netdev_pick_tx+0xc70/0xc70
[ 2149.930976]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2149.932072]  ? queue_delayed_work_on+0xb4/0xe0
[ 2149.933038]  ? trace_hardirqs_on+0x5b/0x180
[ 2149.933955]  unregister_netdevice_queue+0x201/0x2c0
[ 2149.935019]  ? unregister_netdevice_many+0x1490/0x1490
[ 2149.936135]  ? linkwatch_fire_event+0x63/0x190
[ 2149.937111]  __tun_detach+0xfc1/0x12b0
[ 2149.937945]  tun_chr_close+0xc4/0x250
[ 2149.938763]  __fput+0x285/0x9f0
[ 2149.939460]  ? __tun_detach+0x12b0/0x12b0
[ 2149.940347]  task_work_run+0xe2/0x1a0
[ 2149.941163]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2149.942213]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2149.943242]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2149.944324] RIP: 0033:0x7fa43fdb1b19
[ 2149.945118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2149.949028] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2149.950655] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2149.952168] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2149.953679] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2149.955202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2149.956712] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:22:22 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x4b47)

15:22:22 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6) (fail_nth: 3)

[ 2150.012305] FAULT_INJECTION: forcing a failure.
[ 2150.012305] name failslab, interval 1, probability 0, space 0, times 0
[ 2150.015270] CPU: 0 PID: 10663 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2150.016850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2150.018749] Call Trace:
[ 2150.019354]  dump_stack+0x107/0x167
[ 2150.020186]  should_fail.cold+0x5/0xa
[ 2150.021057]  ? create_object.isra.0+0x3a/0xa30
[ 2150.022109]  should_failslab+0x5/0x20
[ 2150.022996]  kmem_cache_alloc+0x5b/0x310
[ 2150.023950]  create_object.isra.0+0x3a/0xa30
[ 2150.024965]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2150.026136]  kmem_cache_alloc_trace+0x151/0x320
[ 2150.027221]  io_uring_setup+0x40b/0x2980
[ 2150.028150]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2150.029257]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2150.030434]  ? wait_for_completion_io+0x270/0x270
[ 2150.031570]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2150.032770]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2150.033960]  do_syscall_64+0x33/0x40
[ 2150.034819]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2150.035994] RIP: 0033:0x7fd237085b19
[ 2150.036843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2150.041078] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2150.042826] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2150.044464] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2150.046104] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2150.047738] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2150.049364] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2150.054258] device wlan1 entered promiscuous mode
[ 2150.071727] device wlan1 left promiscuous mode
15:22:22 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x43}, 0x8000, 0x0, 0x10000, 0x8, 0x4, 0x401, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000004600)=ANY=[@ANYRES16=r0])

15:22:22 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x4b49)

15:22:23 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2150.127396] FAULT_INJECTION: forcing a failure.
[ 2150.127396] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2150.130000] CPU: 1 PID: 10672 Comm: syz-executor.4 Not tainted 5.10.252 #1
[ 2150.131469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2150.133219] Call Trace:
[ 2150.133781]  dump_stack+0x107/0x167
[ 2150.134573]  should_fail.cold+0x5/0xa
[ 2150.135385]  __alloc_pages_nodemask+0x182/0x600
[ 2150.136374]  ? lock_release+0x680/0x680
[ 2150.137217]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2150.138498]  ? lock_downgrade+0x6d0/0x6d0
[ 2150.139382]  alloc_pages_current+0x187/0x280
[ 2150.140319]  get_zeroed_page+0x14/0xb0
[ 2150.141145]  ? kasan_unpoison_shadow+0x33/0x50
[ 2150.142107]  mon_alloc_buff+0xed/0x250
[ 2150.142943]  mon_bin_ioctl+0x493/0xcc0
[ 2150.143766]  ? wait_for_completion_io+0x270/0x270
[ 2150.144789]  ? mon_bin_get_event+0x440/0x440
[ 2150.145723]  ? selinux_file_ioctl+0xb6/0x270
[ 2150.146665]  ? mon_bin_get_event+0x440/0x440
[ 2150.147599]  __x64_sys_ioctl+0x19a/0x210
[ 2150.148460]  do_syscall_64+0x33/0x40
[ 2150.149246]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2150.150327] RIP: 0033:0x7f1c3e971b19
[ 2150.151118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2150.155002] RSP: 002b:00007f1c3bee7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2150.156605] RAX: ffffffffffffffda RBX: 00007f1c3ea84f60 RCX: 00007f1c3e971b19
[ 2150.158110] RDX: 000000000007daf6 RSI: 0000000000009204 RDI: 0000000000000003
[ 2150.159715] RBP: 00007f1c3bee71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2150.161216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2150.162724] R13: 00007ffc12e31c5f R14: 00007f1c3bee7300 R15: 0000000000022000
[ 2150.213203] device wlan1 entered promiscuous mode
[ 2150.218050] device wlan1 left promiscuous mode
[ 2150.646597] FAULT_INJECTION: forcing a failure.
[ 2150.646597] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2150.650571] CPU: 1 PID: 10654 Comm: syz-executor.2 Not tainted 5.10.252 #1
[ 2150.652504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2150.654829] Call Trace:
[ 2150.655575]  dump_stack+0x107/0x167
[ 2150.656589]  should_fail.cold+0x5/0xa
[ 2150.657651]  __alloc_pages_nodemask+0x182/0x600
[ 2150.658961]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2150.660648]  alloc_pages_current+0x187/0x280
[ 2150.661859]  __get_free_pages+0xc/0xa0
[ 2150.662931]  __tlb_remove_page_size+0x257/0x420
[ 2150.664218]  unmap_page_range+0x1186/0x1fe0
[ 2150.665442]  ? vm_normal_page+0x2e0/0x2e0
[ 2150.666608]  ? lock_downgrade+0x6d0/0x6d0
[ 2150.667743]  ? uprobe_munmap+0x1c/0x560
[ 2150.668856]  unmap_single_vma+0x198/0x300
[ 2150.670015]  unmap_vmas+0x16d/0x300
[ 2150.671027]  ? zap_vma_ptes+0x100/0x100
[ 2150.672140]  exit_mmap+0x27f/0x4f0
[ 2150.673118]  ? __ia32_sys_remap_file_pages+0x150/0x150
[ 2150.674596]  mmput+0xca/0x340
[ 2150.675452]  do_exit+0xa9e/0x2600
[ 2150.676425]  ? find_held_lock+0x2c/0x110
[ 2150.677536]  ? mm_update_next_owner+0x830/0x830
[ 2150.678834]  ? get_signal+0x37e/0x2350
[ 2150.679904]  ? lock_downgrade+0x6d0/0x6d0
[ 2150.681034]  ? do_raw_spin_lock+0x121/0x260
[ 2150.682223]  ? rwlock_bug.part.0+0x90/0x90
[ 2150.683401]  do_group_exit+0x125/0x310
[ 2150.684485]  get_signal+0x4bc/0x2350
[ 2150.685532]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2150.686866]  arch_do_signal_or_restart+0x2b7/0x1990
[ 2150.688239]  ? mon_bin_get_event+0x34a/0x440
[ 2150.689433]  ? _copy_from_user+0xfb/0x1b0
[ 2150.690581]  ? restore_sigcontext+0x630/0x630
[ 2150.691799]  ? mon_bin_ioctl+0x3b7/0xcc0
[ 2150.692934]  ? wait_for_completion_io+0x270/0x270
[ 2150.694269]  ? mon_bin_get_event+0x440/0x440
[ 2150.695491]  ? task_work_add+0x98/0x190
[ 2150.696609]  exit_to_user_mode_prepare+0x127/0x1e0
[ 2150.697974]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2150.699306]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2150.700687] RIP: 0033:0x7f3febf59b19
[ 2150.701709] Code: Unable to access opcode bytes at RIP 0x7f3febf59aef.
[ 2150.703507] RSP: 002b:00007f3fe94ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2150.705546] RAX: fffffffffffffffc RBX: 00007f3fec06d020 RCX: 00007f3febf59b19
[ 2150.707489] RDX: 0000000020001700 RSI: 0000000040189206 RDI: 0000000000000004
[ 2150.709424] RBP: 00007f3fe94ae1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2150.711373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2150.713341] R13: 00007ffebfb7a3bf R14: 00007f3fe94ae300 R15: 0000000000022000
[ 2164.400770] FAULT_INJECTION: forcing a failure.
[ 2164.400770] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2164.402503] CPU: 0 PID: 10685 Comm: syz-executor.4 Not tainted 5.10.252 #1
[ 2164.403451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2164.404549] Call Trace:
[ 2164.404907]  dump_stack+0x107/0x167
[ 2164.405400]  should_fail.cold+0x5/0xa
[ 2164.405915]  __alloc_pages_nodemask+0x182/0x600
[ 2164.406544]  ? lock_release+0x680/0x680
[ 2164.407092]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2164.407903]  ? lock_downgrade+0x6d0/0x6d0
[ 2164.408462]  alloc_pages_current+0x187/0x280
[ 2164.409051]  get_zeroed_page+0x14/0xb0
[ 2164.409571]  ? kasan_unpoison_shadow+0x33/0x50
[ 2164.410194]  mon_alloc_buff+0xed/0x250
[ 2164.410738]  mon_bin_ioctl+0x493/0xcc0
[ 2164.411264]  ? wait_for_completion_io+0x270/0x270
[ 2164.411917]  ? mon_bin_get_event+0x440/0x440
[ 2164.412513]  ? selinux_file_ioctl+0xb6/0x270
[ 2164.413105]  ? mon_bin_get_event+0x440/0x440
[ 2164.413706]  __x64_sys_ioctl+0x19a/0x210
[ 2164.414257]  do_syscall_64+0x33/0x40
[ 2164.414768]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2164.415453] RIP: 0033:0x7f1c3e971b19
[ 2164.415946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2164.418429] RSP: 002b:00007f1c3bee7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2164.419451] RAX: ffffffffffffffda RBX: 00007f1c3ea84f60 RCX: 00007f1c3e971b19
[ 2164.420398] RDX: 000000000007daf6 RSI: 0000000000009204 RDI: 0000000000000003
[ 2164.421342] RBP: 00007f1c3bee71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2164.422302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2164.423258] R13: 00007ffc12e31c5f R14: 00007f1c3bee7300 R15: 0000000000022000
15:22:37 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001700)={0x0, 0x0})

15:22:37 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:22:37 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
lseek(r1, 0x7, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
dup2(0xffffffffffffffff, r0)

15:22:37 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x541b)

15:22:37 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
fstat(r0, &(0x7f0000000000))
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r1, 0xfffff000)

15:22:37 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 17)

15:22:37 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 8)

15:22:37 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6) (fail_nth: 4)

[ 2164.432921] FAULT_INJECTION: forcing a failure.
[ 2164.432921] name failslab, interval 1, probability 0, space 0, times 0
[ 2164.434549] CPU: 0 PID: 10693 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2164.435514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2164.436627] Call Trace:
[ 2164.436984]  dump_stack+0x107/0x167
[ 2164.437509]  should_fail.cold+0x5/0xa
[ 2164.438084]  ? create_object.isra.0+0x3a/0xa30
[ 2164.438715]  should_failslab+0x5/0x20
[ 2164.439232]  kmem_cache_alloc+0x5b/0x310
[ 2164.439794]  create_object.isra.0+0x3a/0xa30
[ 2164.440402]  kmemleak_alloc_percpu+0xa0/0x100
[ 2164.441001]  pcpu_alloc+0x4e2/0x1240
[ 2164.441507]  ? io_tctx_exit_cb+0xf0/0xf0
[ 2164.442063]  percpu_ref_init+0x31/0x3d0
[ 2164.442631]  io_uring_setup+0x47a/0x2980
[ 2164.443187]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2164.443833]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2164.444526]  ? wait_for_completion_io+0x270/0x270
[ 2164.445224]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2164.445935]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2164.446654]  do_syscall_64+0x33/0x40
[ 2164.447160]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2164.447854] RIP: 0033:0x7fd237085b19
[ 2164.448358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2164.450865] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2164.451873] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2164.452832] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2164.453788] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2164.454784] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2164.455737] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:22:37 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x5421)

[ 2164.494313] FAULT_INJECTION: forcing a failure.
[ 2164.494313] name failslab, interval 1, probability 0, space 0, times 0
[ 2164.497336] CPU: 1 PID: 10696 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2164.498866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2164.500657] Call Trace:
[ 2164.501225]  dump_stack+0x107/0x167
[ 2164.502022]  should_fail.cold+0x5/0xa
[ 2164.502878]  ? create_object.isra.0+0x3a/0xa30
[ 2164.503870]  should_failslab+0x5/0x20
[ 2164.504699]  kmem_cache_alloc+0x5b/0x310
[ 2164.505585]  create_object.isra.0+0x3a/0xa30
[ 2164.506525]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2164.507904]  __kmalloc+0x16e/0x390
[ 2164.508856]  kobject_get_path+0xc5/0x1f0
[ 2164.509945]  kobject_uevent_env+0x251/0xfd0
[ 2164.511083]  __kobject_del+0x27c/0x320
[ 2164.511933]  kobject_put+0x215/0x270
[ 2164.512730]  net_rx_queue_update_kobjects+0x375/0x480
[ 2164.513836]  netdev_unregister_kobject+0x157/0x280
[ 2164.514895]  unregister_netdevice_many+0xbb7/0x1490
[ 2164.515960]  ? netdev_pick_tx+0xc70/0xc70
[ 2164.516851]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2164.517962]  ? queue_delayed_work_on+0xb4/0xe0
[ 2164.518939]  ? trace_hardirqs_on+0x5b/0x180
[ 2164.519881]  unregister_netdevice_queue+0x201/0x2c0
[ 2164.520939]  ? unregister_netdevice_many+0x1490/0x1490
[ 2164.522054]  ? linkwatch_fire_event+0x63/0x190
[ 2164.523034]  __tun_detach+0xfc1/0x12b0
[ 2164.523865]  tun_chr_close+0xc4/0x250
[ 2164.524671]  __fput+0x285/0x9f0
[ 2164.525367]  ? __tun_detach+0x12b0/0x12b0
[ 2164.526256]  task_work_run+0xe2/0x1a0
[ 2164.527077]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2164.528121]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2164.529146]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2164.530234] RIP: 0033:0x7fa43fdb1b19
[ 2164.531036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2164.535007] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2164.536620] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2164.538118] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2164.539640] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2164.541194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2164.542715] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:22:37 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = inotify_init()
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000140)=""/253, 0xfd}, {&(0x7f0000000240)=""/42, 0x2a}], 0x5, 0x1, 0x401)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
flock(r2, 0x0)

15:22:37 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 9)

[ 2164.565193] FAULT_INJECTION: forcing a failure.
[ 2164.565193] name failslab, interval 1, probability 0, space 0, times 0
[ 2164.566997] CPU: 0 PID: 10707 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2164.567891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2164.568955] Call Trace:
[ 2164.569295]  dump_stack+0x107/0x167
[ 2164.569777]  should_fail.cold+0x5/0xa
[ 2164.570278]  ? create_object.isra.0+0x3a/0xa30
[ 2164.570877]  should_failslab+0x5/0x20
[ 2164.571395]  kmem_cache_alloc+0x5b/0x310
[ 2164.571928]  create_object.isra.0+0x3a/0xa30
[ 2164.572501]  kmemleak_alloc_percpu+0xa0/0x100
[ 2164.573093]  pcpu_alloc+0x4e2/0x1240
[ 2164.573602]  ? io_tctx_exit_cb+0xf0/0xf0
[ 2164.574134]  percpu_ref_init+0x31/0x3d0
[ 2164.574662]  io_uring_setup+0x47a/0x2980
[ 2164.575180]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2164.575808]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2164.576484]  ? wait_for_completion_io+0x270/0x270
[ 2164.577140]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2164.577828]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2164.578502]  do_syscall_64+0x33/0x40
[ 2164.578998]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2164.579665] RIP: 0033:0x7fd237085b19
[ 2164.580151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2164.582550] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2164.583523] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2164.584447] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2164.585384] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2164.586288] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2164.587228] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:22:37 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x1208d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
dup2(0xffffffffffffffff, r1)
r3 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x5, 0xa, &(0x7f0000001880)=[{&(0x7f0000000100)="547962e02cc48002b2e576f6bb0d3ced0a016b594329e98f6f7f4257f5e374964e65ebcaedd75cbb2a1b1eae1615c190015b889d26ffd5ee8efe626ebcbffd311c6f3a95ff4163bc7e32471064b89dcf868518edde3a7b2d1aedfb6ba094ac329b47bfb09cafa3ccf20db896224e6e54689e86f7b6558b07e723b55dada7d92465f865206312a4295cf62c0d9a236cd9da88717beb9da1e1577f933afbe285e9b267d2eec241d00bfe0513816f3e4ed7a7d15a661912da12", 0xb8, 0x4}, {&(0x7f00000001c0)="d3f658e8c1762d8284746469840a9a9829d0e17ccd4f48b546e59a10252d9c0e1a4cb9814a7091d7f6059273f4e6eebfa79ee44c42462c78d5319ba9f0a79a1efd7b25b2f51526c23c244876fe024721b74e06917e25e22ef1d44cb7c5a387174258babe6e2b8955fae080cd5cd3ac1d8b74fbda78abb4acc0082578d6db54e2d6c2303886a0e19d643b0ce3c4b0a4d8605a3d817c77b83c5dd244e1056dfa8d32b877533a9b64", 0xa7, 0xfff}, {&(0x7f0000000280)="2dbd931fdc94196fb58f611e5c16464c56452b239a444042f34dd2f39c1aa11bc107014bb3978dffc0ea0db4db69b5f6b9b03c741fb015b4093e36bc358863a6dae08ba3d05ff145", 0x48, 0x1}, {&(0x7f0000000300)="ca9e571f818ebf969947ea1d906233bc04145b47be5b61f2c624e54c9fb2378b1591c2159186390b8ba66fd4483e32351fdef63dbe53d7f47d77af7f6ca45961785e4c4b9baac0cd8146b097", 0x4c, 0x5}, {&(0x7f0000000380)="93b84c60ccd82ec7081b2359788bc5e52dd71a3a542315f532ab7792e5103807e5d10cade4078b04ecc2922cbbe44049f61fdb985b4926231c40c1bcd5fa8b73e36a20c8817d678766a59d3f485d2ddabc1dad41f7bbee43483a9c13a9e8983323d0976384f402bfbe0c8bfcc4af9692a95e0db4f1d599d1ad103572d7d64eb1cec9499a192fd1f2b040af5b17d3383042974bf4fa4a7ef3321e199407847d3ec92a53592b42cff63aa15dca349642229f3b3f8003be370e06358b82f6a1333cde1637e34a9e816b9f7b3e0a0ce16a0dc168216d061c221b115939d6a365ef1a33", 0xe1, 0x400}, {&(0x7f0000000500)="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", 0x1000, 0xba}, {&(0x7f0000001500)="16ea0fbc01de6e53c73c07806d873e7cfb4654a03056280872539a3e14614da16e4f51314a5320b9b067805371f3ca7cbee52ec6f4e5fc3a2fd3769106787e07de5affda270791ec4e27079abb26c54e7344ba100cf4202d37cd55426a68789a09c5cd0f0646b3074db595681b9a73fe55a16b7a589b2efcf1f98e88aae1858cbf4184141ef6086c5cfa", 0x8a, 0x4}, {&(0x7f0000001600)="618d34ae258424d6fd3cbefc19a503fbc6f110427de5b1b686a5658262dad1f9a6b8a5917e3880fcf06346a4fe1f77a21ec034be0eb2dece4a1a92a3a0bf6ae2f11dfba962e33e1cbe0961e79a248d505022e1840e6bbd01a5493c4a021bc5df35418c18f09755f7b5006c0a7fa23be03c437e4579129c69a1e7eb4be0803b8f6fec8ed6e47aa43624d5c3e389e162e39a52965746b209d04fcc167e266465fac467efadec9fa7a5b9fcfa6e65d4f955bc476d54965f5b0513c2f4c0279cd70367c4bb110c574754", 0xc8, 0x4}, {&(0x7f0000001700)="1558e45ff56c2cef5068d463cf65905bc56a3852527decf47b1443ee065c111533ab0a9fa7ff7098d89f800004eb56f9e0651b512b039346e001ceeaa1bcdd57f80150812e5c58101c8c86cbb9f699810a94814a47a8cf2e5daeaa681fcfc2b0bf597e0d5efe974b2397396bb9e45645b609625455cb0850d0edd7a54685c0374e689443e2c904d3d12f77d0cc6e0a06759f9d0c6019801dc14b1f48bbb6cf679023c9ced99dec1961674952f76ac6", 0xaf, 0x91}, {&(0x7f00000017c0)="e05b9e37102e8ccee6f3887e494cfdec736a88c2eee79f16c9d195691ef0399060e7f953d6da0959f2b7525c50a0cb63e981c4acbd8837d8e7d101ee5d13be31b2c6744c674eb1b2c21324c6997f5f1e835b60742d4986c0f66af915b51e759f43eaa6e8c51d06ffab179c83a673379d5cfc68b4e1d1d8d0fb6171ff85a4399f6b4e30877982f33553e0404359", 0x8d, 0x80000001}], 0x800, &(0x7f0000001980)={[{@check_relaxed}, {@utf8}], [{@audit}, {@hash}]})
write$binfmt_elf64(r3, &(0x7f00000019c0)={{0x7f, 0x45, 0x4c, 0x46, 0x48, 0x1, 0x6, 0x9b, 0x72, 0x2, 0x6, 0x6, 0x136, 0x40, 0x1f9, 0x33fdb268, 0x7, 0x38, 0x1, 0x4, 0xb0, 0x68}, [{0x70000000, 0x3, 0x100000000, 0x10001, 0x5, 0x3ff, 0xc30d, 0x3}, {0x2, 0x7, 0x718d, 0x9, 0x0, 0x3, 0x9, 0x3}], "b1bf2de7894022aea1fbab14239543581f44fe0fac6a5b4900505b672745ef0f01250e298201c312064a6f451add5658f7d61ab6cb2e8d42cfc695e5ff3eb22d43f1ae155af79c189b514fb10544c1758ea693d51720a9801107c9a23edaf8b2d59e56c48e570e7f2bf6067def2b3226e01e2214a801c25dca7bd51825d328c6b223cfa438517ca28d4984dea5186519b1658b4bdecf8ae95d", ['\x00', '\x00', '\x00', '\x00']}, 0x549)

15:22:37 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6) (fail_nth: 5)

[ 2164.600672] FAULT_INJECTION: forcing a failure.
[ 2164.600672] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2164.603230] CPU: 1 PID: 10713 Comm: syz-executor.4 Not tainted 5.10.252 #1
[ 2164.604697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2164.606458] Call Trace:
[ 2164.607030]  dump_stack+0x107/0x167
[ 2164.607806]  should_fail.cold+0x5/0xa
[ 2164.608632]  __alloc_pages_nodemask+0x182/0x600
[ 2164.609638]  ? lock_release+0x680/0x680
[ 2164.610489]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2164.611775]  ? lock_downgrade+0x6d0/0x6d0
[ 2164.612659]  alloc_pages_current+0x187/0x280
[ 2164.613588]  get_zeroed_page+0x14/0xb0
[ 2164.614408]  ? kasan_unpoison_shadow+0x33/0x50
[ 2164.615384]  mon_alloc_buff+0xed/0x250
[ 2164.616212]  mon_bin_ioctl+0x493/0xcc0
[ 2164.617039]  ? wait_for_completion_io+0x270/0x270
[ 2164.618061]  ? mon_bin_get_event+0x440/0x440
[ 2164.619011]  ? selinux_file_ioctl+0xb6/0x270
[ 2164.619949]  ? mon_bin_get_event+0x440/0x440
[ 2164.620893]  __x64_sys_ioctl+0x19a/0x210
[ 2164.621759]  do_syscall_64+0x33/0x40
[ 2164.622553]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2164.623648] RIP: 0033:0x7f1c3e971b19
[ 2164.624424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2164.628363] RSP: 002b:00007f1c3bee7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2164.629974] RAX: ffffffffffffffda RBX: 00007f1c3ea84f60 RCX: 00007f1c3e971b19
[ 2164.631499] RDX: 000000000007daf6 RSI: 0000000000009204 RDI: 0000000000000003
[ 2164.633036] RBP: 00007f1c3bee71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2164.634577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2164.636107] R13: 00007ffc12e31c5f R14: 00007f1c3bee7300 R15: 0000000000022000
[ 2164.638057] device wlan1 entered promiscuous mode
[ 2164.640996] device wlan1 left promiscuous mode
15:22:37 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x5450)

15:22:37 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 10)

[ 2164.659071] loop5: detected capacity change from 0 to 135266304
15:22:37 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2164.688548] loop5: detected capacity change from 0 to 135266304
[ 2164.704591] FAULT_INJECTION: forcing a failure.
[ 2164.704591] name failslab, interval 1, probability 0, space 0, times 0
[ 2164.707014] CPU: 1 PID: 10720 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2164.708481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2164.710234] Call Trace:
[ 2164.710810]  dump_stack+0x107/0x167
[ 2164.711588]  should_fail.cold+0x5/0xa
[ 2164.712404]  ? percpu_ref_init+0xd8/0x3d0
[ 2164.713281]  should_failslab+0x5/0x20
[ 2164.714095]  kmem_cache_alloc_trace+0x55/0x320
[ 2164.715070]  ? io_tctx_exit_cb+0xf0/0xf0
[ 2164.715932]  percpu_ref_init+0xd8/0x3d0
[ 2164.716788]  io_uring_setup+0x47a/0x2980
[ 2164.717656]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2164.718691]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2164.719765]  ? wait_for_completion_io+0x270/0x270
[ 2164.720806]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2164.721924]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2164.723036]  do_syscall_64+0x33/0x40
[ 2164.723832]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2164.724926] RIP: 0033:0x7fd237085b19
[ 2164.725720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2164.729630] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2164.731261] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2164.732770] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2164.734279] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2164.735798] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2164.737310] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2164.796017] device wlan1 entered promiscuous mode
[ 2164.799643] device wlan1 left promiscuous mode
15:22:52 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x5451)

15:22:52 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:22:52 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe5, 0x3f}, 0x8000, 0x1, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)

15:22:52 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 18)

15:22:52 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6) (fail_nth: 6)

15:22:52 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0)
syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x381100)
syz_io_uring_submit(r4, r7, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[r9, r10], 0x2}, 0x9)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)

15:22:52 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 11)

15:22:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x2, &(0x7f0000001700)={0x0, 0x0})

[ 2179.561779] FAULT_INJECTION: forcing a failure.
[ 2179.561779] name failslab, interval 1, probability 0, space 0, times 0
[ 2179.563859] CPU: 1 PID: 10736 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2179.564760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2179.565853] Call Trace:
[ 2179.566201]  dump_stack+0x107/0x167
[ 2179.566680]  should_fail.cold+0x5/0xa
[ 2179.567195]  ? create_object.isra.0+0x3a/0xa30
[ 2179.567781]  should_failslab+0x5/0x20
[ 2179.568282]  kmem_cache_alloc+0x5b/0x310
[ 2179.568817]  create_object.isra.0+0x3a/0xa30
[ 2179.569388]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2179.570055]  kmem_cache_alloc_node+0x169/0x330
[ 2179.570662]  __alloc_skb+0x6d/0x5b0
[ 2179.571176]  alloc_uevent_skb+0x7b/0x210
[ 2179.571703]  kobject_uevent_env+0xce1/0xfd0
[ 2179.572270]  __kobject_del+0x27c/0x320
[ 2179.572772]  kobject_put+0x215/0x270
[ 2179.573259]  net_rx_queue_update_kobjects+0x375/0x480
[ 2179.573304] FAULT_INJECTION: forcing a failure.
[ 2179.573304] name failslab, interval 1, probability 0, space 0, times 0
[ 2179.573927]  netdev_unregister_kobject+0x157/0x280
[ 2179.577029]  unregister_netdevice_many+0xbb7/0x1490
[ 2179.577666]  ? netdev_pick_tx+0xc70/0xc70
[ 2179.578198]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2179.578888]  ? queue_delayed_work_on+0xb4/0xe0
[ 2179.579485]  ? trace_hardirqs_on+0x5b/0x180
[ 2179.580053]  unregister_netdevice_queue+0x201/0x2c0
[ 2179.580687]  ? unregister_netdevice_many+0x1490/0x1490
[ 2179.581356]  ? linkwatch_fire_event+0x63/0x190
[ 2179.581945]  __tun_detach+0xfc1/0x12b0
[ 2179.582446]  tun_chr_close+0xc4/0x250
[ 2179.582953]  __fput+0x285/0x9f0
[ 2179.583395]  ? __tun_detach+0x12b0/0x12b0
[ 2179.583932]  task_work_run+0xe2/0x1a0
[ 2179.584424]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2179.585062]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2179.585688]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2179.586341] RIP: 0033:0x7fa43fdb1b19
[ 2179.586836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2179.589211] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2179.590191] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2179.591129] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2179.592041] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2179.592958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2179.593879] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2179.594832] CPU: 0 PID: 10743 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2179.596391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2179.598250] Call Trace:
[ 2179.598850]  dump_stack+0x107/0x167
[ 2179.599663]  should_fail.cold+0x5/0xa
[ 2179.600510]  ? create_object.isra.0+0x3a/0xa30
[ 2179.601524]  should_failslab+0x5/0x20
[ 2179.602376]  kmem_cache_alloc+0x5b/0x310
[ 2179.603303]  create_object.isra.0+0x3a/0xa30
[ 2179.604284]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2179.605420]  kmem_cache_alloc_trace+0x151/0x320
[ 2179.606463]  ? io_tctx_exit_cb+0xf0/0xf0
[ 2179.607384]  percpu_ref_init+0xd8/0x3d0
[ 2179.608278]  io_uring_setup+0x47a/0x2980
[ 2179.609187]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2179.610261]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2179.611402]  ? wait_for_completion_io+0x270/0x270
[ 2179.612511]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2179.613690]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2179.614850]  do_syscall_64+0x33/0x40
[ 2179.615682]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2179.616830] RIP: 0033:0x7fd237085b19
[ 2179.617667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2179.621748] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2179.623441] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2179.625016] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2179.626595] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2179.628185] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2179.629774] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2179.638307] FAULT_INJECTION: forcing a failure.
[ 2179.638307] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2179.641031] CPU: 0 PID: 10735 Comm: syz-executor.4 Not tainted 5.10.252 #1
[ 2179.642542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2179.644364] Call Trace:
[ 2179.644940]  dump_stack+0x107/0x167
[ 2179.645733]  should_fail.cold+0x5/0xa
[ 2179.646572]  __alloc_pages_nodemask+0x182/0x600
[ 2179.647596]  ? lock_release+0x680/0x680
15:22:52 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x100000c, 0x10010, 0xffffffffffffffff, 0x10000000)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x1, &(0x7f00000000c0)="336ab7b948353748332461163e568c38cd622b6c0eeec7aaf799f07fa17447f25c5155f3e1f23e09f6eea01faa4c3abbb0f0aacc4d247a72b36f339f5b1473cee51d73a18df36e587ecae9da43a9cafc17a1af4ddc5781e6f0ef7b06e31f3caea5cd47f6d8e88b69882f5452d897a0ae25dfa67d18ab077bdef340cf556ebf94de8497995d1c81bb3fb8f62ba92b", 0x0, 0x0, 0x1, {0x3, r1}}, 0xd4f)
syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x7, &(0x7f00000001c0), 0x1, 0x1, 0x0, {0x0, r1}}, 0x800)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000180)={0x8, 'wlan0\x00', {'rose0\x00'}, 0x1c3})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x68, 0x18, 0x20, 0x70bd2c, 0x25dfdbfd, {0x18}, [@typed={0x48, 0x3d, 0x0, 0x0, @binary="0f11671743eb3db7d320dd2b789c886e642dc58c540b5226394a21decd50d68c5d439720adfcf5516f7502c3c2c2ecf04e8f7ce6996f6aced5d618fb0ee7901bd1b53999"}, @nested={0xc, 0x25, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @u32=0x3f}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)

[ 2179.648464]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2179.649949]  ? lock_downgrade+0x6d0/0x6d0
[ 2179.650878]  alloc_pages_current+0x187/0x280
[ 2179.651840]  get_zeroed_page+0x14/0xb0
[ 2179.652685]  ? kasan_unpoison_shadow+0x33/0x50
[ 2179.653681]  mon_alloc_buff+0xed/0x250
[ 2179.654536]  mon_bin_ioctl+0x493/0xcc0
[ 2179.655396]  ? wait_for_completion_io+0x270/0x270
[ 2179.656454]  ? mon_bin_get_event+0x440/0x440
[ 2179.657421]  ? selinux_file_ioctl+0xb6/0x270
[ 2179.658382]  ? mon_bin_get_event+0x440/0x440
[ 2179.659346]  __x64_sys_ioctl+0x19a/0x210
[ 2179.660234]  do_syscall_64+0x33/0x40
[ 2179.661041]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2179.662156] RIP: 0033:0x7f1c3e971b19
[ 2179.662967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2179.666968] RSP: 002b:00007f1c3bee7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2179.668615] RAX: ffffffffffffffda RBX: 00007f1c3ea84f60 RCX: 00007f1c3e971b19
[ 2179.670158] RDX: 000000000007daf6 RSI: 0000000000009204 RDI: 0000000000000003
[ 2179.671712] RBP: 00007f1c3bee71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2179.673255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2179.674806] R13: 00007ffc12e31c5f R14: 00007f1c3bee7300 R15: 0000000000022000
[ 2179.690443] device wlan1 entered promiscuous mode
[ 2179.702200] device wlan1 left promiscuous mode
15:22:52 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0xfffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)

15:22:52 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 19)

15:22:52 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x5452)

15:22:52 executing program 5:
sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="816fbc6e59552555afa034c69807e7d65447d1fbe5005c49224d98de6718ea8f04f71332f8a66f8656f2e0fa255a310c57031d083901582a633ce538f25f1e49f96ca2be01fd918371d1c1edb9b67034ab2deb47a8009700cb1b0d2b9e25753bf0b21f4194f8882de963d700188275b9156f", 0x72, 0x20000841, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x4c100, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="d98c31bce5e60774bf130001a2c2cc969c7a829c45d3192950557c36480ddafc2739543ed642f13876571afc14d26340849971f562feb3546da2f39f267ea644bee3d49002ba1aa6bea0ed187f0ebb9e21a1c37397af37e9bfd16b3796370a506ee5513fe4815afc2e4ad537f79e7683ee687ad4b2502f27220b1ed8528dfc1a5b7e39b09cbea81369d58c71b2aa928728767423dd0e18d2c2aa15cc3b781fa08e8c60ee092aa8efd02e32512db9caa10111a9fd80bc3fe1fec3ee4ce931142269a4dd", 0xc3}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000500)="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", 0x1000}], 0x1, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001500)="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", 0x1000}], 0x1}}], 0x3, 0xc0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
dup2(0xffffffffffffffff, r0)
rename(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)='./file0\x00')

15:22:52 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6) (fail_nth: 7)

15:22:52 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2179.796200] FAULT_INJECTION: forcing a failure.
[ 2179.796200] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2179.797628] CPU: 1 PID: 10766 Comm: syz-executor.4 Not tainted 5.10.252 #1
[ 2179.798435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2179.799414] Call Trace:
[ 2179.799728]  dump_stack+0x107/0x167
[ 2179.800152]  should_fail.cold+0x5/0xa
[ 2179.800601]  __alloc_pages_nodemask+0x182/0x600
[ 2179.801141]  ? lock_release+0x680/0x680
[ 2179.801605]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2179.802310]  ? lock_downgrade+0x6d0/0x6d0
[ 2179.802866]  alloc_pages_current+0x187/0x280
[ 2179.803377]  get_zeroed_page+0x14/0xb0
[ 2179.803829]  ? kasan_unpoison_shadow+0x33/0x50
[ 2179.804358]  mon_alloc_buff+0xed/0x250
[ 2179.804815]  mon_bin_ioctl+0x493/0xcc0
[ 2179.805273]  ? wait_for_completion_io+0x270/0x270
[ 2179.805838]  ? mon_bin_get_event+0x440/0x440
[ 2179.806357]  ? selinux_file_ioctl+0xb6/0x270
[ 2179.806889]  ? mon_bin_get_event+0x440/0x440
[ 2179.807406]  __x64_sys_ioctl+0x19a/0x210
[ 2179.807883]  do_syscall_64+0x33/0x40
[ 2179.808318]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2179.808915] RIP: 0033:0x7f1c3e971b19
[ 2179.809352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2179.811515] RSP: 002b:00007f1c3bee7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2179.812401] RAX: ffffffffffffffda RBX: 00007f1c3ea84f60 RCX: 00007f1c3e971b19
[ 2179.813235] RDX: 000000000007daf6 RSI: 0000000000009204 RDI: 0000000000000003
[ 2179.814062] RBP: 00007f1c3bee71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2179.814908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2179.815736] R13: 00007ffc12e31c5f R14: 00007f1c3bee7300 R15: 0000000000022000
[ 2179.821723] FAULT_INJECTION: forcing a failure.
[ 2179.821723] name failslab, interval 1, probability 0, space 0, times 0
[ 2179.824731] CPU: 0 PID: 10763 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2179.826326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2179.828281] Call Trace:
[ 2179.828891]  dump_stack+0x107/0x167
[ 2179.829742]  should_fail.cold+0x5/0xa
[ 2179.830632]  should_failslab+0x5/0x20
[ 2179.831528]  __kmalloc_node_track_caller+0x74/0x3b0
[ 2179.832680]  ? alloc_uevent_skb+0x7b/0x210
[ 2179.833625]  __alloc_skb+0xb1/0x5b0
15:22:52 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x6, 0x8001}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)

[ 2179.834446]  alloc_uevent_skb+0x7b/0x210
[ 2179.835612]  kobject_uevent_env+0xce1/0xfd0
[ 2179.836631]  __kobject_del+0x27c/0x320
[ 2179.837533]  kobject_put+0x215/0x270
[ 2179.838368]  net_rx_queue_update_kobjects+0x375/0x480
[ 2179.839591]  netdev_unregister_kobject+0x157/0x280
[ 2179.840731]  unregister_netdevice_many+0xbb7/0x1490
[ 2179.841903]  ? netdev_pick_tx+0xc70/0xc70
[ 2179.842890]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2179.844025]  ? queue_delayed_work_on+0xb4/0xe0
[ 2179.845090]  ? trace_hardirqs_on+0x5b/0x180
[ 2179.846108]  unregister_netdevice_queue+0x201/0x2c0
[ 2179.847290]  ? unregister_netdevice_many+0x1490/0x1490
[ 2179.848443]  ? linkwatch_fire_event+0x63/0x190
[ 2179.849523]  __tun_detach+0xfc1/0x12b0
[ 2179.850446]  tun_chr_close+0xc4/0x250
[ 2179.851362]  __fput+0x285/0x9f0
[ 2179.852138]  ? __tun_detach+0x12b0/0x12b0
[ 2179.853138]  task_work_run+0xe2/0x1a0
[ 2179.854054]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2179.855218]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2179.856359]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2179.857567] RIP: 0033:0x7fa43fdb1b19
[ 2179.858442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2179.862674] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2179.864517] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2179.866120] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2179.867839] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2179.869558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2179.871163] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:22:52 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x5460)

15:22:52 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 12)

15:22:52 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)

[ 2179.936231] FAULT_INJECTION: forcing a failure.
[ 2179.936231] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2179.938916] CPU: 0 PID: 10777 Comm: syz-executor.0 Not tainted 5.10.252 #1
15:22:52 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0xfb, 0x49, 0x2, 0x6, "2147e8c86683b2ca3fbd7bf5615294f0", "38407427c934e4e1a490d57eb5c26b7866b8e4398cfad73bc6fdb5ea9f9fd6d9d09c81bb00d6f0e2d289906ba6e2838d9e325ef5"}, 0x49, 0x0)

[ 2179.940446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2179.942359] Call Trace:
[ 2179.942951]  dump_stack+0x107/0x167
[ 2179.943771]  should_fail.cold+0x5/0xa
[ 2179.944630]  __alloc_pages_nodemask+0x182/0x600
[ 2179.945659]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2179.946986]  ? cap_capable+0x1cd/0x230
[ 2179.947860]  alloc_pages_current+0x187/0x280
[ 2179.948849]  __get_free_pages+0xc/0xa0
[ 2179.949722]  io_uring_setup+0xe27/0x2980
[ 2179.950639]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2179.951771]  ? wait_for_completion_io+0x270/0x270
[ 2179.952880]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2179.954028]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2179.955197]  do_syscall_64+0x33/0x40
[ 2179.956038]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2179.957192] RIP: 0033:0x7fd237085b19
[ 2179.958033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2179.962244] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2179.963959] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2179.965581] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2179.967203] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2179.968837] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2179.970472] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:22:52 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9204)

[ 2179.991400] device wlan1 entered promiscuous mode
[ 2179.995990] device wlan1 left promiscuous mode
15:23:08 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6) (fail_nth: 8)

15:23:08 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 13)

15:23:08 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x4b47, &(0x7f0000001700)={0x0, 0x0})

15:23:08 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9205)

15:23:08 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:23:08 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 20)

15:23:08 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, @perf_config_ext={0x1, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)

15:23:08 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0xf142, 0x0, 0x10000, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)

[ 2195.278376] FAULT_INJECTION: forcing a failure.
[ 2195.278376] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2195.280943] CPU: 1 PID: 10794 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2195.282384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2195.284136] Call Trace:
[ 2195.284703]  dump_stack+0x107/0x167
[ 2195.285478]  should_fail.cold+0x5/0xa
[ 2195.286277]  __alloc_pages_nodemask+0x182/0x600
[ 2195.287275]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2195.288542]  ? cap_capable+0x1cd/0x230
[ 2195.289373]  alloc_pages_current+0x187/0x280
[ 2195.290278]  __get_free_pages+0xc/0xa0
[ 2195.291109]  io_uring_setup+0xf9a/0x2980
[ 2195.291967]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2195.293029]  ? wait_for_completion_io+0x270/0x270
[ 2195.294068]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2195.295211]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2195.296302]  do_syscall_64+0x33/0x40
[ 2195.297088]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2195.298161] RIP: 0033:0x7fd237085b19
[ 2195.298965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2195.302836] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2195.304466] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2195.305963] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2195.307502] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2195.308996] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2195.310488] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:23:08 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9208)

[ 2195.334013] FAULT_INJECTION: forcing a failure.
[ 2195.334013] name failslab, interval 1, probability 0, space 0, times 0
[ 2195.336857] CPU: 0 PID: 10801 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2195.338329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2195.340084] Call Trace:
[ 2195.340658]  dump_stack+0x107/0x167
[ 2195.341442]  should_fail.cold+0x5/0xa
[ 2195.342265]  ? create_object.isra.0+0x3a/0xa30
[ 2195.343237]  should_failslab+0x5/0x20
[ 2195.344047]  kmem_cache_alloc+0x5b/0x310
[ 2195.344917]  create_object.isra.0+0x3a/0xa30
[ 2195.345862]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2195.346960]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 2195.348038]  ? alloc_uevent_skb+0x7b/0x210
[ 2195.348952]  __alloc_skb+0xb1/0x5b0
[ 2195.349734]  alloc_uevent_skb+0x7b/0x210
[ 2195.350609]  kobject_uevent_env+0xce1/0xfd0
[ 2195.351554]  __kobject_del+0x27c/0x320
[ 2195.352385]  kobject_put+0x215/0x270
[ 2195.353188]  net_rx_queue_update_kobjects+0x375/0x480
[ 2195.354283]  netdev_unregister_kobject+0x157/0x280
[ 2195.355336]  unregister_netdevice_many+0xbb7/0x1490
[ 2195.356402]  ? netdev_pick_tx+0xc70/0xc70
[ 2195.357295]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2195.358407]  ? queue_delayed_work_on+0xb4/0xe0
[ 2195.359399]  ? trace_hardirqs_on+0x5b/0x180
[ 2195.360326]  unregister_netdevice_queue+0x201/0x2c0
[ 2195.361376]  ? unregister_netdevice_many+0x1490/0x1490
[ 2195.362489]  ? linkwatch_fire_event+0x63/0x190
[ 2195.363650]  __tun_detach+0xfc1/0x12b0
[ 2195.364557]  tun_chr_close+0xc4/0x250
[ 2195.365374]  __fput+0x285/0x9f0
[ 2195.366073]  ? __tun_detach+0x12b0/0x12b0
[ 2195.366976]  task_work_run+0xe2/0x1a0
[ 2195.367964]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2195.369101]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2195.370118]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2195.371221] RIP: 0033:0x7fa43fdb1b19
[ 2195.372017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2195.376073] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2195.377696] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2195.379215] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2195.380726] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2195.382234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2195.383756] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:23:08 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x4, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000040)={0x3, 0x3, 0x4})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r3 = dup2(0xffffffffffffffff, r0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'dummy0\x00', {}, 0x6})

15:23:08 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:23:08 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 14)

15:23:08 executing program 7:
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000100)={0x100, 0x7f})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x12091, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x12}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
pwrite64(r1, &(0x7f0000000040)="9e4b81e28478bd1a2916d663c0af4cf49fc1ae4f0a57a97b", 0x18, 0x100000000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

15:23:08 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x8091)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
dup2(0xffffffffffffffff, r1)

[ 2195.496368] device wlan1 entered promiscuous mode
[ 2195.498912] FAULT_INJECTION: forcing a failure.
[ 2195.498912] name failslab, interval 1, probability 0, space 0, times 0
[ 2195.501072] device wlan1 left promiscuous mode
[ 2195.501375] CPU: 1 PID: 10819 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2195.503683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2195.505412] Call Trace:
[ 2195.505966]  dump_stack+0x107/0x167
[ 2195.506728]  should_fail.cold+0x5/0xa
[ 2195.507559]  ? io_rsrc_node_switch_start.part.0+0x43/0x250
[ 2195.508734]  should_failslab+0x5/0x20
[ 2195.509528]  kmem_cache_alloc_trace+0x55/0x320
[ 2195.510494]  io_rsrc_node_switch_start.part.0+0x43/0x250
[ 2195.511658]  io_uring_setup+0x14f6/0x2980
[ 2195.512536]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2195.513593]  ? wait_for_completion_io+0x270/0x270
[ 2195.514632]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2195.515763]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2195.516849]  do_syscall_64+0x33/0x40
[ 2195.517630]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2195.518714] RIP: 0033:0x7fd237085b19
[ 2195.519520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2195.523405] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2195.524996] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2195.526493] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2195.528017] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2195.529517] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2195.531038] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:23:23 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x40049409)

15:23:23 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 21)

15:23:23 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x4b49, &(0x7f0000001700)={0x0, 0x0})

15:23:23 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 15)

15:23:23 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:23:23 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0xf, 0x10, 0xffffffffffffffff, 0x8000000)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000000)={0x3, 0x3, 0xcf, &(0x7f00000000c0)=""/207})
fallocate(r1, 0x0, 0x4, 0xc3c)
dup2(0xffffffffffffffff, r0)

15:23:23 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x600400, 0x122)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0xa00, 0x120, 0x13}, 0x18)
ppoll(&(0x7f0000001500)=[{r0, 0xc}, {r1, 0xc200}, {r2, 0x4004}], 0x3, &(0x7f0000001540), &(0x7f0000001580)={[0x80]}, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xe100, 0x20)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)

15:23:23 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x2, 0x7daf6)

[ 2210.159803] FAULT_INJECTION: forcing a failure.
[ 2210.159803] name failslab, interval 1, probability 0, space 0, times 0
[ 2210.161266] CPU: 1 PID: 10836 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2210.162127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2210.163134] Call Trace:
[ 2210.163442]  dump_stack+0x107/0x167
[ 2210.163850]  should_fail.cold+0x5/0xa
[ 2210.164281]  ? create_object.isra.0+0x3a/0xa30
[ 2210.164788]  should_failslab+0x5/0x20
[ 2210.165244]  kmem_cache_alloc+0x5b/0x310
[ 2210.165732]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2210.166464]  create_object.isra.0+0x3a/0xa30
[ 2210.166981]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2210.167564]  kmem_cache_alloc_trace+0x151/0x320
[ 2210.168086]  io_rsrc_node_switch_start.part.0+0x43/0x250
[ 2210.168713]  io_uring_setup+0x14f6/0x2980
[ 2210.169215]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2210.169787]  ? wait_for_completion_io+0x270/0x270
[ 2210.170407]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2210.171030]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2210.171652]  do_syscall_64+0x33/0x40
[ 2210.172091]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2210.172693] RIP: 0033:0x7fd237085b19
[ 2210.173118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2210.175319] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2210.176295] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2210.177098] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2210.177947] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2210.178792] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2210.179647] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2210.201509] FAULT_INJECTION: forcing a failure.
[ 2210.201509] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2210.204478] CPU: 0 PID: 10844 Comm: syz-executor.6 Not tainted 5.10.252 #1
15:23:23 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x443, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x81)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

[ 2210.206022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2210.207957] Call Trace:
[ 2210.208523]  dump_stack+0x107/0x167
[ 2210.209285]  should_fail.cold+0x5/0xa
[ 2210.210086]  __alloc_pages_nodemask+0x182/0x600
[ 2210.211043]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2210.212321]  alloc_pages_current+0x187/0x280
[ 2210.213227]  allocate_slab+0x26f/0x380
[ 2210.214038]  ___slab_alloc+0x470/0x700
[ 2210.214861]  ? alloc_uevent_skb+0x7b/0x210
[ 2210.215787]  ? __kmalloc_node_track_caller+0x393/0x3b0
[ 2210.216918]  __kmalloc_node_track_caller+0x393/0x3b0
[ 2210.217985]  ? alloc_uevent_skb+0x7b/0x210
[ 2210.218878]  __alloc_skb+0xb1/0x5b0
[ 2210.219827]  alloc_uevent_skb+0x7b/0x210
[ 2210.220752]  kobject_uevent_env+0xce1/0xfd0
[ 2210.221659]  __kobject_del+0x27c/0x320
[ 2210.222471]  kobject_put+0x215/0x270
[ 2210.223258]  net_rx_queue_update_kobjects+0x375/0x480
[ 2210.224337]  netdev_unregister_kobject+0x157/0x280
[ 2210.225363]  unregister_netdevice_many+0xbb7/0x1490
[ 2210.226393]  ? netdev_pick_tx+0xc70/0xc70
[ 2210.227267]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2210.228350]  ? queue_delayed_work_on+0xb4/0xe0
[ 2210.229287]  ? trace_hardirqs_on+0x5b/0x180
[ 2210.230397]  unregister_netdevice_queue+0x201/0x2c0
[ 2210.231461]  ? unregister_netdevice_many+0x1490/0x1490
15:23:23 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x40086602)

15:23:23 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x6b97, &(0x7f00000000c0)={0x0, 0x1364, 0x1, 0x2, 0x3cd}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=<r0=>0x0)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x1, &(0x7f00000000c0)="336ab7b948353748332461163e568c38cd622b6c0eeec7aaf799f07fa17447f25c5155f3e1f23e09f6eea01faa4c3abbb0f0aacc4d247a72b36f339f5b1473cee51d73a18df36e587ecae9da43a9cafc17a1af4ddc5781e6f0ef7b06e31f3caea5cd47f6d8e88b69882f5452d897a0ae25dfa67d18ab077bdef340cf556ebf94de8497995d1c81bb3fb8f62ba92b", 0x0, 0x0, 0x1, {0x3, r1}}, 0xd4f)
syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x0, {0x0, r1}}, 0x7)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r3, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3f, 0x8, 0x5, 0x47, 0x0, 0x7f, 0x10008, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x8000, 0xffff}, 0x20, 0x28, 0x9, 0x2, 0xffffffff, 0x8, 0x81, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x8)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r5, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x40010, r5, 0x8000000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)
dup2(0xffffffffffffffff, r2)

[ 2210.232808]  ? linkwatch_fire_event+0x63/0x190
[ 2210.233879]  __tun_detach+0xfc1/0x12b0
[ 2210.234880]  tun_chr_close+0xc4/0x250
[ 2210.235873]  __fput+0x285/0x9f0
[ 2210.236711]  ? __tun_detach+0x12b0/0x12b0
[ 2210.237774]  task_work_run+0xe2/0x1a0
[ 2210.238751]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2210.240016]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2210.241134]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2210.242434] RIP: 0033:0x7fa43fdb1b19
[ 2210.243246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2210.248007] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2210.249738] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2210.251252] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2210.252775] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2210.254292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2210.255812] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:23:23 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x4b47, 0x7daf6)

[ 2210.283565] device wlan1 entered promiscuous mode
[ 2210.293305] device wlan1 left promiscuous mode
15:23:23 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 16)

15:23:23 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x4b49, 0x7daf6)

[ 2210.328886] FAULT_INJECTION: forcing a failure.
[ 2210.328886] name failslab, interval 1, probability 0, space 0, times 0
[ 2210.330188] CPU: 1 PID: 10863 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2210.330946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2210.331859] Call Trace:
[ 2210.332160]  dump_stack+0x107/0x167
[ 2210.332570]  should_fail.cold+0x5/0xa
[ 2210.332998]  ? create_object.isra.0+0x3a/0xa30
[ 2210.333502]  should_failslab+0x5/0x20
[ 2210.333931]  kmem_cache_alloc+0x5b/0x310
[ 2210.334386]  create_object.isra.0+0x3a/0xa30
[ 2210.334879]  kmemleak_alloc_percpu+0xa0/0x100
[ 2210.335387]  pcpu_alloc+0x4e2/0x1240
[ 2210.335808]  ? io_async_queue_proc+0x80/0x80
[ 2210.336294]  percpu_ref_init+0x31/0x3d0
[ 2210.336736]  io_rsrc_node_switch_start.part.0+0x6a/0x250
[ 2210.337331]  io_uring_setup+0x14f6/0x2980
[ 2210.337785]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2210.338332]  ? wait_for_completion_io+0x270/0x270
[ 2210.338883]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2210.339457]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2210.340023]  do_syscall_64+0x33/0x40
[ 2210.340431]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2210.340979] RIP: 0033:0x7fd237085b19
[ 2210.341389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2210.343397] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2210.344225] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2210.345008] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2210.345796] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2210.346569] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2210.347362] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:23:23 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x40087602)

15:23:23 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2210.423052] device wlan1 entered promiscuous mode
[ 2210.424889] device wlan1 left promiscuous mode
15:23:38 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x541b, &(0x7f0000001700)={0x0, 0x0})

15:23:38 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)
dup2(r3, r1)
dup2(0xffffffffffffffff, r0)

15:23:38 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:23:38 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r1=>0x0, 0x8701, 0x28, 0x6, 0x0, {{0xe, 0x4, 0x0, 0x7, 0x38, 0x68, 0x0, 0xfa, 0x4, 0x0, @loopback, @empty, {[@generic={0x89, 0xd, "185c8e6252a4dbebe787fe"}, @lsrr={0x83, 0x17, 0xff, [@loopback, @private=0xa010102, @private=0xa010102, @rand_addr=0x64010102, @loopback]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x0, 0x9, 0xdb, 0x9, 0x34, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7, 0xffffffff}})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x3f}, 0x10580, 0x0, 0x10000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000540)={0xa, 0x800, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'})
ftruncate(0xffffffffffffffff, 0x2)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmmsg$inet6(r3, &(0x7f0000004d00), 0x0, 0x20040054)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)

15:23:38 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x541b, 0x7daf6)

15:23:38 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x40189206)

15:23:38 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 17)

15:23:38 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 22)

[ 2225.365976] FAULT_INJECTION: forcing a failure.
[ 2225.365976] name failslab, interval 1, probability 0, space 0, times 0
[ 2225.367560] CPU: 0 PID: 10891 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2225.368499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2225.369606] Call Trace:
[ 2225.369972]  dump_stack+0x107/0x167
[ 2225.370468]  should_fail.cold+0x5/0xa
[ 2225.370989]  ? create_object.isra.0+0x3a/0xa30
[ 2225.371622]  should_failslab+0x5/0x20
[ 2225.372148]  kmem_cache_alloc+0x5b/0x310
[ 2225.372699]  create_object.isra.0+0x3a/0xa30
[ 2225.373308]  kmemleak_alloc_percpu+0xa0/0x100
[ 2225.373939]  pcpu_alloc+0x4e2/0x1240
[ 2225.374457]  ? io_async_queue_proc+0x80/0x80
[ 2225.375058]  percpu_ref_init+0x31/0x3d0
[ 2225.375616]  io_rsrc_node_switch_start.part.0+0x6a/0x250
[ 2225.376354]  io_uring_setup+0x14f6/0x2980
[ 2225.376923]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2225.377611]  ? wait_for_completion_io+0x270/0x270
[ 2225.378285]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2225.378999]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2225.379711]  do_syscall_64+0x33/0x40
[ 2225.380221]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2225.380916] RIP: 0033:0x7fd237085b19
[ 2225.381422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2225.383948] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2225.384989] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2225.385961] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2225.386930] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2225.387874] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2225.388840] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2225.395748] device wlan1 entered promiscuous mode
15:23:38 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x5421, 0x7daf6)

15:23:38 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x4018920a)

[ 2225.435024] FAULT_INJECTION: forcing a failure.
[ 2225.435024] name failslab, interval 1, probability 0, space 0, times 0
[ 2225.437734] CPU: 1 PID: 10888 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2225.439233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2225.441026] Call Trace:
[ 2225.441599]  dump_stack+0x107/0x167
[ 2225.442390]  should_fail.cold+0x5/0xa
[ 2225.443228]  ? kobject_uevent_env+0x22b/0xfd0
[ 2225.444207]  should_failslab+0x5/0x20
[ 2225.445029]  kmem_cache_alloc_trace+0x55/0x320
[ 2225.446016]  kobject_uevent_env+0x22b/0xfd0
[ 2225.446969]  __kobject_del+0x27c/0x320
[ 2225.447823]  kobject_put+0x215/0x270
[ 2225.448632]  netdev_queue_update_kobjects+0x2a6/0x3e0
[ 2225.449762]  netdev_unregister_kobject+0x164/0x280
[ 2225.450817]  unregister_netdevice_many+0xbb7/0x1490
15:23:38 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x4020940d)

[ 2225.451900]  ? netdev_pick_tx+0xc70/0xc70
15:23:38 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = dup2(0xffffffffffffffff, r0)
r3 = gettid()
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xff, 0x2, 0x1f, 0x0, 0x0, 0x400, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0x9}, 0x8000, 0x7, 0x4, 0x0, 0x3, 0x2f, 0x4, 0x0, 0x2, 0x0, 0x73}, r3, 0xe, r2, 0x3)

[ 2225.452955]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2225.454172]  ? queue_delayed_work_on+0xb4/0xe0
[ 2225.455150]  ? trace_hardirqs_on+0x5b/0x180
[ 2225.456090]  unregister_netdevice_queue+0x201/0x2c0
[ 2225.457161]  ? unregister_netdevice_many+0x1490/0x1490
[ 2225.458294]  ? linkwatch_fire_event+0x63/0x190
[ 2225.459293]  __tun_detach+0xfc1/0x12b0
[ 2225.460141]  tun_chr_close+0xc4/0x250
[ 2225.460960]  __fput+0x285/0x9f0
[ 2225.461665]  ? __tun_detach+0x12b0/0x12b0
[ 2225.462567]  task_work_run+0xe2/0x1a0
[ 2225.463407]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2225.464463]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2225.465506]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2225.466604] RIP: 0033:0x7fa43fdb1b19
[ 2225.467410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2225.471379] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2225.473017] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2225.474553] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2225.476085] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2225.477612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2225.479143] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:23:38 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 18)

[ 2225.497679] FAULT_INJECTION: forcing a failure.
[ 2225.497679] name failslab, interval 1, probability 0, space 0, times 0
[ 2225.499185] CPU: 0 PID: 10904 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2225.500086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2225.501159] Call Trace:
[ 2225.501510]  dump_stack+0x107/0x167
[ 2225.501978]  should_fail.cold+0x5/0xa
[ 2225.502476]  ? percpu_ref_init+0xd8/0x3d0
[ 2225.503010]  should_failslab+0x5/0x20
[ 2225.503517]  kmem_cache_alloc_trace+0x55/0x320
[ 2225.504106]  ? io_async_queue_proc+0x80/0x80
[ 2225.504674]  percpu_ref_init+0xd8/0x3d0
[ 2225.505189]  io_rsrc_node_switch_start.part.0+0x6a/0x250
[ 2225.505888]  io_uring_setup+0x14f6/0x2980
[ 2225.506436]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2225.507090]  ? wait_for_completion_io+0x270/0x270
[ 2225.507732]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2225.508413]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2225.509074]  do_syscall_64+0x33/0x40
[ 2225.509550]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2225.510203] RIP: 0033:0x7fd237085b19
[ 2225.510677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2225.513429] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2225.514644] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2225.515797] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2225.516925] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2225.518054] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2225.519204] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2225.606971] device wlan1 left promiscuous mode
15:23:53 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x80086601)

15:23:53 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x5421, &(0x7f0000001700)={0x0, 0x0})

15:23:53 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 23)

15:23:53 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)

15:23:53 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x5450, 0x7daf6)

15:23:53 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 19)

[ 2240.586916] FAULT_INJECTION: forcing a failure.
[ 2240.586916] name failslab, interval 1, probability 0, space 0, times 0
[ 2240.588374] CPU: 0 PID: 10918 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2240.589242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2240.590272] Call Trace:
[ 2240.590608]  dump_stack+0x107/0x167
[ 2240.591065]  should_fail.cold+0x5/0xa
[ 2240.591548]  ? create_object.isra.0+0x3a/0xa30
[ 2240.592124]  should_failslab+0x5/0x20
[ 2240.592599]  kmem_cache_alloc+0x5b/0x310
[ 2240.593116]  create_object.isra.0+0x3a/0xa30
[ 2240.593665]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2240.594292]  kmem_cache_alloc_trace+0x151/0x320
[ 2240.594875]  ? io_async_queue_proc+0x80/0x80
[ 2240.595422]  percpu_ref_init+0xd8/0x3d0
[ 2240.595924]  io_rsrc_node_switch_start.part.0+0x6a/0x250
[ 2240.596597]  io_uring_setup+0x14f6/0x2980
[ 2240.597111]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2240.597739]  ? wait_for_completion_io+0x270/0x270
[ 2240.598350]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2240.599009]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2240.599660]  do_syscall_64+0x33/0x40
15:23:53 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="39d1f808f18c870a1e2edc4d13717637d3f43f791fad2c6692f6c83975a90ec96f4427139ecf208b7d3a5835605e76dcb7226985fedc0141b0b79b3c85c3502610b6ea6c2ffc19477f535cb501476f6aec0b54cd2b34508de8daf32ceb3adbe9294a8d493c929b69b28d141c55f9ac7059403d48b1e73e1c78199e6b62edad8426a39889c4ba0fc0396c304505355d37ccac7487432f50a95888176fee4f4af53548b352dc49b583488a87e1d9419948dfdd2df54c", 0xb5}], 0x1, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_retopts={{0x64, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x3c, 0x50, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x81}, {@local, 0x8587}, {@local, 0x9}, {@private=0xa010102, 0x10000}, {@empty, 0x2}, {@rand_addr=0x64010100, 0x4}]}, @ra={0x94, 0x4}, @generic={0x86, 0x7, "013cedb3bc"}, @noop, @timestamp={0x44, 0x8, 0x9f, 0x0, 0x5, [0x8]}]}}}], 0x80}}], 0x1, 0x80c1)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

15:23:53 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2240.600128]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2240.600890] RIP: 0033:0x7fd237085b19
[ 2240.601358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2240.603653] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2240.604603] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2240.605510] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2240.606391] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2240.607274] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2240.608165] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2240.637587] FAULT_INJECTION: forcing a failure.
[ 2240.637587] name failslab, interval 1, probability 0, space 0, times 0
[ 2240.640439] CPU: 1 PID: 10920 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2240.642015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2240.643887] Call Trace:
[ 2240.644496]  dump_stack+0x107/0x167
[ 2240.645325]  should_fail.cold+0x5/0xa
[ 2240.646197]  ? kobject_get_path+0xc5/0x1f0
[ 2240.647148]  should_failslab+0x5/0x20
[ 2240.648034]  __kmalloc+0x72/0x390
[ 2240.648822]  ? trace_hardirqs_on+0x5b/0x180
[ 2240.649789]  kobject_get_path+0xc5/0x1f0
[ 2240.650701]  kobject_uevent_env+0x251/0xfd0
[ 2240.651698]  __kobject_del+0x27c/0x320
[ 2240.652583]  kobject_put+0x215/0x270
[ 2240.653424]  netdev_queue_update_kobjects+0x2a6/0x3e0
[ 2240.654595]  netdev_unregister_kobject+0x164/0x280
[ 2240.655723]  unregister_netdevice_many+0xbb7/0x1490
[ 2240.656846]  ? netdev_pick_tx+0xc70/0xc70
[ 2240.657792]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2240.658966]  ? queue_delayed_work_on+0xb4/0xe0
[ 2240.660005]  ? trace_hardirqs_on+0x5b/0x180
[ 2240.660976]  unregister_netdevice_queue+0x201/0x2c0
[ 2240.662094]  ? unregister_netdevice_many+0x1490/0x1490
[ 2240.663281]  ? linkwatch_fire_event+0x63/0x190
[ 2240.664327]  __tun_detach+0xfc1/0x12b0
[ 2240.665217]  tun_chr_close+0xc4/0x250
[ 2240.666071]  __fput+0x285/0x9f0
[ 2240.666813]  ? __tun_detach+0x12b0/0x12b0
[ 2240.667772]  task_work_run+0xe2/0x1a0
[ 2240.667802]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2240.667825]  syscall_exit_to_user_mode+0x38/0x1d0
15:23:53 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c653000"])
r1 = eventfd2(0x8, 0xc0000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000))
dup(0xffffffffffffffff)
dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}]})
prlimit64(0x0, 0x3, 0x0, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)
dup2(0xffffffffffffffff, r2)

15:23:53 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x5451, 0x7daf6)

[ 2240.667847]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2240.667863] RIP: 0033:0x7fa43fdb1b19
[ 2240.667882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2240.667892] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2240.667912] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2240.667923] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2240.667934] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2240.667944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2240.667955] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:23:53 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x80087601)

15:23:53 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 20)

15:23:53 executing program 7:
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0xce400)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)

[ 2240.762815] FAULT_INJECTION: forcing a failure.
[ 2240.762815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2240.765748] CPU: 1 PID: 10944 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2240.767509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2240.769575] Call Trace:
[ 2240.770241]  dump_stack+0x107/0x167
[ 2240.771159]  should_fail.cold+0x5/0xa
[ 2240.772129]  _copy_to_user+0x2e/0x180
[ 2240.773081]  io_uring_setup+0x11b5/0x2980
[ 2240.774100]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2240.775345]  ? wait_for_completion_io+0x270/0x270
[ 2240.776562]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2240.777821]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2240.779112]  do_syscall_64+0x33/0x40
[ 2240.780055]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2240.781336] RIP: 0033:0x7fd237085b19
[ 2240.782250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2240.786836] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2240.788734] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2240.790468] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2240.792261] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2240.793997] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2240.795746] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:23:53 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r1, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
r3 = dup2(0xffffffffffffffff, r0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000000)=0x10)

15:23:53 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x80089203)

15:23:53 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x5452, 0x7daf6)

[ 2240.834397] device wlan1 entered promiscuous mode
[ 2240.836914] device wlan1 left promiscuous mode
15:24:06 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x5460, 0x7daf6)

[ 2254.102369] FAULT_INJECTION: forcing a failure.
[ 2254.102369] name failslab, interval 1, probability 0, space 0, times 0
15:24:06 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x5450, &(0x7f0000001700)={0x0, 0x0})

15:24:06 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x40010, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x61ad, &(0x7f00000000c0)={0x0, 0x5207, 0x20, 0x3, 0x373}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x2001}, 0x7)
dup2(0xffffffffffffffff, r0)
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000000)={'sit0\x00', 0x1})

15:24:06 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 21)

15:24:06 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:24:06 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c653000"])
r1 = eventfd2(0x8, 0xc0000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000))
dup(0xffffffffffffffff)
dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}]})
prlimit64(0x0, 0x3, 0x0, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)
dup2(0xffffffffffffffff, r2)

15:24:06 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 24)

15:24:06 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0xc0045878)

[ 2254.106021] CPU: 0 PID: 10969 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2254.107678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2254.109626] Call Trace:
[ 2254.110261]  dump_stack+0x107/0x167
[ 2254.111145]  should_fail.cold+0x5/0xa
[ 2254.112081]  ? __d_alloc+0x2a/0x990
[ 2254.112969]  should_failslab+0x5/0x20
[ 2254.113887]  kmem_cache_alloc+0x5b/0x310
[ 2254.114867]  __d_alloc+0x2a/0x990
[ 2254.115720]  ? find_held_lock+0x2c/0x110
[ 2254.116705]  d_alloc_pseudo+0x19/0x70
[ 2254.117626]  alloc_file_pseudo+0xce/0x250
[ 2254.118626]  ? trace_hardirqs_on+0x5b/0x180
[ 2254.119674]  ? alloc_file+0x5a0/0x5a0
[ 2254.120612]  anon_inode_getfile+0xc8/0x1f0
[ 2254.121623]  io_uring_setup+0x138b/0x2980
[ 2254.122626]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2254.123854]  ? wait_for_completion_io+0x270/0x270
[ 2254.125026]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2254.126290]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2254.127503]  do_syscall_64+0x33/0x40
[ 2254.128403]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2254.129595] RIP: 0033:0x7fd237085b19
[ 2254.130458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2254.134704] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2254.136504] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2254.138212] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2254.139864] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2254.141550] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2254.143230] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:24:07 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c653000"])
r1 = eventfd2(0x8, 0xc0000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000))
dup(0xffffffffffffffff)
dup(0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}]})
prlimit64(0x0, 0x3, 0x0, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r4, 0xfffff000)
dup2(0xffffffffffffffff, r2)

[ 2254.159875] FAULT_INJECTION: forcing a failure.
[ 2254.159875] name failslab, interval 1, probability 0, space 0, times 0
[ 2254.161432] CPU: 1 PID: 10968 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2254.162319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2254.163383] Call Trace:
[ 2254.163737]  dump_stack+0x107/0x167
[ 2254.164209]  should_fail.cold+0x5/0xa
[ 2254.164700]  ? kobject_get_path+0xc5/0x1f0
[ 2254.165245]  should_failslab+0x5/0x20
[ 2254.165734]  __kmalloc+0x72/0x390
[ 2254.166176]  ? trace_hardirqs_on+0x5b/0x180
[ 2254.166707]  kobject_get_path+0xc5/0x1f0
[ 2254.167231]  kobject_uevent_env+0x251/0xfd0
[ 2254.167800]  __kobject_del+0x27c/0x320
[ 2254.168297]  kobject_put+0x215/0x270
[ 2254.168754]  netdev_queue_update_kobjects+0x2a6/0x3e0
[ 2254.169397]  netdev_unregister_kobject+0x164/0x280
[ 2254.170026]  unregister_netdevice_many+0xbb7/0x1490
[ 2254.170666]  ? netdev_pick_tx+0xc70/0xc70
[ 2254.171202]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2254.171881]  ? queue_delayed_work_on+0xb4/0xe0
[ 2254.172453]  ? trace_hardirqs_on+0x5b/0x180
[ 2254.172984]  unregister_netdevice_queue+0x201/0x2c0
[ 2254.173593]  ? unregister_netdevice_many+0x1490/0x1490
[ 2254.174234]  ? linkwatch_fire_event+0x63/0x190
[ 2254.174801]  __tun_detach+0xfc1/0x12b0
[ 2254.175286]  tun_chr_close+0xc4/0x250
[ 2254.175760]  __fput+0x285/0x9f0
[ 2254.176163]  ? __tun_detach+0x12b0/0x12b0
[ 2254.176676]  task_work_run+0xe2/0x1a0
[ 2254.177147]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2254.177751]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2254.178342]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2254.178971] RIP: 0033:0x7fa43fdb1b19
[ 2254.179429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2254.181687] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2254.182609] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2254.183491] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
15:24:07 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0xc0045878)

15:24:07 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000000), 0x80000)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
dup2(0xffffffffffffffff, r0)

[ 2254.183498] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2254.183504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2254.183511] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:24:07 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9201, 0x7daf6)

15:24:07 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0xc0109207)

[ 2254.263032] device wlan1 entered promiscuous mode
[ 2254.265986] device wlan1 left promiscuous mode
15:24:07 executing program 7:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:24:07 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9205, 0x7daf6)

15:24:07 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:24:07 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 25)

[ 2254.399535] device wlan1 entered promiscuous mode
[ 2254.406556] device wlan1 left promiscuous mode
[ 2254.459984] FAULT_INJECTION: forcing a failure.
[ 2254.459984] name failslab, interval 1, probability 0, space 0, times 0
[ 2254.463604] CPU: 1 PID: 11004 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2254.465185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2254.467038] Call Trace:
[ 2254.467650]  dump_stack+0x107/0x167
[ 2254.468484]  should_fail.cold+0x5/0xa
[ 2254.469360]  ? __alloc_skb+0x6d/0x5b0
[ 2254.470223]  should_failslab+0x5/0x20
[ 2254.471090]  kmem_cache_alloc_node+0x55/0x330
[ 2254.472120]  __alloc_skb+0x6d/0x5b0
[ 2254.472948]  alloc_uevent_skb+0x7b/0x210
[ 2254.473881]  kobject_uevent_env+0xce1/0xfd0
[ 2254.474883]  __kobject_del+0x27c/0x320
[ 2254.475781]  kobject_put+0x215/0x270
[ 2254.476621]  netdev_queue_update_kobjects+0x2a6/0x3e0
[ 2254.477779]  netdev_unregister_kobject+0x164/0x280
[ 2254.478879]  unregister_netdevice_many+0xbb7/0x1490
[ 2254.480005]  ? netdev_pick_tx+0xc70/0xc70
[ 2254.480940]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2254.482107]  ? queue_delayed_work_on+0xb4/0xe0
[ 2254.483124]  ? trace_hardirqs_on+0x5b/0x180
[ 2254.484101]  unregister_netdevice_queue+0x201/0x2c0
[ 2254.485225]  ? unregister_netdevice_many+0x1490/0x1490
[ 2254.486392]  ? linkwatch_fire_event+0x63/0x190
[ 2254.487416]  __tun_detach+0xfc1/0x12b0
[ 2254.488307]  tun_chr_close+0xc4/0x250
[ 2254.489149]  __fput+0x285/0x9f0
[ 2254.489883]  ? __tun_detach+0x12b0/0x12b0
[ 2254.490821]  task_work_run+0xe2/0x1a0
[ 2254.491692]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2254.492786]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2254.493864]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2254.495006] RIP: 0033:0x7fa43fdb1b19
[ 2254.495846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2254.499959] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2254.501661] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2254.503247] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2254.504845] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2254.506436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2254.508034] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2254.539113] device wlan1 entered promiscuous mode
[ 2254.542984] device wlan1 left promiscuous mode
15:24:22 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 22)

15:24:22 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x5451, &(0x7f0000001700)={0x0, 0x0})

15:24:22 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 26)

15:24:22 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0xc0189436)

15:24:22 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000180)="1080067e4f2907cef87e67d5205bbf32ce5121eda29ff5725616f463f893ea4ea7f8601bb1cbbf72bd6da1625a2e73095d227f0b092ed90f9735cb1f82ee0ae39667c2f99b68a4fd9feb9d4b9cb586109a5a0eeb072437f589ebcae14745d065910f2847af17b215cb80bf26e2753928c3969e", 0x1000, 0x0, 0x0, {0x2}}, 0x7fffffff)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r5 = dup2(0xffffffffffffffff, r0)
syz_io_uring_setup(0x61cb, &(0x7f0000000580)={0x0, 0x1095, 0x2, 0x1, 0x1ed, 0x0, r5}, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000000600)=<r6=>0x0, &(0x7f0000000640))
syz_io_uring_submit(r6, r4, &(0x7f0000000700)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000680)={0x40000, 0x100, 0x2}, &(0x7f00000006c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x400)
r7 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
ppoll(&(0x7f0000000040)=[{r7, 0x8}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x4]}, 0x8)

15:24:22 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9208, 0x7daf6)

15:24:22 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:24:22 executing program 7:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2269.525786] FAULT_INJECTION: forcing a failure.
[ 2269.525786] name failslab, interval 1, probability 0, space 0, times 0
[ 2269.528980] CPU: 1 PID: 11023 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2269.530729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2269.532800] Call Trace:
[ 2269.533473]  dump_stack+0x107/0x167
[ 2269.534384]  should_fail.cold+0x5/0xa
[ 2269.535351]  ? create_object.isra.0+0x3a/0xa30
[ 2269.536624]  should_failslab+0x5/0x20
[ 2269.537591]  kmem_cache_alloc+0x5b/0x310
[ 2269.538614]  create_object.isra.0+0x3a/0xa30
[ 2269.539714]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2269.540860]  kmem_cache_alloc+0x159/0x310
[ 2269.541730]  __d_alloc+0x2a/0x990
[ 2269.542446]  ? find_held_lock+0x2c/0x110
[ 2269.543286]  d_alloc_pseudo+0x19/0x70
[ 2269.544075]  alloc_file_pseudo+0xce/0x250
[ 2269.544943]  ? trace_hardirqs_on+0x5b/0x180
[ 2269.545877]  ? alloc_file+0x5a0/0x5a0
[ 2269.546724]  anon_inode_getfile+0xc8/0x1f0
[ 2269.547640]  io_uring_setup+0x138b/0x2980
15:24:22 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x927e, 0x7daf6)

[ 2269.548497]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2269.549827]  ? wait_for_completion_io+0x270/0x270
[ 2269.550878]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2269.551995]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2269.553187]  do_syscall_64+0x33/0x40
[ 2269.554042]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2269.555126] RIP: 0033:0x7fd237085b19
[ 2269.555942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2269.559828] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2269.561442] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2269.562937] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2269.564443] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2269.565936] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2269.567426] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2269.598878] FAULT_INJECTION: forcing a failure.
[ 2269.598878] name failslab, interval 1, probability 0, space 0, times 0
[ 2269.601604] CPU: 0 PID: 11015 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2269.603082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2269.604845] Call Trace:
[ 2269.605409]  dump_stack+0x107/0x167
[ 2269.606200]  should_fail.cold+0x5/0xa
[ 2269.607015]  ? __alloc_skb+0x6d/0x5b0
[ 2269.607835]  should_failslab+0x5/0x20
[ 2269.608646]  kmem_cache_alloc_node+0x55/0x330
[ 2269.609604]  __alloc_skb+0x6d/0x5b0
[ 2269.610387]  alloc_uevent_skb+0x7b/0x210
[ 2269.611255]  kobject_uevent_env+0xce1/0xfd0
[ 2269.612195]  __kobject_del+0x27c/0x320
[ 2269.613022]  kobject_put+0x215/0x270
[ 2269.613822]  netdev_queue_update_kobjects+0x2a6/0x3e0
[ 2269.614933]  netdev_unregister_kobject+0x164/0x280
[ 2269.615997]  unregister_netdevice_many+0xbb7/0x1490
[ 2269.617068]  ? netdev_pick_tx+0xc70/0xc70
[ 2269.617973]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2269.619093]  ? queue_delayed_work_on+0xb4/0xe0
[ 2269.620064]  ? trace_hardirqs_on+0x5b/0x180
[ 2269.620990]  unregister_netdevice_queue+0x201/0x2c0
[ 2269.622052]  ? unregister_netdevice_many+0x1490/0x1490
[ 2269.623172]  ? linkwatch_fire_event+0x63/0x190
[ 2269.624156]  __tun_detach+0xfc1/0x12b0
[ 2269.624988]  tun_chr_close+0xc4/0x250
[ 2269.625799]  __fput+0x285/0x9f0
[ 2269.626500]  ? __tun_detach+0x12b0/0x12b0
[ 2269.627393]  task_work_run+0xe2/0x1a0
[ 2269.628220]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2269.629266]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2269.630297]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2269.631391] RIP: 0033:0x7fa43fdb1b19
[ 2269.632193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2269.636106] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2269.637730] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2269.639244] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2269.640771] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2269.642285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2269.643805] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:24:22 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0xc020660b)

[ 2269.697569] device wlan1 entered promiscuous mode
15:24:22 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 23)

[ 2269.699520] device wlan1 entered promiscuous mode
[ 2269.701544] device wlan1 left promiscuous mode
[ 2269.733757] device wlan1 left promiscuous mode
15:24:22 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x40049409, 0x7daf6)

15:24:22 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0xfff, 0x2, 0x3, 0x4, 0x1, [0x0, 0xfffffff8, 0x3, 0xffff0000]})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, @out_args}, './file0\x00'})
faccessat2(r1, &(0x7f00000000c0)='./file0\x00', 0x50, 0x300)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2269.773402] FAULT_INJECTION: forcing a failure.
[ 2269.773402] name failslab, interval 1, probability 0, space 0, times 0
[ 2269.775907] CPU: 1 PID: 11037 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2269.777373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2269.779098] Call Trace:
[ 2269.779662]  dump_stack+0x107/0x167
[ 2269.780445]  should_fail.cold+0x5/0xa
[ 2269.781257]  ? __alloc_file+0x21/0x320
[ 2269.782057]  should_failslab+0x5/0x20
[ 2269.782847]  kmem_cache_alloc+0x5b/0x310
[ 2269.783700]  __alloc_file+0x21/0x320
[ 2269.784490]  alloc_empty_file+0x6d/0x170
[ 2269.785335]  alloc_file+0x5e/0x5a0
[ 2269.786075]  alloc_file_pseudo+0x16a/0x250
[ 2269.786964]  ? alloc_file+0x5a0/0x5a0
[ 2269.787971]  anon_inode_getfile+0xc8/0x1f0
[ 2269.788846]  io_uring_setup+0x138b/0x2980
[ 2269.789732]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2269.790811]  ? wait_for_completion_io+0x270/0x270
[ 2269.791856]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2269.792938]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2269.794005]  do_syscall_64+0x33/0x40
[ 2269.794782]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2269.795853] RIP: 0033:0x7fd237085b19
[ 2269.796624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2269.800655] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2269.802388] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2269.803880] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2269.805376] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2269.806874] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2269.808361] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:24:22 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 27)

15:24:22 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:24:22 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000180)="1080067e4f2907cef87e67d5205bbf32ce5121eda29ff5725616f463f893ea4ea7f8601bb1cbbf72bd6da1625a2e73095d227f0b092ed90f9735cb1f82ee0ae39667c2f99b68a4fd9feb9d4b9cb586109a5a0eeb072437f589ebcae14745d065910f2847af17b215cb80bf26e2753928c3969e", 0x1000, 0x0, 0x0, {0x2}}, 0x7fffffff)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r5 = dup2(0xffffffffffffffff, r0)
syz_io_uring_setup(0x61cb, &(0x7f0000000580)={0x0, 0x1095, 0x2, 0x1, 0x1ed, 0x0, r5}, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000000600)=<r6=>0x0, &(0x7f0000000640))
syz_io_uring_submit(r6, r4, &(0x7f0000000700)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000680)={0x40000, 0x100, 0x2}, &(0x7f00000006c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x400)
r7 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
ppoll(&(0x7f0000000040)=[{r7, 0x8}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x4]}, 0x8)

[ 2269.898218] device wlan1 entered promiscuous mode
[ 2269.910539] FAULT_INJECTION: forcing a failure.
[ 2269.910539] name failslab, interval 1, probability 0, space 0, times 0
[ 2269.913657] CPU: 0 PID: 11048 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2269.915252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2269.917189] Call Trace:
[ 2269.917808]  dump_stack+0x107/0x167
[ 2269.918650]  should_fail.cold+0x5/0xa
[ 2269.919532]  ? create_object.isra.0+0x3a/0xa30
[ 2269.920591]  should_failslab+0x5/0x20
[ 2269.921467]  kmem_cache_alloc+0x5b/0x310
[ 2269.922413]  create_object.isra.0+0x3a/0xa30
[ 2269.923423]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2269.924610]  kmem_cache_alloc_node+0x169/0x330
[ 2269.925670]  __alloc_skb+0x6d/0x5b0
[ 2269.926518]  alloc_uevent_skb+0x7b/0x210
[ 2269.927460]  kobject_uevent_env+0xce1/0xfd0
[ 2269.928485]  __kobject_del+0x27c/0x320
[ 2269.929386]  kobject_put+0x215/0x270
[ 2269.930251]  netdev_queue_update_kobjects+0x2a6/0x3e0
[ 2269.931452]  netdev_unregister_kobject+0x164/0x280
[ 2269.932594]  unregister_netdevice_many+0xbb7/0x1490
[ 2269.933753]  ? netdev_pick_tx+0xc70/0xc70
[ 2269.934734]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2269.935943]  ? queue_delayed_work_on+0xb4/0xe0
[ 2269.936991]  ? trace_hardirqs_on+0x5b/0x180
[ 2269.938014]  unregister_netdevice_queue+0x201/0x2c0
[ 2269.939194]  ? unregister_netdevice_many+0x1490/0x1490
[ 2269.940446]  ? linkwatch_fire_event+0x63/0x190
[ 2269.941530]  __tun_detach+0xfc1/0x12b0
[ 2269.942461]  tun_chr_close+0xc4/0x250
[ 2269.943363]  __fput+0x285/0x9f0
[ 2269.944158]  ? __tun_detach+0x12b0/0x12b0
[ 2269.945147]  task_work_run+0xe2/0x1a0
[ 2269.946058]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2269.947230]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2269.948388]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2269.949613] RIP: 0033:0x7fa43fdb1b19
[ 2269.950496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2269.954881] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2269.956699] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2269.958389] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2269.960077] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2269.961746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2269.963411] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2269.985155] device wlan1 left promiscuous mode
15:24:37 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 24)

15:24:37 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 28)

15:24:37 executing program 7:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:24:37 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x800)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000003f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, r0, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x20001, 0x20)
r1 = syz_open_dev$usbmon(&(0x7f0000000100), 0x1, 0x80400)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r2, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
faccessat2(r2, &(0x7f0000000140)='./file0\x00', 0x10, 0x1000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
pwrite64(r1, &(0x7f00000000c0)="99a95447a68920c9c658717a128f4be2fe9c1417393509ebc5fac8f9ebefe4844172ed49c2fddcd94025", 0x2a, 0x1)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003300), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1}, 0x14}}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20002cbd7000fddbdf2504005200050006009900000005000500040000000500060006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r6, 0xfffff000)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x810, r6, 0xa6fc8000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)

15:24:37 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:24:37 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x40086602, 0x7daf6)

15:24:37 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$MON_IOCQ_URB_LEN(r1, 0x9201)
socket$nl_xfrm(0x10, 0x3, 0x6)

15:24:37 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x5452, &(0x7f0000001700)={0x0, 0x0})

15:24:37 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x40087602, 0x7daf6)

[ 2284.846350] FAULT_INJECTION: forcing a failure.
[ 2284.846350] name failslab, interval 1, probability 0, space 0, times 0
[ 2284.848929] CPU: 0 PID: 11071 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2284.850390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2284.852232] Call Trace:
[ 2284.852797]  dump_stack+0x107/0x167
[ 2284.853569]  should_fail.cold+0x5/0xa
[ 2284.854376]  ? create_object.isra.0+0x3a/0xa30
[ 2284.855337]  should_failslab+0x5/0x20
[ 2284.856157]  kmem_cache_alloc+0x5b/0x310
[ 2284.857016]  create_object.isra.0+0x3a/0xa30
[ 2284.857950]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2284.859019]  kmem_cache_alloc+0x159/0x310
[ 2284.859905]  __alloc_file+0x21/0x320
[ 2284.860701]  alloc_empty_file+0x6d/0x170
[ 2284.861585]  alloc_file+0x5e/0x5a0
[ 2284.862346]  alloc_file_pseudo+0x16a/0x250
[ 2284.863241]  ? alloc_file+0x5a0/0x5a0
[ 2284.864074]  anon_inode_getfile+0xc8/0x1f0
[ 2284.864973]  io_uring_setup+0x138b/0x2980
[ 2284.865857]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2284.866925]  ? wait_for_completion_io+0x270/0x270
[ 2284.867975]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2284.869081]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2284.870178]  do_syscall_64+0x33/0x40
[ 2284.870965]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2284.872056] RIP: 0033:0x7fd237085b19
[ 2284.872842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2284.876741] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2284.878343] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2284.879841] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2284.881343] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2284.882839] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2284.884368] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2284.889610] FAULT_INJECTION: forcing a failure.
[ 2284.889610] name failslab, interval 1, probability 0, space 0, times 0
[ 2284.892333] CPU: 1 PID: 11060 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2284.893900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2284.895817] Call Trace:
[ 2284.896466]  dump_stack+0x107/0x167
[ 2284.897315]  should_fail.cold+0x5/0xa
[ 2284.898203]  should_failslab+0x5/0x20
[ 2284.899075]  __kmalloc_node_track_caller+0x74/0x3b0
[ 2284.900221]  ? alloc_uevent_skb+0x7b/0x210
[ 2284.901228]  __alloc_skb+0xb1/0x5b0
[ 2284.902221]  alloc_uevent_skb+0x7b/0x210
[ 2284.903375]  kobject_uevent_env+0xce1/0xfd0
[ 2284.904609]  __kobject_del+0x27c/0x320
[ 2284.905698]  kobject_put+0x215/0x270
[ 2284.906756]  netdev_queue_update_kobjects+0x2a6/0x3e0
[ 2284.908229]  netdev_unregister_kobject+0x164/0x280
15:24:37 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2284.909487]  unregister_netdevice_many+0xbb7/0x1490
[ 2284.910781]  ? netdev_pick_tx+0xc70/0xc70
[ 2284.911955]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2284.913170]  ? queue_delayed_work_on+0xb4/0xe0
[ 2284.914424]  ? trace_hardirqs_on+0x5b/0x180
[ 2284.915437]  unregister_netdevice_queue+0x201/0x2c0
[ 2284.916590]  ? unregister_netdevice_many+0x1490/0x1490
[ 2284.917790]  ? linkwatch_fire_event+0x63/0x190
[ 2284.918831]  __tun_detach+0xfc1/0x12b0
[ 2284.919728]  tun_chr_close+0xc4/0x250
[ 2284.920605]  __fput+0x285/0x9f0
[ 2284.921363]  ? __tun_detach+0x12b0/0x12b0
[ 2284.922315]  task_work_run+0xe2/0x1a0
[ 2284.923197]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2284.924337]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2284.925433]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2284.926594] RIP: 0033:0x7fa43fdb1b19
[ 2284.927454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2284.931610] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2284.933331] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2284.934939] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2284.936567] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2284.938170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2284.939783] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:24:37 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x40189206, 0x7daf6)

15:24:37 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:24:37 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 25)

15:24:37 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e5baa6d8", @ANYRES16=r3, @ANYBLOB="010600000000000000001600000008000300", @ANYRES32=r5, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x88, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x9}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x7}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x88}}, 0xc000)
dup2(0xffffffffffffffff, r0)

[ 2285.039870] FAULT_INJECTION: forcing a failure.
[ 2285.039870] name failslab, interval 1, probability 0, space 0, times 0
[ 2285.042332] CPU: 0 PID: 11087 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2285.043795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2285.045562] Call Trace:
[ 2285.046127]  dump_stack+0x107/0x167
[ 2285.046903]  should_fail.cold+0x5/0xa
[ 2285.047715]  ? security_file_alloc+0x34/0x170
[ 2285.048672]  should_failslab+0x5/0x20
[ 2285.049480]  kmem_cache_alloc+0x5b/0x310
[ 2285.050345]  security_file_alloc+0x34/0x170
[ 2285.051260]  __alloc_file+0xb7/0x320
[ 2285.052064]  alloc_empty_file+0x6d/0x170
[ 2285.052926]  alloc_file+0x5e/0x5a0
[ 2285.053684]  alloc_file_pseudo+0x16a/0x250
[ 2285.054579]  ? alloc_file+0x5a0/0x5a0
[ 2285.055401]  anon_inode_getfile+0xc8/0x1f0
[ 2285.056320]  io_uring_setup+0x138b/0x2980
[ 2285.057197]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2285.058262]  ? wait_for_completion_io+0x270/0x270
[ 2285.059301]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2285.060410]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2285.061495]  do_syscall_64+0x33/0x40
[ 2285.062278]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2285.063352] RIP: 0033:0x7fd237085b19
[ 2285.064148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2285.068020] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2285.069620] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2285.071127] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2285.072677] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2285.074169] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2285.075669] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2285.093960] device wlan1 entered promiscuous mode
[ 2285.096046] device wlan1 entered promiscuous mode
[ 2285.098704] device wlan1 left promiscuous mode
[ 2285.100432] device wlan1 left promiscuous mode
15:24:38 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x4018920a, 0x7daf6)

15:24:38 executing program 7:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:24:38 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:24:38 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x8000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/234, 0xea})

[ 2285.254884] device wlan1 entered promiscuous mode
[ 2285.259812] device wlan1 left promiscuous mode
[ 2285.287668] device wlan1 entered promiscuous mode
[ 2285.299874] device wlan1 left promiscuous mode
15:24:54 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 26)

15:24:54 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = io_uring_setup(0x60ca, &(0x7f0000000000)={0x0, 0x7187, 0x2, 0x2, 0x35a})
syz_io_uring_setup(0x6560, &(0x7f00000000c0)={0x0, 0x48c0, 0x4, 0x2, 0x37b, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180))
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x7a901, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3)
pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000200)="b2dab058c0c1ed889bbe1a34de1654660d65f5cfb902ef5d2a2f64c4fa4de56dd5bdc4afb061a1fcd2eaa253023a00b0828f7e32966325f13855f469438810673dea6a1cd8fe3e2540aa35eca2f2995a77a6f4fee5b9032fa100caa822703a320d620449bc69870a6d040562288183c22b4300d99aa92c6dfbb87f245a34ee05e387a3ab4c315bd3035e9c7353cec03f821cfa5435151fde1b1e315f3025053834020fccebc405338c0cb96b2bb52a413e201cbfc97bb2fd118a79c252f8ee7e3bb0d4c1ff62d49b8a5bb5ae643fc20aebe0639891991c991e0607fb87ba2a87e6d87336076442998e48dee2ebaef8b533163b2153b22488d6988f64", 0xfc}, {&(0x7f0000000300)="88027e74683300b47aaa233eeb944c2bdcf26dae76a2bf4c1cb2d13c4ad87a5d9c8166f93b7fce8233e98b453660cbc95c7b2eb0bda910e1ff5fdcab24a723a2c12738deadecba7795354eabfe37362ba274", 0x52}, {&(0x7f0000000400)="f04ec172a9764583d59577d73f10dc154eb90a5866857780bc0ba162d176c5a5d248a13ea19479e96633d5c804740cbef69606a8c44f2856637864384993226ccc32f841c7bccb2913ac3c7ddc5c9e3f0bfb7a973a84daecff", 0x59}, {&(0x7f0000000540)="840a6742e4afaaf2fd769424f7704017072825c791331d2c1eecf603e62d8d1ae088238b08079c849d1b9cb96f79467260b7c12e3580edda3ee396d60b46c793f38107bd5996da3a7a8511fb33690650639a9edd427b39b7ff09625149e6be5192f989b998dd89deb215ecc4c4fd8820d0b08defd4d05b19ef887f69ebdf6820ee9aa088079d72eeb7f4130bc8375b00fedb9e69357d7bd9b5fa94fff4596a047626dd036ebcf499e610315856a633dd7c2556561bded65d31c4ab239929fc843d35e095183d173588ca4a72cea2787720962575077e45742943", 0xda}], 0x4, 0x98, 0xb0, 0x19)

15:24:54 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x5460, &(0x7f0000001700)={0x0, 0x0})

15:24:54 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 29)

15:24:54 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = dup2(0xffffffffffffffff, r0)
ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xb2ede)

15:24:54 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x4020940d, 0x7daf6)

15:24:54 executing program 7:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80000001)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:24:54 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2301.268705] FAULT_INJECTION: forcing a failure.
[ 2301.268705] name failslab, interval 1, probability 0, space 0, times 0
[ 2301.271449] CPU: 0 PID: 11133 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2301.272946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2301.274703] Call Trace:
[ 2301.275274]  dump_stack+0x107/0x167
[ 2301.276058]  should_fail.cold+0x5/0xa
[ 2301.276879]  ? create_object.isra.0+0x3a/0xa30
[ 2301.277841]  should_failslab+0x5/0x20
[ 2301.278645]  kmem_cache_alloc+0x5b/0x310
[ 2301.279510]  ? percpu_ref_put_many.constprop.0+0x4e/0x110
[ 2301.280684]  create_object.isra.0+0x3a/0xa30
[ 2301.281611]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2301.282702]  kmem_cache_alloc+0x159/0x310
[ 2301.283584]  security_file_alloc+0x34/0x170
[ 2301.284510]  __alloc_file+0xb7/0x320
[ 2301.285309]  alloc_empty_file+0x6d/0x170
[ 2301.286172]  alloc_file+0x5e/0x5a0
[ 2301.286929]  alloc_file_pseudo+0x16a/0x250
[ 2301.287830]  ? alloc_file+0x5a0/0x5a0
[ 2301.288667]  anon_inode_getfile+0xc8/0x1f0
[ 2301.289566]  io_uring_setup+0x138b/0x2980
[ 2301.290452]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2301.291523]  ? wait_for_completion_io+0x270/0x270
[ 2301.292584]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2301.293696]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2301.294795]  do_syscall_64+0x33/0x40
[ 2301.295585]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2301.296672] RIP: 0033:0x7fd237085b19
[ 2301.297460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2301.301372] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2301.303016] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2301.304606] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2301.306204] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2301.307758] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2301.309326] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:24:54 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x80086601, 0x7daf6)

15:24:54 executing program 5:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r2, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000009, 0x4000010, r0, 0x2e65e000)
openat$incfs(r2, &(0x7f0000000000)='.log\x00', 0x101000, 0x13)
dup2(0xffffffffffffffff, r0)

15:24:54 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2a080, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2301.360771] FAULT_INJECTION: forcing a failure.
[ 2301.360771] name failslab, interval 1, probability 0, space 0, times 0
[ 2301.363710] CPU: 1 PID: 11130 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2301.365281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2301.367161] Call Trace:
[ 2301.367766]  dump_stack+0x107/0x167
[ 2301.368604]  should_fail.cold+0x5/0xa
[ 2301.369470]  ? kobject_uevent_env+0x22b/0xfd0
[ 2301.370479]  ? dev_uevent_filter+0xd0/0xd0
[ 2301.371443]  should_failslab+0x5/0x20
[ 2301.372325]  kmem_cache_alloc_trace+0x55/0x320
[ 2301.373370]  ? dev_uevent_filter+0xd0/0xd0
[ 2301.374328]  kobject_uevent_env+0x22b/0xfd0
[ 2301.375305]  ? software_node_notify+0xf8/0x2f0
[ 2301.376360]  device_del+0xa8f/0x1180
[ 2301.377225]  ? uevent_show+0x390/0x390
[ 2301.378133]  unregister_netdevice_many+0xbb7/0x1490
[ 2301.379271]  ? netdev_pick_tx+0xc70/0xc70
[ 2301.380246]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2301.381429]  ? queue_delayed_work_on+0xb4/0xe0
[ 2301.382462]  ? trace_hardirqs_on+0x5b/0x180
[ 2301.383448]  unregister_netdevice_queue+0x201/0x2c0
[ 2301.384594]  ? unregister_netdevice_many+0x1490/0x1490
[ 2301.385786]  ? linkwatch_fire_event+0x63/0x190
[ 2301.386821]  __tun_detach+0xfc1/0x12b0
[ 2301.387708]  tun_chr_close+0xc4/0x250
[ 2301.388582]  __fput+0x285/0x9f0
[ 2301.389325]  ? __tun_detach+0x12b0/0x12b0
[ 2301.390259]  task_work_run+0xe2/0x1a0
[ 2301.391120]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2301.392245]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2301.393330]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2301.394488] RIP: 0033:0x7fa43fdb1b19
[ 2301.395321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2301.399468] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2301.399490] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2301.399501] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2301.399524] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2301.405895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2301.405907] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2301.438993] device wlan1 entered promiscuous mode
[ 2301.440538] device wlan1 entered promiscuous mode
[ 2301.442111] device wlan1 left promiscuous mode
[ 2301.443817] device wlan1 left promiscuous mode
15:24:54 executing program 5:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2301.604774] device wlan1 entered promiscuous mode
[ 2301.607700] device wlan1 left promiscuous mode
[ 2315.127687] FAULT_INJECTION: forcing a failure.
[ 2315.127687] name failslab, interval 1, probability 0, space 0, times 0
[ 2315.129196] CPU: 1 PID: 11160 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2315.130062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2315.131109] Call Trace:
[ 2315.131446]  dump_stack+0x107/0x167
[ 2315.131906]  should_fail.cold+0x5/0xa
[ 2315.132397]  ? io_uring_alloc_task_context+0x99/0x6a0
[ 2315.133047]  should_failslab+0x5/0x20
[ 2315.133531]  kmem_cache_alloc_trace+0x55/0x320
[ 2315.134206]  io_uring_alloc_task_context+0x99/0x6a0
[ 2315.134835]  ? io_import_iovec+0x1120/0x1120
[ 2315.135388]  ? lock_downgrade+0x6d0/0x6d0
[ 2315.135909]  ? do_raw_spin_lock+0x121/0x260
[ 2315.136464]  ? rwlock_bug.part.0+0x90/0x90
[ 2315.137002]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2315.137608]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2315.138274]  ? alloc_fd+0x2e7/0x670
[ 2315.138740]  io_uring_setup+0x1fbb/0x2980
[ 2315.139270]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2315.139911]  ? wait_for_completion_io+0x270/0x270
[ 2315.140539]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2315.141199]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2315.141848]  do_syscall_64+0x33/0x40
[ 2315.142324]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2315.142971] RIP: 0033:0x7fd237085b19
[ 2315.143437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2315.145771] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2315.146730] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2315.147629] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2315.148540] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2315.149434] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2315.150348] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:25:08 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xfffffffffffffffe, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:25:08 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x9201, &(0x7f0000001700)={0x0, 0x0})

15:25:08 executing program 5:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:25:08 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x80087601, 0x7daf6)

15:25:08 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = inotify_init()
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000140)=""/253, 0xfd}, {&(0x7f0000000240)=""/42, 0x2a}], 0x5, 0x1, 0x401)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
flock(r2, 0x0)

15:25:08 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:25:08 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 30)

15:25:08 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 27)

15:25:08 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x410102)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:25:08 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 28)

[ 2315.203525] FAULT_INJECTION: forcing a failure.
[ 2315.203525] name failslab, interval 1, probability 0, space 0, times 0
[ 2315.205343] CPU: 1 PID: 11158 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2315.206200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2315.207241] Call Trace:
[ 2315.207585]  dump_stack+0x107/0x167
[ 2315.208040]  should_fail.cold+0x5/0xa
[ 2315.208533]  ? create_object.isra.0+0x3a/0xa30
[ 2315.209111]  should_failslab+0x5/0x20
[ 2315.209590]  kmem_cache_alloc+0x5b/0x310
[ 2315.210112]  create_object.isra.0+0x3a/0xa30
[ 2315.210675]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2315.211311]  kmem_cache_alloc_trace+0x151/0x320
[ 2315.211893]  ? dev_uevent_filter+0xd0/0xd0
[ 2315.212428]  kobject_uevent_env+0x22b/0xfd0
[ 2315.212961]  ? software_node_notify+0xf8/0x2f0
[ 2315.213523]  device_del+0xa8f/0x1180
[ 2315.213984]  ? uevent_show+0x390/0x390
[ 2315.214472]  unregister_netdevice_many+0xbb7/0x1490
[ 2315.215090]  ? netdev_pick_tx+0xc70/0xc70
[ 2315.215604]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2315.216246]  ? queue_delayed_work_on+0xb4/0xe0
[ 2315.216817]  ? trace_hardirqs_on+0x5b/0x180
[ 2315.217349]  unregister_netdevice_queue+0x201/0x2c0
[ 2315.217962]  ? unregister_netdevice_many+0x1490/0x1490
[ 2315.218614]  ? linkwatch_fire_event+0x63/0x190
[ 2315.219181]  __tun_detach+0xfc1/0x12b0
[ 2315.219661]  tun_chr_close+0xc4/0x250
[ 2315.220129]  __fput+0x285/0x9f0
[ 2315.220538]  ? __tun_detach+0x12b0/0x12b0
[ 2315.221052]  task_work_run+0xe2/0x1a0
[ 2315.221522]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2315.222125]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2315.222719]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2315.223351] RIP: 0033:0x7fa43fdb1b19
[ 2315.223803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2315.226077] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2315.227007] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2315.227893] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2315.228780] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2315.229653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2315.230525] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:25:08 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x80089203, 0x7daf6)

[ 2315.246447] FAULT_INJECTION: forcing a failure.
[ 2315.246447] name failslab, interval 1, probability 0, space 0, times 0
[ 2315.249376] CPU: 0 PID: 11179 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2315.251166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2315.253273] Call Trace:
[ 2315.253942]  dump_stack+0x107/0x167
[ 2315.254866]  should_fail.cold+0x5/0xa
[ 2315.255834]  ? create_object.isra.0+0x3a/0xa30
[ 2315.256991]  should_failslab+0x5/0x20
[ 2315.257952]  kmem_cache_alloc+0x5b/0x310
[ 2315.258989]  create_object.isra.0+0x3a/0xa30
[ 2315.260099]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2315.261391]  kmem_cache_alloc_trace+0x151/0x320
[ 2315.262562]  io_uring_alloc_task_context+0x99/0x6a0
[ 2315.263813]  ? io_import_iovec+0x1120/0x1120
[ 2315.264930]  ? lock_downgrade+0x6d0/0x6d0
[ 2315.265960]  ? do_raw_spin_lock+0x121/0x260
[ 2315.267035]  ? rwlock_bug.part.0+0x90/0x90
[ 2315.268105]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2315.269329]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2315.270634]  ? alloc_fd+0x2e7/0x670
[ 2315.271555]  io_uring_setup+0x1fbb/0x2980
[ 2315.272615]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2315.273886]  ? wait_for_completion_io+0x270/0x270
[ 2315.275109]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2315.276442]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2315.277746]  do_syscall_64+0x33/0x40
[ 2315.278676]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2315.279957] RIP: 0033:0x7fd237085b19
[ 2315.280893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2315.285512] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2315.287420] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2315.289219] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2315.291005] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2315.292804] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2315.294590] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2315.303796] device wlan1 entered promiscuous mode
[ 2315.305870] device wlan1 entered promiscuous mode
[ 2315.310679] device wlan1 left promiscuous mode
15:25:08 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = inotify_init()
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000140)=""/253, 0xfd}, {&(0x7f0000000240)=""/42, 0x2a}], 0x5, 0x1, 0x401)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
flock(r2, 0x0)

15:25:08 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x40100)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
syz_open_dev$mouse(&(0x7f0000000300), 0xfffffffffffffff8, 0x101c2)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000), &(0x7f0000000040)={'U+', 0x23}, 0x16, 0x0)

15:25:08 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 31)

[ 2315.341493] device wlan1 left promiscuous mode
15:25:08 executing program 7:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0xc, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}, {&(0x7f0000000280)=""/36, 0x24}], 0x4}, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2004, @fd_index=0x5, 0x54cc, 0x1, 0x81, 0x4}, 0x1)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={r4, r5+60000000}, 0x1, 0x1, 0x1}, 0x9)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x8000, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r7, 0xfffff000)
dup2(0xffffffffffffffff, r6)

15:25:08 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0) (fail_nth: 1)

15:25:08 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000100)={{0x7, 0x2}, 0x100, './file0\x00'})
fallocate(r0, 0x20, 0x0, 0x100000001)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
read$usbmon(r1, &(0x7f0000000000)=""/84, 0x54)

[ 2315.407621] FAULT_INJECTION: forcing a failure.
[ 2315.407621] name failslab, interval 1, probability 0, space 0, times 0
[ 2315.409282] CPU: 1 PID: 11191 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2315.410080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2315.411037] Call Trace:
[ 2315.411344]  dump_stack+0x107/0x167
[ 2315.411760]  should_fail.cold+0x5/0xa
[ 2315.412202]  ? kobject_get_path+0xc5/0x1f0
[ 2315.412690]  should_failslab+0x5/0x20
[ 2315.413126]  __kmalloc+0x72/0x390
[ 2315.413523]  ? trace_hardirqs_on+0x5b/0x180
[ 2315.414023]  kobject_get_path+0xc5/0x1f0
[ 2315.414489]  kobject_uevent_env+0x251/0xfd0
[ 2315.414988]  ? software_node_notify+0xf8/0x2f0
[ 2315.415521]  device_del+0xa8f/0x1180
[ 2315.415953]  ? uevent_show+0x390/0x390
[ 2315.416418]  unregister_netdevice_many+0xbb7/0x1490
[ 2315.416997]  ? netdev_pick_tx+0xc70/0xc70
[ 2315.417480]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2315.418085]  ? queue_delayed_work_on+0xb4/0xe0
[ 2315.418602]  ? trace_hardirqs_on+0x5b/0x180
[ 2315.419100]  unregister_netdevice_queue+0x201/0x2c0
[ 2315.419477] FAULT_INJECTION: forcing a failure.
[ 2315.419477] name failslab, interval 1, probability 0, space 0, times 0
[ 2315.419674]  ? unregister_netdevice_many+0x1490/0x1490
[ 2315.419693]  ? linkwatch_fire_event+0x63/0x190
[ 2315.423141]  __tun_detach+0xfc1/0x12b0
[ 2315.423591]  tun_chr_close+0xc4/0x250
[ 2315.424026]  __fput+0x285/0x9f0
[ 2315.424411]  ? __tun_detach+0x12b0/0x12b0
[ 2315.424890]  task_work_run+0xe2/0x1a0
[ 2315.425332]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2315.425887]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2315.426442]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2315.427031] RIP: 0033:0x7fa43fdb1b19
[ 2315.427450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2315.429568] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2315.430434] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2315.431234] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2315.432058] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2315.432883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2315.433693] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2315.434525] CPU: 0 PID: 11195 Comm: syz-executor.5 Not tainted 5.10.252 #1
[ 2315.435982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2315.437721] Call Trace:
[ 2315.438279]  dump_stack+0x107/0x167
[ 2315.439040]  should_fail.cold+0x5/0xa
[ 2315.439845]  ? vm_area_alloc+0x1c/0x110
[ 2315.440726]  should_failslab+0x5/0x20
[ 2315.441527]  kmem_cache_alloc+0x5b/0x310
[ 2315.442376]  vm_area_alloc+0x1c/0x110
[ 2315.443167]  mmap_region+0x982/0x1500
[ 2315.443967]  do_mmap+0x868/0x1370
[ 2315.444713]  vm_mmap_pgoff+0x198/0x1f0
[ 2315.445528]  ? randomize_page+0xb0/0xb0
[ 2315.446373]  ksys_mmap_pgoff+0x41c/0x560
[ 2315.447221]  ? find_mergeable_anon_vma+0x250/0x250
[ 2315.448248]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2315.449366]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2315.450447]  do_syscall_64+0x33/0x40
[ 2315.451221]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2315.452297] RIP: 0033:0x7ff282968b19
[ 2315.453068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2315.456918] RSP: 002b:00007ff27fede188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 2315.458505] RAX: ffffffffffffffda RBX: 00007ff282a7bf60 RCX: 00007ff282968b19
[ 2315.459991] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ff9000
[ 2315.461480] RBP: 00007ff27fede1d0 R08: 0000000000000003 R09: 0000000000000000
[ 2315.462963] R10: 000000000001f012 R11: 0000000000000246 R12: 0000000000000001
[ 2315.464466] R13: 00007fff908ed56f R14: 00007ff27fede300 R15: 0000000000022000
15:25:22 executing program 7:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:25:22 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:25:22 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 32)

15:25:22 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0xc0045878, 0x7daf6)

15:25:22 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)

15:25:22 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x9204, &(0x7f0000001700)={0x0, 0x0})

15:25:22 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0) (fail_nth: 2)

15:25:22 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 29)

[ 2330.002423] FAULT_INJECTION: forcing a failure.
[ 2330.002423] name failslab, interval 1, probability 0, space 0, times 0
[ 2330.003852] CPU: 1 PID: 11219 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2330.004731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2330.005755] Call Trace:
[ 2330.006089]  dump_stack+0x107/0x167
[ 2330.006548]  should_fail.cold+0x5/0xa
[ 2330.007024]  ? create_object.isra.0+0x3a/0xa30
[ 2330.007593]  should_failslab+0x5/0x20
[ 2330.008064]  kmem_cache_alloc+0x5b/0x310
[ 2330.008590]  create_object.isra.0+0x3a/0xa30
[ 2330.009152]  kmemleak_alloc_percpu+0xa0/0x100
[ 2330.009702]  pcpu_alloc+0x4e2/0x1240
[ 2330.010178]  __percpu_counter_init+0x10d/0x2d0
[ 2330.010751]  io_uring_alloc_task_context+0xcc/0x6a0
[ 2330.011376]  ? io_import_iovec+0x1120/0x1120
[ 2330.011926]  ? lock_downgrade+0x6d0/0x6d0
[ 2330.012457]  ? do_raw_spin_lock+0x121/0x260
[ 2330.012988]  ? rwlock_bug.part.0+0x90/0x90
[ 2330.013526]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2330.014130]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2330.014781]  ? alloc_fd+0x2e7/0x670
[ 2330.015242]  io_uring_setup+0x1fbb/0x2980
[ 2330.015413] FAULT_INJECTION: forcing a failure.
[ 2330.015413] name failslab, interval 1, probability 0, space 0, times 0
[ 2330.015764]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2330.018968]  ? wait_for_completion_io+0x270/0x270
[ 2330.019571]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2330.020228]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2330.020888]  do_syscall_64+0x33/0x40
[ 2330.021364]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2330.022002] RIP: 0033:0x7fd237085b19
[ 2330.022460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2330.024765] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2330.025716] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2330.026589] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2330.027458] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2330.028325] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2330.029196] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2330.030087] CPU: 0 PID: 11220 Comm: syz-executor.5 Not tainted 5.10.252 #1
[ 2330.031675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2330.033600] Call Trace:
[ 2330.034154] device wlan1 entered promiscuous mode
[ 2330.035278]  dump_stack+0x107/0x167
[ 2330.035302]  should_fail.cold+0x5/0xa
[ 2330.035328]  ? create_object.isra.0+0x3a/0xa30
[ 2330.037637]  should_failslab+0x5/0x20
[ 2330.038503]  kmem_cache_alloc+0x5b/0x310
[ 2330.039434]  create_object.isra.0+0x3a/0xa30
[ 2330.040438]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2330.041589]  kmem_cache_alloc+0x159/0x310
[ 2330.042540]  vm_area_alloc+0x1c/0x110
[ 2330.043404]  mmap_region+0x982/0x1500
[ 2330.044279]  do_mmap+0x868/0x1370
[ 2330.045085]  vm_mmap_pgoff+0x198/0x1f0
[ 2330.045968]  ? randomize_page+0xb0/0xb0
[ 2330.046886]  ksys_mmap_pgoff+0x41c/0x560
[ 2330.047804]  ? find_mergeable_anon_vma+0x250/0x250
[ 2330.048923]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2330.050091]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2330.051245]  do_syscall_64+0x33/0x40
[ 2330.052074]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2330.053228] RIP: 0033:0x7ff282968b19
[ 2330.054053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2330.058168] RSP: 002b:00007ff27fede188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 2330.059866] RAX: ffffffffffffffda RBX: 00007ff282a7bf60 RCX: 00007ff282968b19
[ 2330.061478] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ff9000
[ 2330.063067] RBP: 00007ff27fede1d0 R08: 0000000000000003 R09: 0000000000000000
[ 2330.064667] R10: 000000000001f012 R11: 0000000000000246 R12: 0000000000000001
[ 2330.066261] R13: 00007fff908ed56f R14: 00007ff27fede300 R15: 0000000000022000
15:25:22 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 30)

15:25:22 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2330.081237] device wlan1 entered promiscuous mode
15:25:22 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0xc0045878, 0x7daf6)

[ 2330.090958] device wlan1 left promiscuous mode
15:25:23 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x90001, 0x0)
r2 = socket$inet(0x2, 0x1, 0x6)
r3 = dup3(r1, r2, 0x0)
recvmsg(r3, &(0x7f00000024c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000001140)=""/169, 0xa9}, {&(0x7f0000001200)=""/186, 0xba}, {&(0x7f00000012c0)=""/19, 0x13}, {&(0x7f0000001300)=""/4, 0x4}, {&(0x7f0000001340)=""/53, 0x35}, {&(0x7f0000001380)=""/129, 0x81}], 0x8, &(0x7f00000014c0)=""/4096, 0x1000}, 0x10100)
connect$inet(r4, &(0x7f0000002500)={0x2, 0x4e21, @empty}, 0x10)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2330.129437] FAULT_INJECTION: forcing a failure.
[ 2330.129437] name failslab, interval 1, probability 0, space 0, times 0
[ 2330.131305] CPU: 1 PID: 11213 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2330.132197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2330.133174] Call Trace:
[ 2330.133487]  dump_stack+0x107/0x167
[ 2330.133933]  should_fail.cold+0x5/0xa
[ 2330.134406]  ? create_object.isra.0+0x3a/0xa30
[ 2330.134960]  should_failslab+0x5/0x20
[ 2330.135429]  kmem_cache_alloc+0x5b/0x310
[ 2330.135921]  ? kmem_cache_alloc_trace+0x151/0x320
[ 2330.136524]  create_object.isra.0+0x3a/0xa30
[ 2330.137059]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2330.137683]  __kmalloc+0x16e/0x390
[ 2330.138120]  kobject_get_path+0xc5/0x1f0
[ 2330.138621]  kobject_uevent_env+0x251/0xfd0
[ 2330.139147]  ? software_node_notify+0xf8/0x2f0
[ 2330.139709]  device_del+0xa8f/0x1180
[ 2330.140167]  ? uevent_show+0x390/0x390
[ 2330.140662]  unregister_netdevice_many+0xbb7/0x1490
[ 2330.141272]  ? netdev_pick_tx+0xc70/0xc70
[ 2330.141776]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2330.142414]  ? queue_delayed_work_on+0xb4/0xe0
[ 2330.142970]  ? trace_hardirqs_on+0x5b/0x180
[ 2330.143501]  unregister_netdevice_queue+0x201/0x2c0
[ 2330.144106]  ? unregister_netdevice_many+0x1490/0x1490
[ 2330.144757]  ? linkwatch_fire_event+0x63/0x190
[ 2330.145320]  __tun_detach+0xfc1/0x12b0
[ 2330.145795]  tun_chr_close+0xc4/0x250
[ 2330.146255]  __fput+0x285/0x9f0
[ 2330.146653]  ? __tun_detach+0x12b0/0x12b0
[ 2330.147160]  task_work_run+0xe2/0x1a0
[ 2330.147629]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2330.148225]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2330.148822]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2330.149440] RIP: 0033:0x7fa43fdb1b19
[ 2330.149896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2330.152150] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2330.153092] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2330.153959] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2330.154826] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2330.155700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2330.156572] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2330.158599] FAULT_INJECTION: forcing a failure.
[ 2330.158599] name failslab, interval 1, probability 0, space 0, times 0
[ 2330.159947] CPU: 1 PID: 11231 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2330.160796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2330.161802] Call Trace:
[ 2330.162123]  dump_stack+0x107/0x167
[ 2330.162563]  should_fail.cold+0x5/0xa
[ 2330.163023]  ? create_object.isra.0+0x3a/0xa30
[ 2330.163571]  should_failslab+0x5/0x20
[ 2330.164029]  kmem_cache_alloc+0x5b/0x310
[ 2330.164529]  create_object.isra.0+0x3a/0xa30
[ 2330.165064]  kmemleak_alloc_percpu+0xa0/0x100
[ 2330.165613]  pcpu_alloc+0x4e2/0x1240
[ 2330.166066]  __percpu_counter_init+0x10d/0x2d0
[ 2330.166622]  io_uring_alloc_task_context+0xcc/0x6a0
[ 2330.167221]  ? io_import_iovec+0x1120/0x1120
[ 2330.167748]  ? lock_downgrade+0x6d0/0x6d0
[ 2330.168245]  ? do_raw_spin_lock+0x121/0x260
[ 2330.168753]  ? rwlock_bug.part.0+0x90/0x90
[ 2330.169243]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2330.169799]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2330.170404]  ? alloc_fd+0x2e7/0x670
[ 2330.170834]  io_uring_setup+0x1fbb/0x2980
[ 2330.171314]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2330.171900]  ? wait_for_completion_io+0x270/0x270
[ 2330.172481]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2330.173081]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2330.173678]  do_syscall_64+0x33/0x40
[ 2330.174104]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2330.174699] RIP: 0033:0x7fd237085b19
[ 2330.175124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2330.177243] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2330.178129] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2330.178945] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2330.179778] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2330.180614] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2330.181435] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:25:23 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0) (fail_nth: 1)

15:25:23 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0) (fail_nth: 3)

[ 2330.202483] device wlan1 left promiscuous mode
15:25:23 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0xc0109207, 0x7daf6)

[ 2330.258611] FAULT_INJECTION: forcing a failure.
[ 2330.258611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2330.260146] CPU: 1 PID: 11241 Comm: syz-executor.5 Not tainted 5.10.252 #1
[ 2330.260940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2330.261894] Call Trace:
[ 2330.262204]  dump_stack+0x107/0x167
[ 2330.262630]  should_fail.cold+0x5/0xa
[ 2330.263071]  _copy_to_user+0x2e/0x180
[ 2330.263510]  simple_read_from_buffer+0xcc/0x160
[ 2330.264043]  proc_fail_nth_read+0x198/0x230
[ 2330.264542]  ? proc_sessionid_read+0x230/0x230
[ 2330.265057]  ? security_file_permission+0xb1/0xe0
[ 2330.265607]  ? proc_sessionid_read+0x230/0x230
[ 2330.266130]  vfs_read+0x228/0x620
[ 2330.266522]  ksys_read+0x12d/0x260
[ 2330.266928]  ? vfs_write+0xb10/0xb10
[ 2330.267357]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2330.267951]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2330.268552]  do_syscall_64+0x33/0x40
[ 2330.268975]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2330.269556] RIP: 0033:0x7ff28291b69c
[ 2330.269975] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2330.272046] RSP: 002b:00007ff27fede170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2330.272911] RAX: ffffffffffffffda RBX: 0000000020ff9000 RCX: 00007ff28291b69c
[ 2330.273713] RDX: 000000000000000f RSI: 00007ff27fede1e0 RDI: 0000000000000006
[ 2330.274516] RBP: 00007ff27fede1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2330.275319] R10: 000000000001f012 R11: 0000000000000246 R12: 0000000000000001
[ 2330.276148] R13: 00007fff908ed56f R14: 00007ff27fede300 R15: 0000000000022000
15:25:23 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 31)

15:25:23 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:25:23 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 33)

15:25:23 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0xc0189436, 0x7daf6)

[ 2330.316449] FAULT_INJECTION: forcing a failure.
[ 2330.316449] name failslab, interval 1, probability 0, space 0, times 0
15:25:23 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x6, 0xb5c, 0x5)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r1, @ANYBLOB="0f7651cf43100033000000002e2f66698b65300097828ad1ca037cad71cda4cb4e4ff4f2b236bcc9a6ff2551a13078618eb9b2a67f9954a2d7420fb34e758b4f3296c40937095d4a52535f0a3a0da5a6f0c58d61cab853524e2540587ee6"])
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, 0x8010, r2, 0x0)
r5 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0)
syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r9, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r10, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
ioctl$SIOCGIFHWADDR(r10, 0x8927, &(0x7f0000000280)={'ip6gretap0\x00'})
syz_io_uring_submit(r4, r7, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r9, 0x80, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @private=0xa010102, 0x2}}, 0x80000000)
sendfile(r2, r3, &(0x7f0000000180)=0x9, 0x7f9)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2330.318126] CPU: 1 PID: 11248 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2330.319107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2330.320043] Call Trace:
[ 2330.320351]  dump_stack+0x107/0x167
[ 2330.320772]  should_fail.cold+0x5/0xa
[ 2330.321207]  ? io_uring_alloc_task_context+0x4a3/0x6a0
[ 2330.321794]  should_failslab+0x5/0x20
[ 2330.322226]  kmem_cache_alloc_trace+0x55/0x320
[ 2330.322742]  io_uring_alloc_task_context+0x4a3/0x6a0
[ 2330.323314]  ? io_import_iovec+0x1120/0x1120
[ 2330.323820]  ? lock_downgrade+0x6d0/0x6d0
[ 2330.324288]  ? do_raw_spin_lock+0x121/0x260
[ 2330.324791]  ? rwlock_bug.part.0+0x90/0x90
[ 2330.325272]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2330.325812]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2330.326404]  ? alloc_fd+0x2e7/0x670
[ 2330.326821]  io_uring_setup+0x1fbb/0x2980
[ 2330.327296]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2330.327872]  ? wait_for_completion_io+0x270/0x270
[ 2330.328449]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2330.329040]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2330.329639]  do_syscall_64+0x33/0x40
[ 2330.330062]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2330.330651] RIP: 0033:0x7fd237085b19
[ 2330.331076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2330.333204] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2330.334061] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2330.334868] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2330.335671] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2330.336493] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2330.337299] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2330.344400] FAULT_INJECTION: forcing a failure.
[ 2330.344400] name failslab, interval 1, probability 0, space 0, times 0
[ 2330.347450] CPU: 0 PID: 11247 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2330.348931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2330.350676] Call Trace:
[ 2330.351241]  dump_stack+0x107/0x167
[ 2330.352005]  should_fail.cold+0x5/0xa
[ 2330.352818]  ? create_object.isra.0+0x3a/0xa30
[ 2330.353778]  should_failslab+0x5/0x20
[ 2330.354574]  kmem_cache_alloc+0x5b/0x310
[ 2330.355434]  create_object.isra.0+0x3a/0xa30
[ 2330.356360]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2330.357438]  __kmalloc+0x16e/0x390
[ 2330.358193]  kobject_get_path+0xc5/0x1f0
[ 2330.359048]  kobject_uevent_env+0x251/0xfd0
[ 2330.359957]  ? software_node_notify+0xf8/0x2f0
[ 2330.360924]  device_del+0xa8f/0x1180
[ 2330.361710]  ? uevent_show+0x390/0x390
[ 2330.362544]  unregister_netdevice_many+0xbb7/0x1490
[ 2330.363591]  ? netdev_pick_tx+0xc70/0xc70
[ 2330.364483]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2330.365584]  ? queue_delayed_work_on+0xb4/0xe0
[ 2330.366534]  ? trace_hardirqs_on+0x5b/0x180
[ 2330.367477]  unregister_netdevice_queue+0x201/0x2c0
[ 2330.368534]  ? unregister_netdevice_many+0x1490/0x1490
[ 2330.369634]  ? linkwatch_fire_event+0x63/0x190
[ 2330.370595]  __tun_detach+0xfc1/0x12b0
[ 2330.371426]  tun_chr_close+0xc4/0x250
[ 2330.372221]  __fput+0x285/0x9f0
[ 2330.372917]  ? __tun_detach+0x12b0/0x12b0
[ 2330.373876]  task_work_run+0xe2/0x1a0
[ 2330.374758]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2330.375798]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2330.376824]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2330.377903] RIP: 0033:0x7fa43fdb1b19
[ 2330.378681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2330.382530] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2330.384119] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2330.385617] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2330.387112] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2330.388617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2330.390121] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2330.450578] device wlan1 entered promiscuous mode
[ 2330.452154] device wlan1 left promiscuous mode
[ 2331.022187] FAULT_INJECTION: forcing a failure.
[ 2331.022187] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2331.025209] CPU: 1 PID: 11236 Comm: syz-executor.7 Not tainted 5.10.252 #1
[ 2331.026917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2331.029037] Call Trace:
[ 2331.029718]  dump_stack+0x107/0x167
[ 2331.030643]  should_fail.cold+0x5/0xa
[ 2331.031613]  __alloc_pages_nodemask+0x182/0x600
[ 2331.032804]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2331.034324]  ? mark_held_locks+0x9e/0xe0
[ 2331.035391]  alloc_pages_current+0x187/0x280
[ 2331.036520]  ? lock_page_memcg+0xcd/0x270
[ 2331.037569]  __get_free_pages+0xc/0xa0
[ 2331.038567]  __tlb_remove_page_size+0x257/0x420
[ 2331.039741]  unmap_page_range+0x1186/0x1fe0
[ 2331.040869]  ? vm_normal_page+0x2e0/0x2e0
[ 2331.041923]  ? lock_downgrade+0x6d0/0x6d0
[ 2331.042967]  ? uprobe_munmap+0x1c/0x560
[ 2331.043981]  unmap_single_vma+0x198/0x300
[ 2331.045053]  unmap_vmas+0x16d/0x300
[ 2331.045976]  ? zap_vma_ptes+0x100/0x100
[ 2331.047008]  exit_mmap+0x27f/0x4f0
[ 2331.047913]  ? __ia32_sys_remap_file_pages+0x150/0x150
[ 2331.049281]  mmput+0xca/0x340
[ 2331.050070]  do_exit+0xa9e/0x2600
[ 2331.050955]  ? find_held_lock+0x2c/0x110
[ 2331.051978]  ? mm_update_next_owner+0x830/0x830
[ 2331.053169]  ? get_signal+0x37e/0x2350
[ 2331.054159]  ? lock_downgrade+0x6d0/0x6d0
[ 2331.055212]  ? do_raw_spin_lock+0x121/0x260
[ 2331.056308]  ? rwlock_bug.part.0+0x90/0x90
[ 2331.057390]  do_group_exit+0x125/0x310
[ 2331.058377]  get_signal+0x4bc/0x2350
[ 2331.059321]  ? mon_bin_submit+0x30/0x30
[ 2331.060339]  ? mutex_lock_io_nested+0xf30/0xf30
[ 2331.061540]  arch_do_signal_or_restart+0x2b7/0x1990
[ 2331.062808]  ? wait_for_completion_io+0x270/0x270
[ 2331.064027]  ? fsnotify_perm.part.0+0x22d/0x620
[ 2331.065219]  ? copy_from_buf+0x1d0/0x1d0
[ 2331.066247]  ? restore_sigcontext+0x630/0x630
[ 2331.067387]  ? rw_verify_area+0x11d/0x350
[ 2331.068448]  ? task_work_add+0x98/0x190
[ 2331.069462]  ? fput_many+0xf6/0x1a0
[ 2331.070377]  ? ksys_read+0x1a9/0x260
[ 2331.071323]  exit_to_user_mode_prepare+0x127/0x1e0
[ 2331.072584]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2331.073802]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2331.075105] RIP: 0033:0x7f86039f8b19
[ 2331.076029] Code: Unable to access opcode bytes at RIP 0x7f86039f8aef.
[ 2331.077691] RSP: 002b:00007f8600f6e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2331.079669] RAX: fffffffffffffffc RBX: 00007f8603b0bf60 RCX: 00007f86039f8b19
[ 2331.081521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2331.083338] RBP: 00007f8600f6e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2331.085166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2331.086978] R13: 00007ffe90a8b45f R14: 00007f8600f6e300 R15: 0000000000022000
15:25:38 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)

15:25:38 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 32)

15:25:38 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x9205, &(0x7f0000001700)={0x0, 0x0})

[ 2345.592618] FAULT_INJECTION: forcing a failure.
[ 2345.592618] name failslab, interval 1, probability 0, space 0, times 0
[ 2345.595209] CPU: 0 PID: 11264 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2345.596759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2345.598602] Call Trace:
[ 2345.599189]  dump_stack+0x107/0x167
[ 2345.600003]  should_fail.cold+0x5/0xa
15:25:38 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)

15:25:38 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x83, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:25:38 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0xc020660b, 0x7daf6)

15:25:38 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2345.600865]  ? create_object.isra.0+0x3a/0xa30
15:25:38 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 34)

[ 2345.601986]  should_failslab+0x5/0x20
[ 2345.602874]  kmem_cache_alloc+0x5b/0x310
[ 2345.603760]  create_object.isra.0+0x3a/0xa30
[ 2345.604726]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2345.605834]  kmem_cache_alloc_trace+0x151/0x320
[ 2345.606852]  io_uring_alloc_task_context+0x4a3/0x6a0
[ 2345.607955]  ? io_import_iovec+0x1120/0x1120
[ 2345.608929]  ? lock_downgrade+0x6d0/0x6d0
[ 2345.609827]  ? do_raw_spin_lock+0x121/0x260
[ 2345.610762]  ? rwlock_bug.part.0+0x90/0x90
[ 2345.611682]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2345.612727]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2345.613843]  ? alloc_fd+0x2e7/0x670
[ 2345.614631]  io_uring_setup+0x1fbb/0x2980
[ 2345.615526]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2345.616616]  ? wait_for_completion_io+0x270/0x270
[ 2345.617668]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2345.618826]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2345.619979]  do_syscall_64+0x33/0x40
[ 2345.620791]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2345.621880] RIP: 0033:0x7fd237085b19
[ 2345.622671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2345.626595] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2345.628219] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2345.629742] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2345.631259] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2345.632795] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2345.634311] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:25:38 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4002, 0x0, 0x1f012, r0, 0x0)

15:25:38 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x9208, &(0x7f0000001700)={0x0, 0x0})

15:25:38 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000))
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:25:38 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x169182, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000240)={0x1060, 0x0, 0x5, 0x787, 0x0, 0x0, {0x1, 0x0, 0x7}, [{{0x254, 0x1, {{0x76dab67c0af41ae5, 0x4}, 0x0, 0x1, 0x6, 0x80, 0x0, 'syz0\x00', "afa23223d4c5d8ce5473f6ffeea596da630f07005dfd121eadc20e19ed255bfa", "102bf0d196f5e6ffd7b80819981fc7b930956b795437c57fcc9c7d4b8e439d3e", [{0x7f, 0x7, {0x1, 0x7}}, {0x5, 0x743, {0x2, 0xf4}}, {0x4, 0xddd, {0x3, 0x7}}, {0x8, 0x2cb7, {0x2, 0x9}}, {0x0, 0xa9, {0x3, 0x5}}, {0xce, 0xffff, {0x0, 0x6}}, {0x9, 0x8000, {0x2, 0x67}}, {0x22b, 0x7, {0x2, 0xa0}}, {0x0, 0xfd, {0x3, 0x2}}, {0xfffe, 0x800, {0x1}}, {0x5, 0x1, {0x3, 0x4}}, {0x200, 0x1ff, {0x1, 0x6}}, {0x8, 0x7, {0x1, 0x1}}, {0xfff, 0xfffa, {0x0, 0xe0000}}, {0x4000, 0x1ff, {0x3, 0x7}}, {0xfff, 0x3, {0x0, 0x80000001}}, {0x2, 0x1, {0x0, 0xfffffeff}}, {0x4, 0x29, {0x0, 0xf9}}, {0xb83, 0x82, {0x0, 0x4}}, {0x9, 0x8, {0x3, 0x76}}, {0xfffd, 0x100, {0x3, 0x1}}, {0x6, 0xffff, {0x0, 0x8}}, {0xe1, 0x2, {0x2, 0x4}}, {0x3}, {0x401, 0x5, {0x3, 0x7fffffff}}, {0x8f0, 0x5, {0x1, 0xcf}}, {0x8, 0x9a42, {0x2, 0x9}}, {0x7f, 0x2, {0x0, 0x4}}, {0x4, 0x7ff, {0x2, 0x1}}, {0x3, 0x2762, {0x3}}, {0x7727, 0x7f, {0x3, 0x200}}, {0xe50, 0x1, {0x2, 0x20}}, {0x0, 0x1, {0x3, 0x7fffffff}}, {0x0, 0x8, {0x3, 0x4}}, {0xf49a, 0x7fff, {0x4, 0x8}}, {0x400, 0x20, {0x0, 0x9}}, {0x2, 0x1, {0x1, 0x80}}, {0x40, 0xfffb, {0x1, 0x4f44}}, {0x6, 0x4, {0x2, 0x8281}}, {0xffff, 0x9, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x4, 0x40, 0xfff, 0x8, 0x1c, 'syz1\x00', "9d9d44a9452ef4b8656146c439d911ac504d1865027d95e9efcf3233ea98f17a", "0b75633548bd041c5e8334cc248c6ba07ddfe12a5664f07ccf1d637401b2ef1e", [{0x0, 0x1, {0x3, 0x10000}}, {0x4, 0xfff, {0x0, 0xb48d}}, {0x7fff, 0x4, {0x0, 0x6}}, {0x0, 0x9, {0x1, 0x1}}, {0x4, 0xff, {0x1, 0x5}}, {0x2, 0x2, {0x1, 0x1695}}, {0x3f, 0x1, {0x0, 0xd84}}, {0x7, 0x2, {0x1, 0x7ff}}, {0x8000, 0x3f, {0x2, 0x800}}, {0x7, 0x100, {0x1, 0x3f}}, {0x118, 0x8001, {0x2, 0x4}}, {0xde8, 0x7, {0x3, 0x9}}, {0x8c, 0x1}, {0x3, 0x3, {0x2}}, {0x0, 0x7, {0x2, 0x3}}, {0x7, 0x8000, {0x2, 0xefc}}, {0x3f, 0x3f, {0x0, 0xf14}}, {0x8, 0x78, {0x1, 0x8}}, {0x1f, 0xff, {0x0, 0xfffffcd3}}, {0x85f, 0x7, {0x0, 0x1d}}, {0x8001, 0x1, {0x1}}, {0x1000, 0x0, {0x3, 0x3f}}, {0x5, 0x1, {0x3, 0x3}}, {0x1ff, 0x0, {0x1, 0x9}}, {0x9, 0x9, {0x0, 0x1}}, {0x9, 0x81, {0x1, 0xff}}, {0x3, 0x32ff, {0x3, 0x6e21}}, {0x2000, 0x2dd, {0x0, 0xff}}, {0x800, 0x2, {0x2, 0x4}}, {0x8000, 0x0, {0x0, 0x401}}, {0x5, 0x5, {0x2, 0xffff7fff}}, {0x9, 0x2, {0x1, 0xba3}}, {0x9, 0x4, {0x0, 0xffffff6a}}, {0x7, 0x8, {0x2, 0x6}}, {0x7f, 0xfff, {0x1, 0x7}}, {0xe227, 0x3f, {0x3, 0x1}}, {0x6, 0x11, {0x1, 0x3}}, {0x1, 0x100, {0x2, 0x9}}, {0xfff, 0x5, {0x0, 0x8001}}, {0x8001, 0x0, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x381f721d}, 0xa9, 0x7, 0x2, 0x4, 0x18, 'syz0\x00', "d244c5b7340728ad76386d858f152386bc854979106777ea1ce84e7ceeaf5946", "39d7fea6c91e7e7ff23389dd0057b767231b648e8ef6d2fd3828b575cb45851c", [{0x80, 0x3, {0x2, 0x6}}, {0x4, 0xffff, {0x0, 0x7}}, {0x82dc, 0x8, {0x2, 0x6c8b542d}}, {0x4, 0x2f9c, {0x1, 0x101}}, {0x85, 0x3, {0x0, 0x6}}, {0x4, 0xfffe, {0x2, 0x7}}, {0x7fff, 0xfff, {0x2, 0x1e}}, {0x8dc, 0x4}, {0x9, 0x40, {0x3, 0x7fff}}, {0x100, 0x6eb7, {0x0, 0x7fbb4d05}}, {0x0, 0x0, {0x3, 0x6}}, {0x8, 0x97ce, {0x1, 0x400}}, {0x1000, 0xfe00, {0x2, 0xa86b}}, {0x8, 0x1000, {0x0, 0x6}}, {0x8, 0xfffc, {0x0, 0x6}}, {0x9, 0x100, {0x2}}, {0x0, 0x7ff, {0x2, 0xfffff75f}}, {0x3, 0x3, {0x1, 0xfff}}, {0x6, 0x81, {0x0, 0x8}}, {0x100, 0x6, {0x0, 0x5}}, {0x200, 0x8, {0x1, 0x5}}, {0x4, 0x7fff, {0x0, 0x1}}, {0x0, 0x3f, {0x3, 0x6}}, {0x7, 0xff, {0x1, 0x4}}, {0x5, 0x7, {0x1, 0xfff}}, {0xbed, 0x800, {0x0, 0xffffffff}}, {0xfaee, 0x2ba2, {0x2, 0x3ff}}, {0x0, 0x9c1, {0x0, 0x3}}, {0x2e, 0x3, {0x2, 0x82c}}, {0x84, 0x2, {0x2, 0x6}}, {0x7, 0x6, {0x1, 0x7ff}}, {0x2, 0x9de4, {0x1, 0x8}}, {0x4, 0x5, {0x3, 0x1}}, {0x29f, 0x2, {0x1, 0x8001}}, {0x80, 0x1, {0x0, 0x80000001}}, {0x7369, 0x8001, {0x1, 0x80}}, {0x0, 0x200, {0x2}}, {0x4, 0x1ff, {0x1}}, {0x8, 0x9}, {0x4, 0x8, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x65}, 0x4, 0x5, 0xff, 0x7f, 0xd, 'syz0\x00', "fa8fbc19d56c7315014b6f59cc0e7d3e5b13cec295c16b96af897bc3e74e9aeb", "ae41d35818e0640a59ae3ba37975239801e1dc4e959f29e8b120b0343d33a423", [{0x9, 0x3f6, {0x3, 0xc14b}}, {0x3b, 0x8, {0x0, 0x2}}, {0x101, 0x0, {0x0, 0x401}}, {0x1ff, 0x4, {0x1, 0x5}}, {0x7fff, 0x9, {0x1, 0x1}}, {0x3, 0x800, {0x1, 0x7ff}}, {0x8, 0xce94, {0x3, 0xffffffff}}, {0x7, 0x5af, {0x1, 0x20}}, {0x1, 0x0, {0x3, 0x9}}, {0x1, 0x0, {0x1, 0xfffffffe}}, {0x170, 0x800, {0x0, 0xffffffff}}, {0x3, 0x3f, {0x3, 0x4}}, {0x7, 0x80, {0x3, 0xc701}}, {0x100, 0x5, {0x0, 0x401}}, {0x7, 0x2, {0x0, 0xfffffff9}}, {0x6, 0x7b, {0x0, 0x20}}, {0x4, 0x0, {0x0, 0x10001}}, {0x8, 0x0, {0x1, 0x2}}, {0x101, 0xffff, {0x3, 0xffff}}, {0xa93, 0x7fff, {0x1, 0xffff8796}}, {0x8, 0x2, {0x0, 0xd425}}, {0x1, 0x3, {0x3, 0x1}}, {0x3f, 0x2, {0x1, 0xfffff000}}, {0x6, 0x7, {0x3, 0x80}}, {0x200, 0x1, {0x3, 0x6}}, {0x40, 0x3f, {0x0, 0xa943}}, {0x101, 0x5, {0x0, 0x100}}, {0x8001, 0x8c6, {0x3, 0x4}}, {0x7, 0x1f, {0x1, 0x1}}, {0x1, 0x2a8, {0x1, 0x6}}, {0x79, 0x3ff, {0x2, 0x9}}, {0x7fff, 0x8, {0x0, 0x8001}}, {0xb393, 0x7f, {0x0, 0x7fffffff}}, {0x5, 0x9, {0x3, 0x7fff}}, {0x3, 0x1, {0x0, 0x1}}, {0x4, 0x8, {0x1, 0x5}}, {0x0, 0x0, {0x0, 0x3}}, {0x40, 0x7f, {0x1, 0x1c}}, {0xcb42, 0x40, {0x2, 0x10000}}, {0x2, 0x1, {0x3, 0xd7f}}]}}}, {{0x254, 0x1, {{0x0, 0xffe2}, 0xff, 0x0, 0x77d, 0x2, 0xd, 'syz0\x00', "0ae5ef006a367001cc90990285f0166322f1a3fbf4d42176c21b9a1c2cd27aea", "1aeee6e94a30ada5c16a62fd6f3b5e3293ce90e45ec8a1c8cdbbe223e30524ba", [{0x81, 0x7, {0x2, 0x5}}, {0x1, 0x3, {0x0, 0xfff}}, {0x6, 0xf2, {0x1, 0xb}}, {0x1000, 0x7fff, {0x0, 0x5}}, {0x2, 0x20, {0x3}}, {0x3a, 0x8, {0x3, 0x400}}, {0x0, 0x0, {0x3, 0x401}}, {0x8000, 0x81, {0x1, 0x8}}, {0x2, 0x92, {0x2, 0x9}}, {0x1, 0x7, {0x3, 0xe03}}, {0xd3a, 0x400, {0x0, 0x6}}, {0xaab0, 0xffff, {0x0, 0xec9e}}, {0x3, 0x7806, {0x3, 0x80000000}}, {0x1, 0x2, {0x2, 0x7fff}}, {0x101, 0x7fff, {0x2e53ea141e5d2d2e, 0x80000001}}, {0x3ff, 0x0, {0x0, 0x6}}, {0xb9, 0x9, {0x0, 0x9}}, {0x7f, 0x9, {0x0, 0x6}}, {0x2, 0xd7de, {0x1, 0x2}}, {0x7, 0x1000, {0x0, 0x9a98}}, {0xfff, 0xf32, {0x1, 0x389c}}, {0x3, 0x0, {0x2, 0x22}}, {0x77, 0xa41, {0x1, 0x80000000}}, {0xfff, 0x9, {0x2, 0x7}}, {0x9, 0xff01, {0x1, 0x9}}, {0x5, 0x9, {0x1, 0x20b}}, {0x2a, 0x8, {0x0, 0x1ff}}, {0x40, 0x2, {0x1, 0x30000000}}, {0x8, 0xffff, {0x0, 0xcc}}, {0x1, 0x8, {0x3, 0x6}}, {0x4, 0x4, {0x3, 0x6}}, {0x8001, 0x4b2, {0x2, 0x7fff}}, {0x81, 0x6, {0x0, 0x6}}, {0x6, 0xfb71, {0x1, 0x81}}, {0x20, 0x6fd, {0x3}}, {0x1, 0x1, {0x0, 0x2}}, {0x7fff, 0x6000, {0x1, 0x40}}, {0x5, 0xc8c, {0x1, 0x200}}, {0x6, 0x6, {0x3, 0x9}}, {0x2, 0x0, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x99}, 0x8, 0x1, 0x1f, 0x200, 0x25, 'syz1\x00', "ee94c65c236bb414e8bc7a044296f6cc91281e0896d84806fcfa7df2bc964102", "498735a14d4449b4c9794cd52e1f15210a2c1e864bdfa81d0b105d1beafbf0ad", [{0x5, 0x81, {0x2, 0x1}}, {0x3, 0x6, {0x3, 0x76}}, {0x401, 0x9, {0x2, 0x8}}, {0x3, 0x5, {0x1}}, {0xff, 0xd4f, {0x0, 0x4}}, {0x7fff, 0x0, {0x2, 0x3f}}, {0x7, 0x1, {0x2, 0x1000}}, {0x2, 0x7fff, {0x2, 0x6}}, {0x6, 0x7, {0x2, 0xffff5002}}, {0x0, 0x6, {0x0, 0x3}}, {0x0, 0x3, {0x2, 0xfffffffe}}, {0x1, 0x8001, {0x1, 0x81}}, {0x80, 0x2d71, {0x2, 0x1}}, {0x9, 0xfb, {0x3, 0x9}}, {0x4ee1, 0x8, {0x0, 0x7}}, {0x1000, 0x4}, {0x185e, 0xffff, {0x2, 0x20}}, {0x8, 0x81, {0x2, 0x4}}, {0x4, 0x0, {0x1, 0xb05}}, {0x7, 0x8000, {0x1}}, {0x1, 0xf5fb, {0x0, 0x3}}, {0x7ff, 0x1000, {0x3, 0x20}}, {0x0, 0x2, {0x0, 0xfffffffa}}, {0xffff, 0x7f, {0x3}}, {0x6, 0x4, {0x1, 0x1000}}, {0x101, 0x100, {0x1, 0x4}}, {0x200, 0x1, {0x0, 0x6e4}}, {0x4, 0x6c, {0x0, 0x5}}, {0x8001, 0x376, {0x3, 0x9}}, {0x401, 0x4, {0x4, 0x7f}}, {0x2, 0x7ff, {0x0, 0x2a}}, {0x5, 0x3, {0x1, 0x1}}, {0x6, 0x0, {0x1, 0x3}}, {0x9, 0x8, {0x0, 0x4}}, {0x7, 0x3, {0x0, 0x8000}}, {0x8, 0x800, {0x3, 0x6}}, {0x3, 0x81, {0x2, 0x8}}, {0x7, 0xff, {0x0, 0x8}}, {0x8, 0x5, {0x1, 0x4}}, {0x2e2, 0x200, {0x0, 0x7fffffff}}]}}}, {{0x254, 0x1, {{0x1, 0x8000000}, 0x0, 0x6, 0x0, 0x3ff, 0x1d, 'syz1\x00', "8275d74b9aca7df981ded7c0ee982d4f57475fd6258212ec3dbb60c68883e786", "735e88402b7c2a905ab1a6ceb40d265d1d5c4b80aa010dd5d23dc05ec61d2758", [{0x8, 0x4, {0x2, 0x2}}, {0x7, 0x0, {0x3, 0x3c568a80}}, {0x78, 0x6, {0x2, 0xfffffff9}}, {0x5, 0x0, {0x1, 0xf8bc}}, {0x9, 0x5}, {0xff, 0x800, {0x2, 0x5}}, {0x3, 0xa000, {0x2, 0x8000}}, {0x8, 0x51e, {0x3, 0x6}}, {0xb8d2, 0x7, {0x3, 0x1000}}, {0xd201, 0x9, {0x2, 0xcffb}}, {0x4, 0x1, {0x2}}, {0x8001, 0x4, {0x3, 0x400}}, {0x3, 0x4, {0x1}}, {0x500, 0x7, {0x3, 0x4}}, {0x4, 0xc5, {0x2, 0x2}}, {0x2e, 0x1000, {0x0, 0x5}}, {0xfffe, 0x20, {0x3, 0x4}}, {0x9, 0x3ff, {0x3, 0x1000}}, {0x2, 0x7, {0x1, 0xfff}}, {0x4, 0x2, {0x1, 0x6}}, {0x3, 0x1, {0x0, 0x1}}, {0x7, 0x101, {0x0, 0x9}}, {0x2, 0x0, {0x1, 0x7ff}}, {0x2, 0x2, {0x0, 0x7}}, {0x8, 0x1, {0x2, 0x3}}, {0x3, 0x1, {0x3, 0x40}}, {0x5, 0x7, {0x1, 0x7}}, {0x6, 0x2, {0x2, 0xffff}}, {0x5, 0x1ff, {0x2, 0x80}}, {0x0, 0xcf68, {0x1, 0x8}}, {0x9, 0x80, {0x1, 0x1}}, {0x0, 0x2, {0x0, 0x1000}}, {0xc, 0x40, {0x2, 0xf31}}, {0x81, 0x9071, {0x2, 0x3}}, {0x0, 0xaa4d, {0x0, 0x9eb}}, {0x0, 0x9, {0x2, 0x80000000}}, {0x1, 0xffff, {0x1, 0x3}}, {0x80, 0x2f9, {0x3, 0x8}}, {0xfffc, 0x93, {0x1, 0x7fff}}, {0x9, 0x6, {0x3, 0x3f}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x20000802}, 0x24000000)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000040), &(0x7f00000000c0)=""/194, 0xc2})

[ 2345.732465] FAULT_INJECTION: forcing a failure.
[ 2345.732465] name failslab, interval 1, probability 0, space 0, times 0
[ 2345.734321] CPU: 1 PID: 11281 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2345.735287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2345.736428] Call Trace:
[ 2345.736808]  dump_stack+0x107/0x167
[ 2345.737318]  should_fail.cold+0x5/0xa
[ 2345.737867]  ? create_object.isra.0+0x3a/0xa30
[ 2345.738501]  should_failslab+0x5/0x20
[ 2345.739026]  kmem_cache_alloc+0x5b/0x310
[ 2345.739598]  create_object.isra.0+0x3a/0xa30
[ 2345.740210]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2345.740925]  kmem_cache_alloc_node+0x169/0x330
[ 2345.741570]  __alloc_skb+0x6d/0x5b0
[ 2345.742078]  alloc_uevent_skb+0x7b/0x210
[ 2345.742638]  kobject_uevent_env+0xce1/0xfd0
[ 2345.743236]  ? software_node_notify+0xf8/0x2f0
[ 2345.743869]  device_del+0xa8f/0x1180
[ 2345.744387]  ? uevent_show+0x390/0x390
[ 2345.744954]  unregister_netdevice_many+0xbb7/0x1490
[ 2345.745649]  ? netdev_pick_tx+0xc70/0xc70
[ 2345.746231]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2345.746960]  ? queue_delayed_work_on+0xb4/0xe0
[ 2345.747591]  ? trace_hardirqs_on+0x5b/0x180
[ 2345.748183]  unregister_netdevice_queue+0x201/0x2c0
[ 2345.748886]  ? unregister_netdevice_many+0x1490/0x1490
[ 2345.749611]  ? linkwatch_fire_event+0x63/0x190
[ 2345.750252]  __tun_detach+0xfc1/0x12b0
[ 2345.750792]  tun_chr_close+0xc4/0x250
[ 2345.751321]  __fput+0x285/0x9f0
[ 2345.751772]  ? __tun_detach+0x12b0/0x12b0
[ 2345.752358]  task_work_run+0xe2/0x1a0
[ 2345.752898]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2345.753580]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2345.754272]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2345.754985] RIP: 0033:0x7fa43fdb1b19
[ 2345.755502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2345.758066] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2345.759112] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2345.760098] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2345.761088] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2345.762070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2345.763047] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:25:38 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4004, 0x0, 0x1f012, r0, 0x0)

15:25:38 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:25:54 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
fstatfs(r0, &(0x7f0000000000)=""/87)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7daf6)

15:25:54 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x40049409, &(0x7f0000001700)={0x0, 0x0})

15:25:54 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x8001}}, './file0\x00'})
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/223, 0xdf})
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:25:54 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x7ffffffff000)

15:25:54 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x400a, 0x0, 0x1f012, r0, 0x0)

15:25:54 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 35)

15:25:54 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:25:54 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 33)

[ 2361.987662] FAULT_INJECTION: forcing a failure.
[ 2361.987662] name failslab, interval 1, probability 0, space 0, times 0
[ 2361.990394] CPU: 1 PID: 11322 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2361.992145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2361.994296] Call Trace:
[ 2361.994987]  dump_stack+0x107/0x167
[ 2361.995913]  should_fail.cold+0x5/0xa
[ 2361.996905]  ? io_wq_create+0xeb/0xc00
[ 2361.997922]  should_failslab+0x5/0x20
[ 2361.998900]  __kmalloc+0x72/0x390
[ 2361.999803]  io_wq_create+0xeb/0xc00
[ 2362.000792]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2362.002086]  ? io_import_iovec+0x1120/0x1120
[ 2362.003214]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2362.004372]  ? __io_req_find_next+0x300/0x300
[ 2362.005530]  ? do_raw_spin_lock+0x121/0x260
[ 2362.006653]  ? rwlock_bug.part.0+0x90/0x90
[ 2362.007741]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2362.008991]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2362.009451] FAULT_INJECTION: forcing a failure.
[ 2362.009451] name failslab, interval 1, probability 0, space 0, times 0
[ 2362.010338]  ? alloc_fd+0x2e7/0x670
[ 2362.010377]  io_uring_setup+0x1fbb/0x2980
[ 2362.010407]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2362.010425]  ? wait_for_completion_io+0x270/0x270
[ 2362.010469]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2362.018471]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2362.019810]  do_syscall_64+0x33/0x40
[ 2362.020792]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2362.022141] RIP: 0033:0x7fd237085b19
[ 2362.023090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2362.027150] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2362.029137] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2362.030976] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2362.032829] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2362.034666] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2362.036506] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2362.038360] CPU: 0 PID: 11307 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2362.039743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2362.041374] Call Trace:
[ 2362.041920]  dump_stack+0x107/0x167
[ 2362.042995]  should_fail.cold+0x5/0xa
[ 2362.043761]  ? create_object.isra.0+0x3a/0xa30
[ 2362.044687]  should_failslab+0x5/0x20
[ 2362.045461]  kmem_cache_alloc+0x5b/0x310
[ 2362.046275]  create_object.isra.0+0x3a/0xa30
[ 2362.047347]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2362.048514]  kmem_cache_alloc_node+0x169/0x330
[ 2362.049629]  __alloc_skb+0x6d/0x5b0
[ 2362.050504]  alloc_uevent_skb+0x7b/0x210
[ 2362.051489]  kobject_uevent_env+0xce1/0xfd0
[ 2362.052536]  ? software_node_notify+0xf8/0x2f0
[ 2362.053641]  device_del+0xa8f/0x1180
[ 2362.054543]  ? uevent_show+0x390/0x390
[ 2362.055483]  unregister_netdevice_many+0xbb7/0x1490
[ 2362.056667]  ? netdev_pick_tx+0xc70/0xc70
[ 2362.057671]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2362.058931]  ? queue_delayed_work_on+0xb4/0xe0
[ 2362.060015]  ? trace_hardirqs_on+0x5b/0x180
[ 2362.061035]  unregister_netdevice_queue+0x201/0x2c0
[ 2362.062218]  ? unregister_netdevice_many+0x1490/0x1490
[ 2362.063446]  ? linkwatch_fire_event+0x63/0x190
[ 2362.064529]  __tun_detach+0xfc1/0x12b0
[ 2362.065466]  tun_chr_close+0xc4/0x250
[ 2362.066348]  __fput+0x285/0x9f0
[ 2362.067117]  ? __tun_detach+0x12b0/0x12b0
[ 2362.068097]  task_work_run+0xe2/0x1a0
[ 2362.069019]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2362.069969]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2362.070910]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2362.071904] RIP: 0033:0x7fa43fdb1b19
[ 2362.072620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2362.076181] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2362.077651] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2362.079026] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2362.080392] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2362.081772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2362.083133] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:25:54 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4028, 0x0, 0x1f012, r0, 0x0)

15:25:54 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
fcntl$dupfd(r0, 0x0, r1)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/241, 0xf1}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/31, 0x1f}], 0x5, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x40002000)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)

15:25:54 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x54043)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
munmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000)
r2 = socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100))
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000040)=""/19, 0x13})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00')
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x8, 0x1000}}, './file0\x00'})

15:25:55 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x48952, r0, 0xdd22000)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:25:55 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 36)

15:25:55 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:25:55 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4b00, 0x0, 0x1f012, r0, 0x0)

15:25:55 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 34)

[ 2362.258545] FAULT_INJECTION: forcing a failure.
[ 2362.258545] name failslab, interval 1, probability 0, space 0, times 0
[ 2362.260767] CPU: 0 PID: 11338 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2362.262001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2362.263431] Call Trace:
[ 2362.263895]  dump_stack+0x107/0x167
[ 2362.264522]  should_fail.cold+0x5/0xa
[ 2362.265189]  ? create_object.isra.0+0x3a/0xa30
[ 2362.265775] FAULT_INJECTION: forcing a failure.
[ 2362.265775] name failslab, interval 1, probability 0, space 0, times 0
[ 2362.265998]  should_failslab+0x5/0x20
[ 2362.269006]  kmem_cache_alloc+0x5b/0x310
[ 2362.269719]  create_object.isra.0+0x3a/0xa30
[ 2362.270485]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2362.271368]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 2362.272248]  ? alloc_uevent_skb+0x7b/0x210
[ 2362.272994]  __alloc_skb+0xb1/0x5b0
[ 2362.273629]  alloc_uevent_skb+0x7b/0x210
[ 2362.274331]  kobject_uevent_env+0xce1/0xfd0
[ 2362.275069]  ? software_node_notify+0xf8/0x2f0
[ 2362.275851]  device_del+0xa8f/0x1180
[ 2362.276495]  ? uevent_show+0x390/0x390
[ 2362.277490]  unregister_netdevice_many+0xbb7/0x1490
[ 2362.278748]  ? netdev_pick_tx+0xc70/0xc70
[ 2362.279798]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2362.281081]  ? queue_delayed_work_on+0xb4/0xe0
[ 2362.282045]  ? trace_hardirqs_on+0x5b/0x180
[ 2362.282946]  unregister_netdevice_queue+0x201/0x2c0
[ 2362.284006]  ? unregister_netdevice_many+0x1490/0x1490
[ 2362.285129]  ? linkwatch_fire_event+0x63/0x190
[ 2362.286136]  __tun_detach+0xfc1/0x12b0
[ 2362.286988]  tun_chr_close+0xc4/0x250
[ 2362.287810]  __fput+0x285/0x9f0
[ 2362.288502]  ? __tun_detach+0x12b0/0x12b0
[ 2362.289389]  task_work_run+0xe2/0x1a0
[ 2362.290189]  exit_to_user_mode_prepare+0x1cc/0x1e0
[ 2362.291239]  syscall_exit_to_user_mode+0x38/0x1d0
[ 2362.292260]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2362.293364] RIP: 0033:0x7fa43fdb1b19
[ 2362.294169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2362.298059] RSP: 002b:00007fa43d327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
[ 2362.299683] RAX: 0000000000000003 RBX: 00007fa43fec4f60 RCX: 00007fa43fdb1b19
[ 2362.301200] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[ 2362.302716] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2362.304223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2362.305737] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
[ 2362.307278] CPU: 1 PID: 11344 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2362.308830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2362.310617] Call Trace:
[ 2362.311212]  dump_stack+0x107/0x167
[ 2362.312028]  should_fail.cold+0x5/0xa
[ 2362.312868]  ? create_object.isra.0+0x3a/0xa30
[ 2362.313857]  should_failslab+0x5/0x20
[ 2362.314676]  kmem_cache_alloc+0x5b/0x310
[ 2362.315549]  create_object.isra.0+0x3a/0xa30
[ 2362.316486]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2362.317595]  __kmalloc+0x16e/0x390
[ 2362.318363]  io_wq_create+0xeb/0xc00
[ 2362.319173]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2362.320263]  ? io_import_iovec+0x1120/0x1120
[ 2362.321216]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2362.322173]  ? __io_req_find_next+0x300/0x300
[ 2362.323128]  ? do_raw_spin_lock+0x121/0x260
[ 2362.324045]  ? rwlock_bug.part.0+0x90/0x90
[ 2362.324963]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2362.325996]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2362.327117]  ? alloc_fd+0x2e7/0x670
[ 2362.327903]  io_uring_setup+0x1fbb/0x2980
[ 2362.328813]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2362.329896]  ? wait_for_completion_io+0x270/0x270
[ 2362.330952]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2362.332079]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2362.333210]  do_syscall_64+0x33/0x40
[ 2362.334006]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2362.335101] RIP: 0033:0x7fd237085b19
[ 2362.335897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2362.339838] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2362.341476] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2362.343001] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2362.344531] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2362.346068] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2362.347600] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:26:11 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2000001, 0x300)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000040)={0x3ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r1=>0x0}], 0x6, "ffeb6e5d1d6825"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001040)={r1, 0x0, "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", "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"})

15:26:11 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r1, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:26:11 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x40086602, &(0x7f0000001700)={0x0, 0x0})

15:26:11 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:26:11 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x7fffdf006000, 0x0, 0x1f012, r0, 0x0)

15:26:11 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0) (fail_nth: 37)

15:26:11 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 35)

15:26:11 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
read$usbmon(r0, 0x0, 0xf0ffffff7f0000)

15:26:11 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2378.558975] FAULT_INJECTION: forcing a failure.
[ 2378.558975] name failslab, interval 1, probability 0, space 0, times 0
[ 2378.562633] CPU: 0 PID: 11373 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2378.564120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2378.565899] Call Trace:
[ 2378.566467]  dump_stack+0x107/0x167
[ 2378.567252]  should_fail.cold+0x5/0xa
[ 2378.568067]  ? create_object.isra.0+0x3a/0xa30
[ 2378.569053]  should_failslab+0x5/0x20
[ 2378.569870]  kmem_cache_alloc+0x5b/0x310
[ 2378.570751]  create_object.isra.0+0x3a/0xa30
[ 2378.571698]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2378.572789]  __kmalloc+0x16e/0x390
[ 2378.573573]  io_wq_create+0xeb/0xc00
[ 2378.574381]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2378.575473]  ? io_import_iovec+0x1120/0x1120
[ 2378.576418]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2378.577385]  ? __io_req_find_next+0x300/0x300
[ 2378.578338]  ? do_raw_spin_lock+0x121/0x260
[ 2378.579265]  ? rwlock_bug.part.0+0x90/0x90
[ 2378.580192]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2378.581238]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2378.582363]  ? alloc_fd+0x2e7/0x670
[ 2378.583163]  io_uring_setup+0x1fbb/0x2980
[ 2378.584064]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2378.585156]  ? wait_for_completion_io+0x270/0x270
[ 2378.586208]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2378.587333]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2378.588436]  do_syscall_64+0x33/0x40
[ 2378.589246]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2378.590341] RIP: 0033:0x7fd237085b19
[ 2378.591139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2378.595086] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2378.596723] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2378.598292] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2378.599846] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2378.601384] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2378.602912] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:26:11 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x1f012, r0, 0x0)

[ 2378.653077] FAULT_INJECTION: forcing a failure.
[ 2378.653077] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2378.656244] CPU: 1 PID: 11369 Comm: syz-executor.6 Not tainted 5.10.252 #1
[ 2378.657757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2378.659544] Call Trace:
[ 2378.660106]  dump_stack+0x107/0x167
[ 2378.660899]  should_fail.cold+0x5/0xa
[ 2378.661744]  _copy_to_user+0x2e/0x180
[ 2378.662621]  simple_read_from_buffer+0xcc/0x160
[ 2378.663774]  proc_fail_nth_read+0x198/0x230
[ 2378.664836]  ? proc_sessionid_read+0x230/0x230
[ 2378.665898]  ? security_file_permission+0xb1/0xe0
[ 2378.666958]  ? proc_sessionid_read+0x230/0x230
[ 2378.667957]  vfs_read+0x228/0x620
[ 2378.668711]  ksys_read+0x12d/0x260
[ 2378.669494]  ? vfs_write+0xb10/0xb10
[ 2378.670306]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2378.671439]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2378.672557]  do_syscall_64+0x33/0x40
[ 2378.673360]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2378.674443] RIP: 0033:0x7fa43fd6469c
[ 2378.675225] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2378.679067] RSP: 002b:00007fa43d327170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2378.680673] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa43fd6469c
[ 2378.682204] RDX: 000000000000000f RSI: 00007fa43d3271e0 RDI: 0000000000000008
[ 2378.683730] RBP: 00007fa43d3271d0 R08: 0000000000000000 R09: 0000000000000000
[ 2378.685258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2378.686767] R13: 00007ffd2105230f R14: 00007fa43d327300 R15: 0000000000022000
15:26:11 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup3(r1, r0, 0x0)

15:26:11 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000040)=0x8, 0x3)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x40, 0x1)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x1287a0)
pipe(&(0x7f00000000c0))

15:26:11 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x315261)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000100)=""/202, 0xca}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}], 0x20}, 0x10002)
r2 = getpid()
syz_open_procfs$namespace(r2, &(0x7f00000005c0)='ns/ipc\x00')
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x100010, r3, 0xa6f95000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000001000000180067fa305ae9d17fb85d1139f79b0166160000", @ANYRES32=<r4=>r3, @ANYBLOB="03000000000000002e2f66696c653000"])
r5 = getpid()
syz_open_procfs$namespace(r5, &(0x7f00000005c0)='ns/ipc\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
r7 = getpid()
syz_open_procfs$namespace(r7, &(0x7f00000005c0)='ns/ipc\x00')
r8 = getpid()
syz_open_procfs$namespace(r8, &(0x7f00000005c0)='ns/ipc\x00')
r9 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r9, 0xfffff000)
kcmp(r7, r8, 0x6, r9, r6)

15:26:11 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x1f012, r0, 0x0)

15:26:11 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:26:11 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 36)

15:26:11 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x0)

[ 2378.838509] FAULT_INJECTION: forcing a failure.
[ 2378.838509] name failslab, interval 1, probability 0, space 0, times 0
[ 2378.840926] CPU: 1 PID: 11397 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2378.842444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2378.844255] Call Trace:
[ 2378.844833]  dump_stack+0x107/0x167
[ 2378.845643]  should_fail.cold+0x5/0xa
[ 2378.846473]  ? create_object.isra.0+0x3a/0xa30
[ 2378.847467]  should_failslab+0x5/0x20
[ 2378.848288]  kmem_cache_alloc+0x5b/0x310
[ 2378.849181]  ? io_wq_create+0x114/0xc00
[ 2378.850047]  create_object.isra.0+0x3a/0xa30
[ 2378.851000]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2378.852105]  kmem_cache_alloc_node_trace+0x16d/0x340
[ 2378.853216]  io_wq_create+0x6ef/0xc00
[ 2378.854049]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2378.855149]  ? io_import_iovec+0x1120/0x1120
[ 2378.856102]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2378.857081]  ? __io_req_find_next+0x300/0x300
[ 2378.858046]  ? do_raw_spin_lock+0x121/0x260
[ 2378.858974]  ? rwlock_bug.part.0+0x90/0x90
[ 2378.859894]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2378.860941]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2378.862081]  ? alloc_fd+0x2e7/0x670
[ 2378.862876]  io_uring_setup+0x1fbb/0x2980
[ 2378.863775]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2378.864869]  ? wait_for_completion_io+0x270/0x270
[ 2378.865943]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2378.867089]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2378.868233]  do_syscall_64+0x33/0x40
[ 2378.869054]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2378.870168] RIP: 0033:0x7fd237085b19
[ 2378.870987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2378.875066] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2378.876738] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2378.878295] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2378.879839] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2378.881400] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2378.882943] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:26:27 executing program 4:
set_tid_address(&(0x7f0000000000))
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x8013, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:26:27 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x40087602, &(0x7f0000001700)={0x0, 0x0})

15:26:27 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x2)

[ 2395.077288] FAULT_INJECTION: forcing a failure.
[ 2395.077288] name failslab, interval 1, probability 0, space 0, times 0
[ 2395.079762] CPU: 1 PID: 11411 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2395.081240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2395.082983] Call Trace:
[ 2395.083544]  dump_stack+0x107/0x167
[ 2395.084315]  should_fail.cold+0x5/0xa
[ 2395.085119]  ? __io_uring_add_tctx_node+0x15c/0x520
[ 2395.086176]  should_failslab+0x5/0x20
[ 2395.086981]  kmem_cache_alloc_trace+0x55/0x320
[ 2395.087946]  __io_uring_add_tctx_node+0x15c/0x520
[ 2395.088964]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2395.090079]  ? alloc_fd+0x2e7/0x670
[ 2395.090854]  io_uring_setup+0x1fbb/0x2980
[ 2395.091734]  ? __do_sys_io_uring_enter+0x1890/0x1890
15:26:27 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x2040)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x401}}, './file0\x00'})
dup3(r0, r1, 0x80000)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)
read$usbmon(r0, 0x0, 0xfffffffffffffe3f)

15:26:27 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8fffc, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x1772d)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:26:27 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x1f012, r0, 0x0)

15:26:27 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 37)

15:26:27 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)

[ 2395.092796]  ? wait_for_completion_io+0x270/0x270
[ 2395.094071]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2395.095225]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2395.096314]  do_syscall_64+0x33/0x40
[ 2395.097097]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2395.098191] RIP: 0033:0x7fd237085b19
[ 2395.098975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2395.102862] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2395.104470] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2395.105978] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2395.107482] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2395.108988] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2395.110502] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:26:28 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2400, 0x1e3)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000140)={{0xcc, 0x3, 0x1f, 0x3cd, 0xd7, 0xffffffff, 0xdb, 0xff}, "b53bb774f2042babe6845ed6891700a54074c5101e612ae16a45e57fbdd9b929daad8279cd39ef7709f84f68bc2abfa6d86e1e2e1126c4d3dc7a1050f621bded4cb1a55387102b45794118ba55e234d32108e4e5f50293c2aeadef4159591bb701a111b5fc674296b6ec4cef5a50ab6e32519f7693ba21613d5ef9698d6fe93a3b68cb7c1780eef111c4be38c26805c29218010adf5d5949b7a93582b0b38ec1b23459d7f68418f11105e26069aac6da3ef9ec52fd3cc07bae65eb23d81e992b82f191021a71ccdedec1aab5a4f9adf2cb8120ed532919319e6605a1498f45ee668910", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x703)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)
signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8]}, 0x8, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x240180, 0x0)
ioctl$MON_IOCQ_URB_LEN(r4, 0x9201)
creat(&(0x7f00000000c0)='./file0\x00', 0x84)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r5, 0xfffff000)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x901003, 0x0)
fcntl$setlease(r5, 0x400, 0x1)

15:26:28 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000077cb45696aa63d2f4901caf2b2634301d2cda54edc271a6184cdf7c1bdf791354d80b6b57c948a420c3ba112239206aed4debcd83425fe4a85a43a40b81611c8a9ed8bed064be6b76b646c0ea89e806af6b36e1d1026789de7340ac9422803071a719331fa5f66dd189dad6c81e9c3c19fe44ac78bc8fdbafaa47f8409c5559cc444a0c907c09", @ANYRES32=<r1=>r0, @ANYBLOB="02000000000000002e2f66696c653000"])
r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x82)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
openat(r2, &(0x7f00000000c0)='./file0\x00', 0x440f00, 0xeb)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:26:28 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x1f012, r0, 0x0)

15:26:28 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200000)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0)

15:26:28 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 38)

15:26:28 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)

[ 2395.286585] FAULT_INJECTION: forcing a failure.
[ 2395.286585] name failslab, interval 1, probability 0, space 0, times 0
[ 2395.289059] CPU: 0 PID: 11441 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2395.290523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2395.292263] Call Trace:
[ 2395.292820]  dump_stack+0x107/0x167
[ 2395.293599]  should_fail.cold+0x5/0xa
[ 2395.294421]  ? create_object.isra.0+0x3a/0xa30
[ 2395.295383]  should_failslab+0x5/0x20
[ 2395.296186]  kmem_cache_alloc+0x5b/0x310
[ 2395.297051]  create_object.isra.0+0x3a/0xa30
[ 2395.297984]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2395.299057]  kmem_cache_alloc_trace+0x151/0x320
[ 2395.300049]  __io_uring_add_tctx_node+0x15c/0x520
[ 2395.301075]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2395.302203]  ? alloc_fd+0x2e7/0x670
[ 2395.302986]  io_uring_setup+0x1fbb/0x2980
[ 2395.303867]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2395.304933]  ? wait_for_completion_io+0x270/0x270
[ 2395.305993]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2395.307112]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2395.308202]  do_syscall_64+0x33/0x40
[ 2395.308991]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2395.310077] RIP: 0033:0x7fd237085b19
[ 2395.310857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2395.314762] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2395.316364] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2395.317864] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2395.319363] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2395.320856] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2395.322365] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:26:28 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000009, 0x1f012, r0, 0x3000)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:26:44 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x3)

15:26:44 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x1f012, r0, 0x0)

15:26:44 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x4018920a, &(0x7f0000001700)={0x0, 0x0})

15:26:44 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)

15:26:44 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 39)

15:26:44 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="e300000000000000052f66696c653000"])
ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x3)
read$usbmon(r0, 0x0, 0x0)

15:26:44 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x121501, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080))
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x3}, 0x0)
syz_io_uring_setup(0x4556, &(0x7f00000000c0)={0x0, 0xa586, 0x10, 0x3, 0x19c}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x1, &(0x7f00000000c0)="336ab7b948353748332461163e568c38cd622b6c0eeec7aaf799f07fa17447f25c5155f3e1f23e09f6eea01faa4c3abbb0f0aacc4d247a72b36f339f5b1473cee51d73a18df36e587ecae9da43a9cafc17a1af4ddc5781e6f0ef7b06e31f3caea5cd47f6d8e88b69882f5452d897a0ae25dfa67d18ab077bdef340cf556ebf94de8497995d1c81bb3fb8f62ba92b", 0x0, 0x0, 0x1, {0x3, r5}}, 0xd4f)
syz_io_uring_submit(r2, r4, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x5)

15:26:44 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x11d, 0x501000)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xac34f000)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2411.259344] FAULT_INJECTION: forcing a failure.
[ 2411.259344] name failslab, interval 1, probability 0, space 0, times 0
[ 2411.261803] CPU: 1 PID: 11469 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2411.263246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2411.264990] Call Trace:
[ 2411.265580]  dump_stack+0x107/0x167
[ 2411.266354]  should_fail.cold+0x5/0xa
[ 2411.267196]  ? create_object.isra.0+0x3a/0xa30
[ 2411.268338]  should_failslab+0x5/0x20
[ 2411.269289]  kmem_cache_alloc+0x5b/0x310
[ 2411.270325]  create_object.isra.0+0x3a/0xa30
[ 2411.271431]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2411.272721]  kmem_cache_alloc_trace+0x151/0x320
[ 2411.273937]  __io_uring_add_tctx_node+0x15c/0x520
[ 2411.275189]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2411.276457]  ? alloc_fd+0x2e7/0x670
[ 2411.277413]  io_uring_setup+0x1fbb/0x2980
[ 2411.278495]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2411.279793]  ? wait_for_completion_io+0x270/0x270
[ 2411.281064]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2411.282420]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2411.283731]  do_syscall_64+0x33/0x40
[ 2411.284703]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2411.286040] RIP: 0033:0x7fd237085b19
[ 2411.287010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2411.291830] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2411.293674] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2411.295195] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2411.296697] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2411.298208] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2411.299724] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:26:44 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00')

15:26:44 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x28, 0x1f012, r0, 0x0)

15:26:44 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 40)

15:26:44 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:26:44 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

[ 2411.438853] FAULT_INJECTION: forcing a failure.
[ 2411.438853] name failslab, interval 1, probability 0, space 0, times 0
[ 2411.441804] CPU: 0 PID: 11486 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2411.443221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2411.444911] Call Trace:
[ 2411.445466]  dump_stack+0x107/0x167
[ 2411.446207]  should_fail.cold+0x5/0xa
[ 2411.446998]  ? create_object.isra.0+0x3a/0xa30
[ 2411.447921]  should_failslab+0x5/0x20
[ 2411.448692]  kmem_cache_alloc+0x5b/0x310
[ 2411.449546]  create_object.isra.0+0x3a/0xa30
[ 2411.450437]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2411.451466]  kmem_cache_alloc+0x159/0x310
[ 2411.452326]  xas_alloc+0x336/0x440
[ 2411.453034]  xas_create+0x34a/0x10d0
[ 2411.453803]  ? kernel_text_address+0xf2/0x120
[ 2411.454714]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2411.455769]  xas_store+0x8c/0x1c40
[ 2411.456496]  __xa_store+0x164/0x2d0
[ 2411.457392]  ? xa_delete_node+0x280/0x280
[ 2411.458385]  ? trace_hardirqs_on+0x5b/0x180
[ 2411.459247]  xa_store+0x31/0x50
[ 2411.459904]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2411.460883]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2411.461937]  ? alloc_fd+0x2e7/0x670
[ 2411.462677]  io_uring_setup+0x1fbb/0x2980
[ 2411.463515]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2411.464518]  ? wait_for_completion_io+0x270/0x270
[ 2411.465509]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2411.466551]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2411.467578]  do_syscall_64+0x33/0x40
[ 2411.468321]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2411.469355] RIP: 0033:0x7fd237085b19
[ 2411.470104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2411.473753] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2411.475284] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2411.476693] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2411.478158] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2411.479573] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2411.480986] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:26:44 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r1, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={<r2=>0x0}, &(0x7f0000000040)=0xc)
r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
r4 = socket$inet(0x2, 0x5, 0x3ff)
setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f00000001c0)={@broadcast, @loopback, @empty}, 0xc)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x8f3e0000)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0x8, 0xfd, 0x6, 0x0, 0x0, 0x90080, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_config_ext={0x6, 0x1}, 0x1, 0x10001, 0x0, 0x3, 0x0, 0x40, 0x4, 0x0, 0x234e, 0x0, 0x2}, r2, 0x1, 0xffffffffffffffff, 0xbc95655af7b8ec)
sendfile(r0, r0, &(0x7f0000000000)=0xc000000000000000, 0x1)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:26:44 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa00, 0x1f012, r0, 0x0)

15:26:44 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x4)

15:26:44 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1b, 0x400, 0x70bd2d, 0x25dfdbfd, {0x5}, [@nested={0x18, 0x91, 0x0, 0x1, [@typed={0x11, 0x35, 0x0, 0x0, @str='/dev/usbmon#\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040080)

15:26:44 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x200001e, 0x614800)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
dup(0xffffffffffffffff)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x1, 0x40, 0x7fff})
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000180)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/114, 0x72})
r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1000000000000, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001780), 0x20000, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000017c0)={0x0, r3, 0xe1f, 0x701c, 0x1, 0x101})
write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xff, 0x1a, 0x7, 0xe32a, 0xd7d4a4019f17134b, 0x3e, 0x6, 0x379, 0x40, 0xc2, 0x7, 0x2, 0x38, 0x2, 0x7ff, 0xffff, 0x7}, [{0x1, 0x5, 0x8, 0x2, 0x8, 0x100000001, 0x3, 0xe5b0}, {0x70000001, 0x5, 0xa19, 0x9, 0x7ff, 0x5, 0x4, 0x7}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x15b0)
ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x3)
fallocate(r0, 0x0, 0x3, 0x5)

15:26:59 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x48, 0x169042)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:26:59 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2800, 0x1f012, r0, 0x0)

15:26:59 executing program 7:
r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xe8, 0x2, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x54, 0x1, 0x1d}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x2, 0x5, 0x5f, 0x8, 0x2}, 0x34, &(0x7f00000000c0)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "1fa3d85b2b195712ec4459a8c635f5c6"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0xd9, 0x0, 0x5, [0xc0c0, 0xfffff0, 0xc030]}]}, 0x6, [{0x5, &(0x7f0000000100)=@string={0x5, 0x3, "6d02af"}}, {0x82, &(0x7f0000000140)=@string={0x82, 0x3, "d2f484aa4d07f1b63bb919159946edc2dc2bb29345613703e7f0288f881af4d7acedc72d4b4ff20c7ac95e503011b33b76167114b37f5d40e00f6e857602b533fdeec25dbc5fec1301f855fedfb1d2cb19d6ff5f5e00d8aa72eb690bd38e75988c8cb4a029bf3027667584d71a667eaed06683a9981ffb956af89f4d57faa1f8"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x408}}]})
syz_usb_control_io(r0, 0xfffffffffffffffd, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x20, 0x17, 0xb, "9cb550f92a484b9dd38f77"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xea}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x40, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xfff9}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x39}, &(0x7f0000000540)={0x40, 0xb, 0x2, "6bdd"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @random="90e1b3a1fce0"}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, 'YR'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1}})
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x2a2a40)
read$usbmon(r1, 0x0, 0x0)

15:26:59 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

[ 2426.658195] udc-core: couldn't find an available UDC or it's busy
[ 2426.659902] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
15:26:59 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x4020940d, &(0x7f0000001700)={0x0, 0x0})

15:26:59 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:26:59 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 41)

15:26:59 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x5)

[ 2426.692290] FAULT_INJECTION: forcing a failure.
[ 2426.692290] name failslab, interval 1, probability 0, space 0, times 0
[ 2426.694617] CPU: 1 PID: 11531 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2426.695952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2426.697539] Call Trace:
[ 2426.698172]  dump_stack+0x107/0x167
[ 2426.698884]  should_fail.cold+0x5/0xa
[ 2426.699618]  ? xas_alloc+0x336/0x440
[ 2426.700317]  should_failslab+0x5/0x20
[ 2426.701210]  kmem_cache_alloc+0x5b/0x310
[ 2426.702177]  xas_alloc+0x336/0x440
[ 2426.702994]  xas_create+0x34a/0x10d0
[ 2426.703864]  ? kernel_text_address+0xf2/0x120
[ 2426.704889]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2426.706122]  xas_store+0x8c/0x1c40
[ 2426.706948]  __xa_store+0x164/0x2d0
[ 2426.707784]  ? xa_delete_node+0x280/0x280
[ 2426.708738]  ? trace_hardirqs_on+0x5b/0x180
[ 2426.709745]  xa_store+0x31/0x50
[ 2426.710523]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2426.711648]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2426.712842]  ? alloc_fd+0x2e7/0x670
[ 2426.713715]  io_uring_setup+0x1fbb/0x2980
[ 2426.714678]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2426.715835]  ? wait_for_completion_io+0x270/0x270
[ 2426.716964]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2426.718160]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2426.719242]  do_syscall_64+0x33/0x40
[ 2426.719981]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2426.720940] RIP: 0033:0x7fd237085b19
[ 2426.721639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2426.725014] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2426.726421] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2426.727743] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2426.729048] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2426.730370] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2426.731671] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:26:59 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, 0x6, &(0x7f00000014c0)=[{&(0x7f00000000c0)="102531164af122134551a86ffe61915fb68e5a0864df911d27e16b42741a0b88584549b59a8928bd710096d8a7ab5e4060c73cf5bc545b46c8e1d89c5e741f042501dc51727b4fb6aab69bb678ca293c65470e3eb90a3664b56ad793bc441ca5ba777f8a136c08e666a7db6d6e2db837c8b060be38b0da3c41a3c0908abfc42d8f69", 0x82, 0x3}, {&(0x7f0000000180)="9488ba3e52307b4610e707f8e1beb3f3a1391f529c3cefe4facc64b79ed7186813a950e5b93707bbed7ef0e910cf5a39ab5e00b5975018913dfc89c2df0f07f64d1f7151d07c59e18d59c8affedb4ac7e5dad9ee9ec74909a3e9e0262585a523e9fe1b6d19d702691116f34996d46874d7dac9c9931e393c65665cbb58e4f86d1f00c0a8735fbfa78ccbcea125b665edfe85fedd40", 0x95, 0xfffffffffffffffa}, {&(0x7f0000000240)="2d08fa029120c2f53fe78d96c0e9d8489cd1521754e97a7478760c92038f0114e9ba947ff92819c709c71bfa3dda93986e5278348b003a948946f42866765bd34476922dbb3a61264cef30fb06a48d55da306cbfbe320503bfeaacfe877d2a7e7d2badbabcdb7826e665fc6cd3c890e85ac5828b680ea7e2e3596535e2cff3bf1c5b95f844effd4560435bc81cc1597744b4c70085bbcdf382e8aa93beaacb0733", 0xa1, 0x40}, {&(0x7f0000000300)="2aef190fcbd519d97bf5bb253dc75f58c70915166e9f095453d95b25754baffecdab06565191519bb7ebc11a304941120868f1e1b11557f75c2e3d6f0046b7145f6984ed9de4df137ddd1f5e056247feebbe72cada6e525f9763fb0be2a0bb1e3d62a022aa01ca8fa1f7d139bc50617c26cbd2721f8b8f42c6659526e46642074405364f12d1a69959311dff52ea4919ec4d1188ccb5abb3a420a48962ccf33fd44e30cb56edf06b58fd6f30556dafa53579b1a02db5124b31039766dd63431fb1e9f343d286c5460d85571a4f972b0c67", 0xd1, 0x100000000}, {&(0x7f0000000400)="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", 0x1000, 0x1f}, {&(0x7f0000001400)="702057e30a38717edfc26342fb463ee474c7bbccf915bdf28e9861d636f1039c873b894cccd6824f541985c6af80c9706d0d56bfe04e38368ee9251eb899e0cbd8bb1bc29708bbcbbc59cb2c63be89eaa585a43658e695f0ecad32c4c293392c30861c4d1205bbee649e59a9f3e119d668ffd828515798b03a685e55f8893c96a7fe5d01ec9ed066de91bce8c5f3a5c29bf373f0f9fbe36fe5de6044eb86bc8478771828d83eb3ec556a", 0xaa, 0xfffffffffffffffb}], 0x9404, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYRESDEC=0xee00, @ANYBLOB="2c636f84746578743d73797361646d5f752c7365636c6162656c2c00"])

15:26:59 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x8, 0x2010, 0xffffffffffffffff, 0x0)

15:26:59 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x1f012, r0, 0x0)

15:26:59 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x80000, 0x1f012, r0, 0x0)

15:26:59 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 42)

15:26:59 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:26:59 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x400000, 0x1f012, r0, 0x0)

15:26:59 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xec0, 0x10380)
ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x8001)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x515ca)

[ 2426.882481] FAULT_INJECTION: forcing a failure.
[ 2426.882481] name failslab, interval 1, probability 0, space 0, times 0
[ 2426.884480] CPU: 1 PID: 11549 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2426.885659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2426.887041] Call Trace:
[ 2426.887494]  dump_stack+0x107/0x167
[ 2426.888118]  should_fail.cold+0x5/0xa
[ 2426.888763]  ? create_object.isra.0+0x3a/0xa30
[ 2426.889542]  should_failslab+0x5/0x20
[ 2426.890181]  kmem_cache_alloc+0x5b/0x310
[ 2426.890862]  ? mark_held_locks+0x9e/0xe0
[ 2426.891543]  create_object.isra.0+0x3a/0xa30
[ 2426.892283]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2426.893127]  kmem_cache_alloc+0x159/0x310
[ 2426.893827]  xas_alloc+0x336/0x440
[ 2426.894420]  xas_create+0x34a/0x10d0
[ 2426.895039]  ? kernel_text_address+0xf2/0x120
[ 2426.895781]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2426.896645]  xas_store+0x8c/0x1c40
[ 2426.897242]  __xa_store+0x164/0x2d0
[ 2426.897856]  ? xa_delete_node+0x280/0x280
[ 2426.898551]  ? trace_hardirqs_on+0x5b/0x180
[ 2426.899266]  xa_store+0x31/0x50
[ 2426.899810]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2426.900609]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2426.901476]  ? alloc_fd+0x2e7/0x670
[ 2426.902125]  io_uring_setup+0x1fbb/0x2980
[ 2426.902818]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2426.903653]  ? wait_for_completion_io+0x270/0x270
[ 2426.904471]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2426.905344]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2426.906193]  do_syscall_64+0x33/0x40
[ 2426.906785]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2426.907593] RIP: 0033:0x7fd237085b19
[ 2426.908190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2426.911096] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2426.912300] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2426.913426] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2426.914566] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2426.915686] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2426.916808] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2427.185963] udc-core: couldn't find an available UDC or it's busy
[ 2427.187675] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
15:27:16 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x1f012, r0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x5e8e2)

15:27:16 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x80086601, &(0x7f0000001700)={0x0, 0x0})

15:27:16 executing program 7:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40000, 0x1e1)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
read$usbmon(r0, 0x0, 0x0)

15:27:16 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x200, 0x0)
fadvise64(r0, 0x9, 0x7, 0x1)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x3ae3)

15:27:16 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x6)

15:27:16 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x1f012, r0, 0x0)

15:27:16 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 43)

15:27:16 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)

[ 2443.852289] FAULT_INJECTION: forcing a failure.
[ 2443.852289] name failslab, interval 1, probability 0, space 0, times 0
[ 2443.853975] CPU: 0 PID: 11577 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2443.854969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2443.856149] Call Trace:
[ 2443.856530]  dump_stack+0x107/0x167
[ 2443.857057]  should_fail.cold+0x5/0xa
[ 2443.857607]  ? xas_alloc+0x336/0x440
[ 2443.858150]  should_failslab+0x5/0x20
[ 2443.858693]  kmem_cache_alloc+0x5b/0x310
[ 2443.859301]  xas_alloc+0x336/0x440
[ 2443.859808]  xas_create+0x34a/0x10d0
[ 2443.860350]  ? kernel_text_address+0xf2/0x120
[ 2443.860996]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2443.861762]  xas_store+0x8c/0x1c40
[ 2443.862280]  __xa_store+0x164/0x2d0
[ 2443.862796]  ? xa_delete_node+0x280/0x280
[ 2443.863394]  ? trace_hardirqs_on+0x5b/0x180
[ 2443.864013]  xa_store+0x31/0x50
[ 2443.864488]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2443.865180]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2443.865929]  ? alloc_fd+0x2e7/0x670
[ 2443.866457]  io_uring_setup+0x1fbb/0x2980
[ 2443.867055]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2443.867781]  ? wait_for_completion_io+0x270/0x270
[ 2443.868491]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2443.869240]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2443.869982]  do_syscall_64+0x33/0x40
[ 2443.870519]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2443.871245] RIP: 0033:0x7fd237085b19
[ 2443.871784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2443.874427] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2443.875519] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2443.876554] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2443.877562] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2443.878614] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2443.879638] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:27:16 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x1f012, r0, 0x0)

15:27:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x601, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0xe}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004088)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x721542)
ioctl$MON_IOCQ_URB_LEN(r5, 0x9201)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2)

15:27:16 executing program 4:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f00000001c0)={0x80, 0x40, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x80)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0x5, 0x4)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x8, 0x2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x7daf6)

15:27:16 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)

15:27:16 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x7)

15:27:16 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000000, 0x1f012, r0, 0x0)

15:27:16 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 44)

[ 2444.079895] FAULT_INJECTION: forcing a failure.
[ 2444.079895] name failslab, interval 1, probability 0, space 0, times 0
[ 2444.081490] CPU: 0 PID: 11605 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2444.082412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2444.083501] Call Trace:
[ 2444.083847]  dump_stack+0x107/0x167
[ 2444.084332]  should_fail.cold+0x5/0xa
[ 2444.084835]  ? create_object.isra.0+0x3a/0xa30
[ 2444.085440]  should_failslab+0x5/0x20
[ 2444.085941]  kmem_cache_alloc+0x5b/0x310
[ 2444.086472]  ? mark_held_locks+0x9e/0xe0
[ 2444.087003]  create_object.isra.0+0x3a/0xa30
[ 2444.087576]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2444.088248]  kmem_cache_alloc+0x159/0x310
[ 2444.088794]  xas_alloc+0x336/0x440
[ 2444.089255]  xas_create+0x34a/0x10d0
[ 2444.089750]  ? kernel_text_address+0xf2/0x120
[ 2444.090330]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2444.091013]  xas_store+0x8c/0x1c40
[ 2444.091485]  __xa_store+0x164/0x2d0
[ 2444.091958]  ? xa_delete_node+0x280/0x280
[ 2444.092519]  ? trace_hardirqs_on+0x5b/0x180
[ 2444.093092]  xa_store+0x31/0x50
[ 2444.093528]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2444.094169]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2444.094846]  ? alloc_fd+0x2e7/0x670
[ 2444.095331]  io_uring_setup+0x1fbb/0x2980
[ 2444.095886]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2444.096553]  ? wait_for_completion_io+0x270/0x270
[ 2444.097189]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2444.097872]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2444.098542]  do_syscall_64+0x33/0x40
[ 2444.099018]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2444.099686] RIP: 0033:0x7fd237085b19
[ 2444.100165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2444.102583] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2444.103566] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2444.104495] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2444.105421] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2444.106347] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2444.107272] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:27:31 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xeb, 0x597340)
read$usbmon(r0, 0x0, 0x0)

15:27:31 executing program 1:
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x759})
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)

15:27:31 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x80087601, &(0x7f0000001700)={0x0, 0x0})

15:27:31 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa000000, 0x1f012, r0, 0x0)

15:27:31 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x50, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:27:31 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)

15:27:31 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 45)

15:27:31 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x8)

[ 2459.104438] FAULT_INJECTION: forcing a failure.
[ 2459.104438] name failslab, interval 1, probability 0, space 0, times 0
[ 2459.105821] CPU: 0 PID: 11623 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2459.106632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2459.107585] Call Trace:
[ 2459.107894]  dump_stack+0x107/0x167
[ 2459.108313]  should_fail.cold+0x5/0xa
[ 2459.108748]  ? xas_alloc+0x336/0x440
[ 2459.109176]  should_failslab+0x5/0x20
[ 2459.109614]  kmem_cache_alloc+0x5b/0x310
[ 2459.110089]  xas_alloc+0x336/0x440
[ 2459.110495]  xas_create+0x34a/0x10d0
[ 2459.110927]  ? kernel_text_address+0xf2/0x120
[ 2459.111447]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2459.112052]  xas_store+0x8c/0x1c40
[ 2459.112472]  __xa_store+0x164/0x2d0
[ 2459.112894]  ? xa_delete_node+0x280/0x280
[ 2459.113377]  ? trace_hardirqs_on+0x5b/0x180
[ 2459.113882]  xa_store+0x31/0x50
[ 2459.114266]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2459.114824]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2459.115421]  ? alloc_fd+0x2e7/0x670
[ 2459.115844]  io_uring_setup+0x1fbb/0x2980
[ 2459.116327]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2459.116909]  ? wait_for_completion_io+0x270/0x270
[ 2459.117473]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2459.118083]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2459.118673]  do_syscall_64+0x33/0x40
[ 2459.119103]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2459.119691] RIP: 0033:0x7fd237085b19
[ 2459.120118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2459.122225] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2459.123097] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2459.123910] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2459.124723] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2459.125533] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2459.126360] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:27:32 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[r1]}, 0x1)

15:27:32 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0xff, 0x101)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, &(0x7f00000000c0)="be21a03d7a764a1467e836be8b7e600dd36dbf2e218d9ac00b88a4dc8526ee281884d4512151a86f14be76f322e2171d3478d25173e228dba6c3a88582c18c81fc46b0cf7b89b715742ef2305932d7efb208aad3d6deee6d5a67c0ad47be6a69a4e9cd91232c0c", 0x3, 0x0, 0x1, {0x3}}, 0x1ebc)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x10013d)

15:27:32 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xfffffffffffffffc, 0x610000)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:27:32 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 46)

15:27:32 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x28000000, 0x1f012, r0, 0x0)

15:27:32 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)

[ 2459.218859] FAULT_INJECTION: forcing a failure.
[ 2459.218859] name failslab, interval 1, probability 0, space 0, times 0
[ 2459.220594] CPU: 1 PID: 11649 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2459.221628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2459.222864] Call Trace:
[ 2459.223265]  dump_stack+0x107/0x167
[ 2459.223828]  should_fail.cold+0x5/0xa
[ 2459.224446]  ? create_object.isra.0+0x3a/0xa30
[ 2459.225120]  should_failslab+0x5/0x20
[ 2459.225693]  kmem_cache_alloc+0x5b/0x310
[ 2459.226337]  ? mark_held_locks+0x9e/0xe0
[ 2459.226938]  create_object.isra.0+0x3a/0xa30
[ 2459.227586]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2459.228338]  kmem_cache_alloc+0x159/0x310
[ 2459.228981]  xas_alloc+0x336/0x440
[ 2459.229526]  xas_create+0x34a/0x10d0
[ 2459.230105]  ? kernel_text_address+0xf2/0x120
[ 2459.230767]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2459.231566]  xas_store+0x8c/0x1c40
[ 2459.232115]  __xa_store+0x164/0x2d0
[ 2459.232658]  ? xa_delete_node+0x280/0x280
[ 2459.233279]  ? trace_hardirqs_on+0x5b/0x180
[ 2459.233924]  xa_store+0x31/0x50
[ 2459.234423]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2459.235147]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2459.235924]  ? alloc_fd+0x2e7/0x670
[ 2459.236467]  io_uring_setup+0x1fbb/0x2980
[ 2459.237077]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2459.237822]  ? wait_for_completion_io+0x270/0x270
[ 2459.238549]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2459.239323]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2459.240086]  do_syscall_64+0x33/0x40
[ 2459.240628]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2459.241399] RIP: 0033:0x7fd237085b19
[ 2459.241955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2459.244745] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2459.245888] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2459.246945] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2459.247991] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2459.249038] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2459.250116] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:27:47 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8000000000000, 0x1f012, r0, 0x0)

15:27:47 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffffffff, 0x0)
read$usbmon(0xffffffffffffffff, 0x0, 0x5f)
syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x40183)
syz_open_dev$vcsu(&(0x7f0000000000), 0x75, 0x119042)

15:27:47 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x80089203, &(0x7f0000001700)={0x0, 0x0})

15:27:47 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 47)

15:27:47 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0xa)

15:27:47 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)

15:27:47 executing program 4:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000300)=0x1)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r1, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7daf6)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000000))
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x1, 0x800, 0xfffffffa, 0x0, 0x7})

15:27:47 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xffffffffffffb, 0x1f012, r0, 0x0)

[ 2474.605725] FAULT_INJECTION: forcing a failure.
[ 2474.605725] name failslab, interval 1, probability 0, space 0, times 0
[ 2474.607155] CPU: 1 PID: 11674 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2474.607981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2474.608984] Call Trace:
[ 2474.609306]  dump_stack+0x107/0x167
[ 2474.609741]  should_fail.cold+0x5/0xa
[ 2474.610222]  ? xas_alloc+0x336/0x440
[ 2474.610663]  should_failslab+0x5/0x20
[ 2474.611113]  kmem_cache_alloc+0x5b/0x310
[ 2474.611596]  xas_alloc+0x336/0x440
[ 2474.612032]  xas_create+0x34a/0x10d0
[ 2474.612486]  ? kernel_text_address+0xf2/0x120
[ 2474.613030]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2474.613672]  xas_store+0x8c/0x1c40
[ 2474.614128]  __xa_store+0x164/0x2d0
[ 2474.614559]  ? xa_delete_node+0x280/0x280
[ 2474.615048]  ? trace_hardirqs_on+0x5b/0x180
[ 2474.615584]  xa_store+0x31/0x50
[ 2474.615994]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2474.616601]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2474.617257]  ? alloc_fd+0x2e7/0x670
[ 2474.617712]  io_uring_setup+0x1fbb/0x2980
[ 2474.618218]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2474.618840]  ? wait_for_completion_io+0x270/0x270
[ 2474.619441]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2474.620076]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2474.620718]  do_syscall_64+0x33/0x40
[ 2474.621170]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2474.621792] RIP: 0033:0x7fd237085b19
[ 2474.622255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2474.624502] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2474.625425] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2474.626295] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2474.627157] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2474.628038] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2474.628912] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:27:47 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xfffffffffffffffe, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:27:47 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x400480)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88841, 0x80)
read$usbmon(r0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x81100, 0x33)

15:27:47 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x40000000000000, 0x1f012, r0, 0x0)

15:27:47 executing program 4:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x1020)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x660c)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000008, 0x1f012, r2, 0x3000)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7daf6)

15:27:47 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x7})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
sendfile(r1, r2, 0x0, 0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'})

15:27:47 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000000000000, 0x1f012, r0, 0x0)

15:27:47 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)

15:27:47 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x48)

15:27:47 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 48)

15:27:47 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3000004, 0x10, 0xffffffffffffffff, 0x10000)
syz_io_uring_setup(0x336b, &(0x7f0000000000)={0x0, 0x89e2, 0x10, 0x2, 0x177}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00003fe000/0xc00000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

[ 2474.807277] FAULT_INJECTION: forcing a failure.
[ 2474.807277] name failslab, interval 1, probability 0, space 0, times 0
[ 2474.808847] CPU: 1 PID: 11706 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2474.809697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2474.810688] Call Trace:
[ 2474.811001]  dump_stack+0x107/0x167
[ 2474.811443]  should_fail.cold+0x5/0xa
[ 2474.811903]  ? ___slab_alloc+0x360/0x700
[ 2474.812390]  ? create_object.isra.0+0x3a/0xa30
[ 2474.812930]  should_failslab+0x5/0x20
[ 2474.813393]  kmem_cache_alloc+0x5b/0x310
[ 2474.813893]  create_object.isra.0+0x3a/0xa30
[ 2474.814429]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2474.815058]  kmem_cache_alloc+0x159/0x310
[ 2474.815558]  xas_alloc+0x336/0x440
[ 2474.815995]  xas_create+0x34a/0x10d0
[ 2474.816460]  ? kernel_text_address+0xf2/0x120
[ 2474.817001]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2474.817633]  xas_store+0x8c/0x1c40
[ 2474.818075]  __xa_store+0x164/0x2d0
[ 2474.818507]  ? xa_delete_node+0x280/0x280
[ 2474.819000]  ? trace_hardirqs_on+0x5b/0x180
[ 2474.819517]  xa_store+0x31/0x50
[ 2474.819917]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2474.820484]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2474.821135]  ? alloc_fd+0x2e7/0x670
[ 2474.821578]  io_uring_setup+0x1fbb/0x2980
[ 2474.822083]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2474.822679]  ? wait_for_completion_io+0x270/0x270
[ 2474.823269]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2474.823897]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2474.824511]  do_syscall_64+0x33/0x40
[ 2474.824971]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2474.825576] RIP: 0033:0x7fd237085b19
[ 2474.826044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2474.828244] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2474.829174] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2474.830069] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2474.830948] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2474.831830] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2474.832672] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:27:48 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0xc0045878, &(0x7f0000001700)={0x0, 0x0})

15:27:48 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 49)

[ 2475.453675] FAULT_INJECTION: forcing a failure.
[ 2475.453675] name failslab, interval 1, probability 0, space 0, times 0
[ 2475.456681] CPU: 0 PID: 11717 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2475.458480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2475.460607] Call Trace:
15:27:48 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:27:48 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000000000000, 0x1f012, r0, 0x0)

15:27:48 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/132, 0x84})
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000180), &(0x7f00000001c0)=""/226, 0xe2})

[ 2475.461293]  dump_stack+0x107/0x167
[ 2475.462391]  should_fail.cold+0x5/0xa
[ 2475.463367]  ? xas_alloc+0x336/0x440
[ 2475.464321]  should_failslab+0x5/0x20
[ 2475.465284]  kmem_cache_alloc+0x5b/0x310
[ 2475.466336]  xas_alloc+0x336/0x440
[ 2475.467255]  xas_create+0x34a/0x10d0
[ 2475.468209]  ? kernel_text_address+0xf2/0x120
[ 2475.469375]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2475.470719]  xas_store+0x8c/0x1c40
[ 2475.471643]  __xa_store+0x164/0x2d0
[ 2475.472584]  ? xa_delete_node+0x280/0x280
[ 2475.473647]  ? trace_hardirqs_on+0x5b/0x180
[ 2475.474771]  xa_store+0x31/0x50
15:27:48 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x4c)

[ 2475.475621]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2475.476959]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2475.478318]  ? alloc_fd+0x2e7/0x670
[ 2475.479270]  io_uring_setup+0x1fbb/0x2980
[ 2475.480343]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2475.481644]  ? wait_for_completion_io+0x270/0x270
[ 2475.482922]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2475.484270]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2475.485709]  do_syscall_64+0x33/0x40
[ 2475.486686]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2475.488064] RIP: 0033:0x7fd237085b19
[ 2475.489030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2475.493745] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2475.495614] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2475.497139] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2475.498761] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2475.500293] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2475.501819] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:27:48 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={<r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0xd8, "c3b057e37f7fda"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004cbc0)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r3=>0x0}], 0x7, "9cc3d2f815816e"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={<r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0xd8, "c3b057e37f7fda"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004dbc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}, {r4, r5}], 0x1, "bd96b5f67f5e17"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000100)={r5, 0x0, "03d0b8dac25d2bee95e474900cf8ab4416ccabb14c375b2f70521444b6972fbb4c0c52c12789412dab7029bc31c330870ba2f9990129c35b6428fdd752dce011cc55c954e4a86cca4f820dc16fd913699e5f7043032c6472fafa8ab1783781e1511df9d123a7b99fcd5241e46b1d7dc3cc3b33a7346d6097e8dd4f063a9d641cfb3311ed39474a7daf0792382cd02fbf1e63ad2f01dda19cf8b3d7acc682c28ff9fb26957e74b865a39d11a987ca18f235c0eb0efe2d099530b23fb0e4a4ba5f2c4521a0cde16990f57531723b8fd0b190ced41ee522e68d9b56286c86561afc978dc3b9e453903d5dff97de9137458294ef6dac5163b742237f2cfc122f7b5e", "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"})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
syz_open_dev$usbmon(&(0x7f0000000080), 0x8, 0x10000)

[ 2475.555255] device wlan1 entered promiscuous mode
[ 2475.556520] device wlan1 left promiscuous mode
15:27:48 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x400000000000000, 0x1f012, r0, 0x0)

15:27:48 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 50)

15:27:48 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfffff4e8, 0xe}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "b07ddb50c543f23f5ce460674af0f31b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7ffdb6964b683faf2832eae279800126"}, @NL80211_ATTR_PMK={0x14, 0xfe, "5bb0b8b6a3dd8babc1c6fbab01bb649d"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x23}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r2, 0x9201)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c)
dup2(r3, r2)

[ 2475.682462] FAULT_INJECTION: forcing a failure.
[ 2475.682462] name failslab, interval 1, probability 0, space 0, times 0
[ 2475.684912] CPU: 0 PID: 11745 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2475.686393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2475.688159] Call Trace:
[ 2475.688725]  dump_stack+0x107/0x167
[ 2475.689498]  should_fail.cold+0x5/0xa
[ 2475.690320]  ? xas_alloc+0x336/0x440
[ 2475.691113]  should_failslab+0x5/0x20
[ 2475.691934]  kmem_cache_alloc+0x5b/0x310
[ 2475.692813]  xas_alloc+0x336/0x440
[ 2475.693572]  xas_create+0x34a/0x10d0
[ 2475.694377]  ? kernel_text_address+0xf2/0x120
[ 2475.695341]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2475.696449]  xas_store+0x8c/0x1c40
[ 2475.697217]  __xa_store+0x164/0x2d0
[ 2475.697991]  ? xa_delete_node+0x280/0x280
[ 2475.698884]  ? trace_hardirqs_on+0x5b/0x180
[ 2475.699818]  xa_store+0x31/0x50
[ 2475.700524]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2475.701556]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2475.702679]  ? alloc_fd+0x2e7/0x670
[ 2475.703471]  io_uring_setup+0x1fbb/0x2980
[ 2475.704361]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2475.705438]  ? wait_for_completion_io+0x270/0x270
[ 2475.706500]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2475.707616]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2475.708721]  do_syscall_64+0x33/0x40
[ 2475.709512]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2475.710614] RIP: 0033:0x7fd237085b19
[ 2475.711402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2475.715329] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2475.716945] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2475.718471] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2475.719984] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2475.721494] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2475.723023] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:28:03 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
sendfile(r2, r1, &(0x7f0000000000)=0x2, 0x2)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000e, 0x1f012, r3, 0xfffff000)
dup2(r3, r1)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)

15:28:03 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0xc0045878, &(0x7f0000001700)={0x0, 0x0})

15:28:03 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0)
write$tcp_congestion(r2, &(0x7f0000000980)='bbr\x00', 0x4)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x0)
write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0701007767010000ba00000020000000480300000400000000000000000000002527cb17aa3f3f16f72441acdc6c812abc1991043b06c58061c32206b9e47973147bb6745dd32b81b55816490d13e576f291fc9d3b8f34833aacedd6ed8c7a2a329f51b26db4f1f2407888072e28cd46b1c1defdd5c10f4bfcd0a1f98d81627bf795f51fd6fc3a132342255b2bf7b983aaf34ff7e966ffab9ed561a43b48c5676258491afe453ee69a6406a0efba4de8c3236307a9b3f940ba2158b24c8c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00"/1723], 0x6be)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000240)={&(0x7f0000000100), &(0x7f0000000140)=""/247, 0xf7})

15:28:03 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:28:03 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa00000000000000, 0x1f012, r0, 0x0)

15:28:03 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffff00000101, 0x2)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
fallocate(r1, 0x40, 0xfffffffffffffffa, 0x2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x4})
r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
fcntl$dupfd(r0, 0x406, r2)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:28:03 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x68)

15:28:03 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 51)

[ 2490.338532] FAULT_INJECTION: forcing a failure.
[ 2490.338532] name failslab, interval 1, probability 0, space 0, times 0
[ 2490.340990] CPU: 0 PID: 11753 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2490.342459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2490.344198] Call Trace:
[ 2490.344758]  dump_stack+0x107/0x167
[ 2490.345527]  should_fail.cold+0x5/0xa
[ 2490.346341]  ? xas_alloc+0x336/0x440
[ 2490.347125]  should_failslab+0x5/0x20
[ 2490.347925]  kmem_cache_alloc+0x5b/0x310
[ 2490.348782]  xas_alloc+0x336/0x440
[ 2490.349535]  xas_create+0x34a/0x10d0
[ 2490.350340]  ? kernel_text_address+0xf2/0x120
[ 2490.351287]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2490.352392]  xas_store+0x8c/0x1c40
[ 2490.353155]  __xa_store+0x164/0x2d0
[ 2490.353927]  ? xa_delete_node+0x280/0x280
[ 2490.354818]  ? trace_hardirqs_on+0x5b/0x180
[ 2490.355731]  xa_store+0x31/0x50
[ 2490.356432]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2490.357447]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2490.358556]  ? alloc_fd+0x2e7/0x670
[ 2490.359330]  io_uring_setup+0x1fbb/0x2980
[ 2490.360211]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2490.361273]  ? wait_for_completion_io+0x270/0x270
[ 2490.362309]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2490.363394]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2490.364471]  do_syscall_64+0x33/0x40
[ 2490.365245]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2490.366312] RIP: 0033:0x7fd237085b19
[ 2490.367084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2490.370902] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2490.372607] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2490.374183] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2490.375662] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2490.377123] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2490.378592] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2490.435637] device wlan1 entered promiscuous mode
[ 2490.437548] device wlan1 left promiscuous mode
15:28:16 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x80000000f775a)

15:28:16 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2800000000000000, 0x1f012, r0, 0x0)

15:28:16 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xf, 0x22000)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/28, 0x1c})
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/166, 0xa6})

15:28:16 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"8fa0b174112e433f487ee1ba101c3655", 0x0, <r3=>0x0, {0x800, 0x9}, {0xd3, 0x8f}, 0x9, [0x4a05, 0x8, 0x4, 0x100000000, 0x8, 0x4d, 0x7, 0x2, 0x0, 0x100000001, 0x0, 0x40, 0x5, 0x8ab7, 0x7ff, 0x200]})
mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0xcd398000)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000001c0)={{r2}, r3, 0x12, @inherit={0x80, &(0x7f0000001380)=ANY=[@ANYBLOB="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"]}, @name="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"})
read$usbmon(r0, 0x0, 0x0)

15:28:16 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:28:16 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x6c)

15:28:16 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0xc0109207, &(0x7f0000001700)={0x0, 0x0})

15:28:16 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 52)

[ 2503.749761] FAULT_INJECTION: forcing a failure.
[ 2503.749761] name failslab, interval 1, probability 0, space 0, times 0
[ 2503.752517] CPU: 1 PID: 11795 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2503.754076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2503.755950] Call Trace:
[ 2503.756551]  dump_stack+0x107/0x167
[ 2503.757376]  should_fail.cold+0x5/0xa
[ 2503.758238]  ? ___slab_alloc+0x155/0x700
[ 2503.759171]  ? create_object.isra.0+0x3a/0xa30
[ 2503.760207]  should_failslab+0x5/0x20
[ 2503.761069]  kmem_cache_alloc+0x5b/0x310
[ 2503.761998]  create_object.isra.0+0x3a/0xa30
[ 2503.763022]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2503.764176]  kmem_cache_alloc+0x159/0x310
[ 2503.765145]  xas_alloc+0x336/0x440
[ 2503.765956]  xas_create+0x34a/0x10d0
[ 2503.766840]  ? kernel_text_address+0xf2/0x120
[ 2503.767886]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2503.769106]  xas_store+0x8c/0x1c40
[ 2503.769965]  __xa_store+0x164/0x2d0
[ 2503.770818]  ? xa_delete_node+0x280/0x280
[ 2503.771785]  ? trace_hardirqs_on+0x5b/0x180
[ 2503.772789]  xa_store+0x31/0x50
[ 2503.773562]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2503.774688]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2503.775899]  ? alloc_fd+0x2e7/0x670
15:28:16 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x10cbcb)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7})
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2503.776756]  io_uring_setup+0x1fbb/0x2980
[ 2503.777870]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2503.779045]  ? wait_for_completion_io+0x270/0x270
[ 2503.780197]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2503.781398]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2503.782579]  do_syscall_64+0x33/0x40
[ 2503.783427]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2503.784590] RIP: 0033:0x7fd237085b19
15:28:16 executing program 4:
r0 = msgget(0x3, 0x310)
msgctl$IPC_RMID(r0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r1, 0x0)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7daf6)

[ 2503.785429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2503.789781] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2503.791513] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2503.793133] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2503.794766] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2503.796419] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2503.798034] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2503.816867] device wlan1 entered promiscuous mode
15:28:16 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xfbffffffffff0f00, 0x1f012, r0, 0x0)

15:28:16 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
fadvise64(r0, 0x4, 0xff, 0x2)
read$usbmon(r0, 0x0, 0x0)

[ 2503.861676] device wlan1 left promiscuous mode
15:28:16 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x74)

15:28:16 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xb2100, 0x0)

15:28:16 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 53)

15:28:16 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(&(0x7f0000001cc0)='.\x00', 0x0)
setresuid(0x0, 0x0, 0x0)

[ 2503.985031] FAULT_INJECTION: forcing a failure.
[ 2503.985031] name failslab, interval 1, probability 0, space 0, times 0
[ 2503.987475] CPU: 1 PID: 11825 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2503.988943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2503.990721] Call Trace:
[ 2503.991289]  dump_stack+0x107/0x167
[ 2503.992057]  should_fail.cold+0x5/0xa
[ 2503.992860]  ? xas_alloc+0x336/0x440
[ 2503.993645]  should_failslab+0x5/0x20
[ 2503.994466]  kmem_cache_alloc+0x5b/0x310
[ 2503.995339]  xas_alloc+0x336/0x440
[ 2503.996089]  xas_create+0x34a/0x10d0
[ 2503.996888]  ? kernel_text_address+0xf2/0x120
[ 2503.997833]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2503.998950]  xas_store+0x8c/0x1c40
[ 2503.999721]  __xa_store+0x164/0x2d0
[ 2504.000498]  ? xa_delete_node+0x280/0x280
[ 2504.001370]  ? trace_hardirqs_on+0x5b/0x180
[ 2504.002295]  xa_store+0x31/0x50
[ 2504.003001]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2504.004028]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2504.005135]  ? alloc_fd+0x2e7/0x670
[ 2504.005923]  io_uring_setup+0x1fbb/0x2980
[ 2504.006821]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2504.007902]  ? wait_for_completion_io+0x270/0x270
[ 2504.008945]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2504.010060]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2504.011173]  do_syscall_64+0x33/0x40
[ 2504.011960]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2504.013054] RIP: 0033:0x7fd237085b19
[ 2504.013840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2504.017774] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2504.019405] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2504.020912] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2504.022432] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2504.023930] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2504.025433] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:28:16 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f05b, r0, 0x0)

[ 2504.060913] device wlan1 entered promiscuous mode
15:28:16 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x35)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7f, 0x5045397e6f7efe5a)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001780)={&(0x7f0000001700), &(0x7f0000001740)=""/46, 0x2e})
r2 = getpid()
syz_open_procfs$namespace(r2, &(0x7f00000005c0)='ns/ipc\x00')
sendmsg$nl_generic(r1, &(0x7f00000016c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f00000000c0)={0x1588, 0x3d, 0x8, 0x70bd26, 0x25dfdbff, {0xc}, [@nested={0x239, 0x5f, 0x0, 0x1, [@generic="b099dd18a518c8a95baeecd3c8d02b8cce899579abcd1f1bba2b4c9f5727b8d406b3f228087e37ebbdad3921ce47984fc5a4ce76170ba3a312bf723a12fafac3b96474b68c0b42b19b384b6131067717f989733a109c9ba8525b82f501d49724c299dbdbf8c00a49c9425e844beca38114299c3dc60d17e5fe1f7b3e4c2e5c73c04921a1605ea6cb8701b51a17359eec8b469459fb3d8e8bcf242d31e3531f5f9a23c1a03ffb69", @generic="af0f9346de9d1bb37fd97fe31c6ebb0105bfd0d46d36a2fa5468b2a53768c6432d8a3af59efd962bc616", @typed={0x8, 0x58, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="8b3e4ba6d8c16b63a64b22cd9a49ef63a1c34d6beb39a0b18ad01882bce586a13ef3b456abdc1f0ca7d9365a04bd5926a0376f8c6802770e900bba2c95dba25777fed08c346db377a68d4db36a40c86fa3db6b5ee9c13f0168b492fb5f59fa0e2631413d733f6b10cb1d84a46b53c068e5a445c06dfa38c40e2cf431c0090e1df6b3d380cf3b049bd9bb3d80a5baa733cb3c48439b07c4e6394e189573af26dbc0bc0bcd11d97ca3913046c4f5f5d1ce0c16a51deee4254c86b1934b69fc421950fd6dfdff3dc081834281f16ff110994c77a8d147b792716f47c0eba5f396fbc817ae4a6f39f2ffe30944e8a2374aa51c4d3942773d14422e9e2270dbcdde", @typed={0x8, 0x14, 0x0, 0x0, @pid=r2}, @generic="f75f2db14de4fa3d502eeaf66133e5023e11b9bece5e099e15dbab68628f7e28da25d1dcdb0303aa3fa120b11b5f075ce107a807a7c1236e126233f8de06046e64693f69ec211f81efa7b3dfda8f82a3376b553682"]}, @generic="a93d1fa806fe3d267c0cff87c1abfcf647bbd09ad3ed01a03ff651bc1747b2a4461c1a0dd042eb97b6f4bc2fdc1ee27a3146b4bcaec984f4520e04af665342350e2ed7645b1e821ee66031d61614442474315c23bea81dc8e9fa69c4186f83a4793a12b9de280e0bb99035946ac7e21ea0ab4b3dc3e61ea432e5699d4374937945982ed3965c893fc7d7e5e835c576416f40faac79708f95ea1bcf8bab2c6258c81ea8d0deb2c18d91701b1cb6f7183ed19ae158c313cb4d865ba0b8561925859df243c0cedede62f5ed011917181ed9882f30df190157e1cc72770856b327bc555ba6c2270d339e920b3f2c4e5a50c3bdf66dbc8bde33acb3aeff2013e49324e71d706fdc1bd8153f6a798165ac34bd599544b9fa76d8e52e233b15d4dda6d1596c1f858d8253e01c2c0fcca6cb97f9055796e948ccf8a46564d11feed9c72289a4ad5911e5ce45a3327b560aa66d2f23a094b4a60241ec5817eec96046da0f44b71218fa30214644ae6180f0c0af6e2111253504a9852c6128d99cc6f4b8047efd5199fdc37581fdbebd471919520fbc3973519ebaa23e0f4c42f269b4aee1acb86fec6171ba6d29d82c8691e490b91ca3b432edaa846ae79f4e421de212bf334ecd8ddd438b1e8c000331a85b9973079f4149af8b5582a546ea1e924300a74a51d3db5a57b28cfc3f28bec764beb072fb05f267a689cdfab8ad25903f1b4d32d0f9c3b3eb0be4fa98a83d7041ce8a851b0272adedd596e49d74189740579d1fe8136d941f47b4c03226e65475fe58ecb8747b66952b5a87dd507edf09fe90d70b5b054db20b62908684520e968ca6fc192750917d3a05c8deaecb4e7c40166d43489ab3e429bdf9579fb0745c3c21cb1452e505fcd0613c956a78c7a365f58a3c1ff678ef403b201e57b5bba86ee94b33ba006281b7c890016e249b5b4e613e939dcf7020d9889f40225806aed8221208db2e957e39a468929d44f514880af32e5d935bfcb63efa1c33b90aff01b26b7f8b9173fce8be03f59d47a63bd5de0c3673d7a539cb1d598a2f20e4098470e744fd4d4beaed9ca8cbcad4ea29bc87ce1acce3a528331b3e15d5641ca97dede81428bcd67e38913f9a50ff5796c76b7cc9dbd0508b4fca84e5b78b31b51ae0cc50c82d6eeb001427383b7d997b3154b3937a9b899a34bd66c60a9ed930ccbc8745c7e7e3805fbf1090a79836a2bb74c36d88036c6992797041601378833a9aabb1fd42108bc957e1346c738e1b2e968eea9ae06859dced8e4c6211445e9c6a4d212568c27193a6a0f13d468e82cbf88ef98ccbe631c75bfa0b5878ca088a7201d24843d2b10d319f8e0a839fe1be1cda2521d65fb7c57e52c9138e05a482aa1b1964613ce0281766d4b9faaec20480b0bd188854e97de67cc13db661f84b9218808812924878da699c7d98d493ea302857315fbf06571775d5515bb87ae2d82b834db98e2a921aba8d58f2472f69b13cb5a106ff629cc59243ccf95bf10ace0bbd138a5ca60df4116f0449ce325d6431a02c22852078fd5350f702e1582ca450b986e24112682e7614ec9bdef47dfe8d80087bd2ef645957b9ce18da042c418fc5df35f142007717e45af754d0205983bf1e916157408a8a081ac1e98c731b4f0265017594b363cadeca411a43ef7476a827731aced4242d25434cdc1b28c812b54a1e4820368f39a9d7a7f50b1ef8b64a6cfc27fb6e07883f3f7fe0dc0289312c0a27d32f190213bd42da316a9a0de63a10dd507d1c4835be8974a31cab4fb36abe7a0a0cb10de8eae5d811af5a8926b54ff8336bd0171b8cf48447adb5fd390486c6def8abc0aa1219476f4184d6078817a9b544688d36ee4662f248e2d430c7471503e821a0bb308a723430cf16057e95b9c427c3677f408fe95352a245a82fee780d73bd20c81d25e22c9de0fbbf1c9c2b0a742ea6444b7809455be26513b63cdff90a81a4f3a8b926aea16fa90a6a9630c0400d855cce708bad6eb0edaa4bec8d7d626c67c3c585b33d1be027aeca9eef9baa521a2ad57da371e7ff76b93e8f0bf47a8de5b5d4bd7aee978feb359ab9b687db9aa6d19abd502b2fa5c9aab38c7d87f153503bf5b3cd9a0e729174cc0d7381b01ca84e75ce8639cdd5e72f0ca2d34fe423bc3a730418f66f153a484036a4acd267ac194063afe09c225c5c6ef822a9409c70a6250f946505ca8f225bdbe57ea476fe89bda01febf2eba0f06be95489de5ccf62f0e8f424f6c9929249509bfe80ce9e61f8e7eb6b80c3e8968d9028013c012d03fcd9647c3e83ca9dda8fad7f648a32f61a78de5d0f760b7e0dd62a559d8ee8339c3ebf38ae0c1e1bb4bd3c4196cf13e7c0a11517b86f7b671ef5f2d7ce341ef460183ebd0ad3e28dd66e72adf55fbfb8bbc8670c69c030e034acdf0104d8c82e17705b98efe68df6c2b962fa59d3e59f84ec977e1bd81eb115d0aaf98752b28b2b9212204c882989c945eed5c87cde5856b79c5a0d2ac294dacd82083414e78719b7e9c928424c905680bda1230951e27ebfe0331f3728f0925f7ec4e261a156f1e858bbfe95d9a6c86a201d174725afe5a4ef70688ffbbc2d82af1498a68abbcb97d28a8600d2da00493ad1a627928deb648c11d0467dfd50c35ba8b08eb78946d0f89bc60ae99de685c393d1541db9f8812011313bbccf23a16ea52a2434441061e81fe2e67d9396b68c6fbe2ac5d67afe31081a833de662c9c02462378a437233d646e7ce74f9fdd7b9199b36b45e84496b9160507c127b4f7be56b1628dcdd9df504ec64804d7d60b6542faa1c14a620b5b77b54f94332a1b36d7bfdc78e58aa9b38eec4e389474591ea060dae81fbb63f81d13933747656c250412f40a3dd0af4b83b35d88c32c9692c5a4f3fbc04bd29d1c99efb8a206174372e09bf259ff8ae78c30b6dc2a949e65a5f89333c1341148761c83f8c3246f2127067831b62b33ffee3f903c7c9a1035f3140f5008a52d19f606e2fdf7cd3981ff563610591045bfb270a8ebe33f4702d0f5ca8f8ecf6b095be22665896082e043041fa43c88ce626dbc15e18aa081f121c29aef1e52f4dda0b82d6e97cea406acb8d8cb6bf6f2327d1ad158637fec841f30198822a5e9f5609cf65028a25d8f51bc839b037e9c5a9142aed56a228cee06f9d0c4355bbfa047af7e38d23a8b553e318ddb853655963c39a70ad016ee34a3d8fe587306ec254a8692c027e3a1c5f1f24010f993a744a54b4c70ae3e804b8b000e7fb6c44165e796c160d3811ca6d05237d562d605618b75695bd44825ccd0a14a843123677c951e1bc829354436eac12155ece256260108a5108d2201bba8e4fc0d9d2ff0d4d28a58edd954ca9387419c70eb7741bf9e2acff865f3a74bc284645e0c572387a324ffa211db2b9528fb1b299e044b1ae2a97c82fc2b625464c56f1dfe7b8fd4fb5d77e8c9b591db7b8a7e57a89b7b9d4dbde5cd732b6bce6915d1a781a4b81f46d4fab654a92a778cfaa8adf5323fa6561f26c4b874eb9aa4a3881323257faf7e5d1fa10f710cef905a3e11ca53ddbdcebf88a7944b017737ea9ef58b7846d74e60180d277c1934681c7d257bb06b4a9231d6329d93753b795d383865805cbd49ad0c643595ecd6fced9ddc499614902c3f9b9936dee65fa1721382377e217d16cb19ac75ff8efd7cbd1a201eeae6f658e356b04c8243f497b5b9310150da6339943ffc75e94715ceacff29de3c7b848820131c0a6fe790487b3d6cccce145e498dd3720e8d471a3c6e86ce4d873eafb85a012a46b040c18dcc2edc6daf4cc12776a24fa75b5c996aecf71549227b7e049b99f472e9fb94ff7ada76fcc5a571a430bbdd9aacbd6b14af363ac7d7546a8fefc0dde59bac0b7d577a276d503b9b987c74a0254b553eaeb447b49bf187ed6b944e9a5191722eb22b495c64cf318e65fc1e10663841be3010b5faec7dbac3f21fb87b8d1400287471a4afdb65a5dbd78881fed4eb12d6f80cf84ba6f1eaee0ff8727686c273f3d0cdb1c32809366c4f9a686dd3b23424913f5da8b89d045db6bdd5f9b3642422c66b059d36fb00217cfbb37e93ee4845f6e7d6a2c4b8a57fbe7614ee2b0624d225cd2ca5fe2f92531b5980f6ad1716b7e27050a032c22f9fd3b2d9b7ba244a27bb86e2b7e1b4f3d3bdd4222a5f9af73b92af221bbeb3c55dc9dc972f71b906f58e56ea94454a074e086d7973494d7d72d69bfbc5fe4e75339c643911c131f88fff88fd3281eb5ef79f8f91e2b90120d5068881083bb87b2e4514ff70db97afb9f40dd246302bc6833ae37d085ff36cedb92072e1e7e06c8f3c4bb9814bd1f6bac411c8379fa48cf198ecc61d24b78b8d232d1f99e20b1bfbfb0e5d4a63b085b77a70101b6126a1694b2fa981f793a2145e1eef7c2705b7051bc8320cb8e5397c0f2024d9210f6452cddecb0d65cca88c4f4390814da2459253532e41020929c1933f104c331165ef2cbaea4a7417ed21bfb399663c02bfce82b6e2b7d59376c83a05f2881e644f366afd6f5fb73921c6d4d5b701a2d8bb5cc704846eaca38f8ef14be0337c99270ee209c91d18b8dec5a27d80b8d0b0de9f6e1b8973e320ddc5fe03f8b88402acceb17fd6379f084c34ee76474ac9c08b175190a9e8a2f9d2bea13564eeb78879a294e764a6cc38311a96fb232b78ab99db1ed4d7ffe24b885c6883977fa78d5200bff819543df93d1b5a0a4c800ef40f1ce169babba8c0b2f8d49d548cfa1da6a4786fbe8295c8ef247bb234ac1cf9041cfd89c9fb1369b2643f977b444b58841cf139e8a834fa93698cb51b1156dbc35662864a581165f52d0de3f36bf6f38e1d2ae542033c24e011ce9b7ac73e2e0f75e79f31710cf80bbdef7176c17f727f0f58eb14c67a19b8080787bebb1522b205f430e712c3eb6bf831ea72ee0ca2fa38587a83185cf4e97676c7fea4ec1208d584f6e7e4134d9af492cf238ee87303e9e8ef12269af9e8c0364eb43b7aa3a280819b37905be92007bbc13e390fcd9448eb73cb09739a25656dc34113a28cd6437f3c06d66fd32dbf71819f68657ff992488848213d6fbe6ef8545995be2cc0fe64f909ea9626792c94574cde6b6dfbae9c834c63ccc9a5b98155a59035653bebb977d08a2a3572e3225e0874d7d38c4ef07a8219ee80576b84b2795334a7d7c068bacb248a3bb5677b54fcbab5d3dd6c3338937f0facf3184a1d8dd57702ff792b783fb5b3b1ec5a91eeb6ebedef874a9581212904bf0c59dccefd9dc726879ac79ae7cdaba385c7283c60dfba89758fd4cf3e5cef6c67bb3bc27bc08042454d8b76bb852186c68ca5871421c6520125906f416bfbf06f4aa83c355f9198318690dba6e7ba11c212d638d6c29fc9ea0d7de0eaeed98da004ed62d2d101bb2a6b5d7fe267ad032926a14df6cdacc99bc85d38492f9f3ea8d02d024a6019341f57bdc20c2b521b25bc72e11cdd986aeb826e4b20a8f2d26b57a2eb92069ee6754d4f467bff6d9f8846eee6446d18bf07d0c31e2eacb25b4019ee4579712061be9b13d86a745576ecbfff2c2210e096a897b8821f092dc7571f61c7d50baec4e0bec5fdf44c3fc2a5d7b5ae9a77f31da777d8da0ac57ea2d6581cd69ac3e4f1fc84c45f7c4482c7134be1481338f64b4378d4b0432cc84f1d127c434db7bb8ddfe8162f275fc2e489759f3f3e62b40e6f6032cd79f7aa11989518204e424fd5c7e8c4c1e04e5407be5ebc2efda4d200979a71b5a221016229c9aa84f3ebf551cfee4e54f3a", @generic="5d1ef5050ef73fbe372d5d0984f6c96799ffe9ff2e2dfb5af10cf451c5c6d2a233b9f508122d31d2df846cfe897253aeb6c0b272c97813aeb6d1d95db8c8222ea1728d114a1d4333f60c10a4fef899304e61a3009e6f9f", @typed={0xbb, 0x65, 0x0, 0x0, @binary="daddee119f3f7236bf9a7d413d5d51448c1e04da1850d80c26ca53fa6f3fb66be963069aa738d421251b105d58c373d6b3edfdd3ef960efb96424faf19608b6155b62a76140ecff56696ac4ea32a7fe6aab47d0de1bac339fe4dd687da6886778fe039b98ea1320a99e270cb5fcd3831d14b565b3778ae862833da9866c3a73df1c3c31d7105d69f5fae4fd50619b1db9bcb4db599b6f3569835dc4872941f61b64ae656ae1a4bd8ca1e31b31f0b1a46b10d121b9496ef"}, @nested={0xbc, 0x80, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @u32=0x3ff}, @generic="ed3fdb792b8e75db194d1e9bc517b48594e0884a50a2227d78a0ba2265cfe9e8cd0a371fce2a2b9a62400fdb6a085b76fbf55f983bd18b047b3e5ddc", @typed={0x66, 0x5b, 0x0, 0x0, @binary="1266a4b2923e358a16b5f879afe96d6f8c53526def7b2c3be01cf508e2c7b1d71c8579ee50fcc8f0e5616804b0b745e2f867bc4560c64c569cabee1b19a21d4107b8bee7965d42e42a90294cf8d18404c74acd88c57b00114e5dde9a29da2822d950"}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x10001}]}, @nested={0x69, 0x3f, 0x0, 0x1, [@generic="b9cd1a9a59543d3203c4552f7c3d4dc64c7a4a78fe0e2cdd4ef91297c3c63890fdb6eb83b5f6555119efcc9b001704f05201b1b30ea6569821362af2584761eb904d2b1084688cddf1e215996be41b74eea70041727eaeb26224071745d68f2de836c32a84"]}, @generic="676b4dba266add0545f984508b0d440f8b871a1d6ac86ae65db7fe2b8b79526964189343ded7261b22767fb9a9978563fb8cd03ad9b52557436ab1758b246a16c1ca6738cc6069afca6e20c0e7795c85d3fc0bf11aed2b786be7a95f0b92d6386f6969ae7d8a998baf3c6e67cee474c0999c262d5fbb375d9cb1db10d7236dc7e0b09b91812e37698a49e6c614a727f1b5b3b26410f67eec88abd7e88b3812bcb060ff4560ed9336a111e83577eb9165873a1520bd92ac4883aacf5983398671c01decfa1329647993c1a6b9186e8af5a33a60c654c6581a638eaa71a34dbbec1d49f07c3e3403e14b723ab373349ffc617135034c280db31a87"]}, 0x1588}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40)

15:28:16 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x2)

[ 2504.087021] device wlan1 left promiscuous mode
15:28:17 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 54)

15:28:17 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x7a)

15:28:17 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x4)

[ 2504.188037] FAULT_INJECTION: forcing a failure.
[ 2504.188037] name failslab, interval 1, probability 0, space 0, times 0
[ 2504.190660] CPU: 1 PID: 11842 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2504.192139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2504.193933] Call Trace:
[ 2504.194519]  dump_stack+0x107/0x167
[ 2504.195314]  should_fail.cold+0x5/0xa
[ 2504.196139]  ? create_object.isra.0+0x3a/0xa30
[ 2504.197120]  should_failslab+0x5/0x20
[ 2504.197941]  kmem_cache_alloc+0x5b/0x310
[ 2504.198835]  ? mark_held_locks+0x9e/0xe0
[ 2504.199717]  create_object.isra.0+0x3a/0xa30
[ 2504.200665]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2504.201770]  kmem_cache_alloc+0x159/0x310
[ 2504.202694]  xas_alloc+0x336/0x440
[ 2504.203467]  xas_create+0x34a/0x10d0
[ 2504.204284]  ? queued_spin_lock_slowpath+0xcc/0x8c0
[ 2504.205379]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2504.206517]  xas_store+0x8c/0x1c40
[ 2504.207297]  __xa_store+0x164/0x2d0
[ 2504.208087]  ? xa_delete_node+0x280/0x280
[ 2504.208985]  ? trace_hardirqs_on+0x5b/0x180
[ 2504.209922]  xa_store+0x31/0x50
[ 2504.210651]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2504.211694]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2504.212820]  ? alloc_fd+0x2e7/0x670
[ 2504.213613]  io_uring_setup+0x1fbb/0x2980
[ 2504.214523]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2504.215615]  ? wait_for_completion_io+0x270/0x270
[ 2504.216670]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2504.217797]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2504.218915]  do_syscall_64+0x33/0x40
[ 2504.219719]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2504.220823] RIP: 0033:0x7fd237085b19
[ 2504.221625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2504.225631] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2504.227303] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2504.228854] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2504.230414] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2504.231960] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2504.233509] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:28:17 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 55)

15:28:17 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0xc0189436, &(0x7f0000001700)={0x0, 0x0})

[ 2504.605038] FAULT_INJECTION: forcing a failure.
[ 2504.605038] name failslab, interval 1, probability 0, space 0, times 0
[ 2504.608018] CPU: 1 PID: 11852 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2504.609759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2504.611910] Call Trace:
[ 2504.612632]  dump_stack+0x107/0x167
[ 2504.613634]  should_fail.cold+0x5/0xa
[ 2504.614689]  ? xas_alloc+0x336/0x440
[ 2504.615703]  should_failslab+0x5/0x20
[ 2504.616741]  kmem_cache_alloc+0x5b/0x310
[ 2504.617859]  xas_alloc+0x336/0x440
[ 2504.618844]  xas_create+0x34a/0x10d0
[ 2504.619874]  ? kernel_text_address+0xf2/0x120
[ 2504.621101]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2504.622549]  xas_store+0x8c/0x1c40
[ 2504.623539]  __xa_store+0x164/0x2d0
[ 2504.624536]  ? xa_delete_node+0x280/0x280
[ 2504.625675]  ? trace_hardirqs_on+0x5b/0x180
[ 2504.626883]  xa_store+0x31/0x50
[ 2504.627789]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2504.629103]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2504.630538]  ? alloc_fd+0x2e7/0x670
[ 2504.631549]  io_uring_setup+0x1fbb/0x2980
[ 2504.632693]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2504.634071]  ? wait_for_completion_io+0x270/0x270
[ 2504.635423]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2504.636848]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2504.638259]  do_syscall_64+0x33/0x40
[ 2504.639306]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2504.640707] RIP: 0033:0x7fd237085b19
[ 2504.641724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2504.646768] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2504.648630] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2504.650293] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2504.651971] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2504.653636] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2504.655300] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:28:33 executing program 3:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @multicast}, 0x10)
stat(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)

15:28:33 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3, 0x80c00)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/150, 0x96})
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x41000, 0x16)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ftruncate(r2, 0x9)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x810, r0, 0xfffff000)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r1, r2, r3], 0x3)

15:28:33 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0xfb)

15:28:33 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x8)

15:28:33 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0xc020660b, &(0x7f0000001700)={0x0, 0x0})

15:28:33 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r1, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

15:28:33 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 56)

15:28:33 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3c, 0x6f2000)
socket$packet(0x11, 0x3, 0x300)
read$usbmon(r0, 0x0, 0x0)

15:28:33 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x1e, 0x1, 0x3, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0))
read$usbmon(r0, 0x0, 0x0)

[ 2520.932411] FAULT_INJECTION: forcing a failure.
[ 2520.932411] name failslab, interval 1, probability 0, space 0, times 0
[ 2520.934983] CPU: 1 PID: 11879 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2520.936460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2520.938231] Call Trace:
[ 2520.938806]  dump_stack+0x107/0x167
[ 2520.939599]  should_fail.cold+0x5/0xa
[ 2520.940439]  ? create_object.isra.0+0x3a/0xa30
[ 2520.941412]  should_failslab+0x5/0x20
[ 2520.942221]  kmem_cache_alloc+0x5b/0x310
[ 2520.943090]  ? mark_held_locks+0x9e/0xe0
[ 2520.943956]  create_object.isra.0+0x3a/0xa30
[ 2520.944889]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2520.945968]  kmem_cache_alloc+0x159/0x310
[ 2520.946864]  xas_alloc+0x336/0x440
[ 2520.947623]  xas_create+0x34a/0x10d0
[ 2520.948419]  ? kernel_text_address+0xf2/0x120
[ 2520.949372]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2520.950484]  xas_store+0x8c/0x1c40
[ 2520.951259]  __xa_store+0x164/0x2d0
[ 2520.952038]  ? xa_delete_node+0x280/0x280
[ 2520.952922]  ? trace_hardirqs_on+0x5b/0x180
[ 2520.953847]  xa_store+0x31/0x50
[ 2520.954563]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2520.955591]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2520.956699]  ? alloc_fd+0x2e7/0x670
[ 2520.957490]  io_uring_setup+0x1fbb/0x2980
[ 2520.958381]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2520.959464]  ? wait_for_completion_io+0x270/0x270
[ 2520.960519]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2520.961635]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2520.962740]  do_syscall_64+0x33/0x40
[ 2520.963533]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2520.964621] RIP: 0033:0x7fd237085b19
[ 2520.965422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2520.969335] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2520.970958] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2520.972474] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2520.973992] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2520.975536] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2520.977045] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2520.988975] device wlan1 entered promiscuous mode
[ 2520.991211] device wlan1 left promiscuous mode
15:28:49 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x10cbcb)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7})
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:28:49 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

15:28:49 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x40014e, 0x40282)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180))
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)})

15:28:49 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001700)={0x0, 0x0, 0x10})

15:28:49 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x801)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101102, 0x17c)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x7, [0x8, 0x1, 0x6, 0x7, 0x0, 0x9]})
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x8109b)

15:28:49 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x300)

15:28:49 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 57)

15:28:49 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0xa)

[ 2536.278074] FAULT_INJECTION: forcing a failure.
[ 2536.278074] name failslab, interval 1, probability 0, space 0, times 0
[ 2536.280694] CPU: 0 PID: 11911 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2536.282200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2536.284018] Call Trace:
[ 2536.284599]  dump_stack+0x107/0x167
[ 2536.285398]  should_fail.cold+0x5/0xa
[ 2536.286233]  ? xas_alloc+0x336/0x440
[ 2536.287051]  should_failslab+0x5/0x20
[ 2536.287879]  kmem_cache_alloc+0x5b/0x310
[ 2536.288772]  xas_alloc+0x336/0x440
[ 2536.289553]  xas_create+0x34a/0x10d0
[ 2536.290371]  ? kernel_text_address+0xf2/0x120
[ 2536.291357]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2536.292491]  xas_store+0x8c/0x1c40
[ 2536.293279]  __xa_store+0x164/0x2d0
[ 2536.294071]  ? xa_delete_node+0x280/0x280
[ 2536.294983]  ? trace_hardirqs_on+0x5b/0x180
[ 2536.295924]  xa_store+0x31/0x50
[ 2536.296640]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2536.297689]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2536.298841]  ? alloc_fd+0x2e7/0x670
[ 2536.299674]  io_uring_setup+0x1fbb/0x2980
[ 2536.300579]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2536.301677]  ? wait_for_completion_io+0x270/0x270
[ 2536.302757]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
15:28:49 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x40010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x5)

[ 2536.303898]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2536.305239]  do_syscall_64+0x33/0x40
[ 2536.306052]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2536.307178] RIP: 0033:0x7fd237085b19
[ 2536.307985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2536.311997] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2536.313651] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2536.315215] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2536.316767] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2536.318318] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2536.319873] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:28:49 executing program 4:
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x3)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000680)={0x1, 0x4, 0xf888})
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000000c0), 0xffffffff, 0x800)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r5 = dup2(r0, r4)
writev(r2, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000640))
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000001600)={0x12f8, 0x31, 0x300, 0x70bd2b, 0x25dfdbfb, {0x13}, [@nested={0x1111, 0x81, 0x0, 0x1, [@generic="ed5322ae042162a88bddecbd942e11b7032520ff1604491bf2aa4f82f72e59d6dbbea853090f288506b8ae137852ac10bd9a04ea30c7ae10a90fbbcf12acf3335be4869ecfb4a3660d34ea014af260d2d6017b", @typed={0xa, 0x51, 0x0, 0x0, @str='@!]\xa4a\x00'}, @generic="54fc0cc1a99e6a03382b46cd563e7d4dc996", @generic="8fe6e9ac4d8a5570337d299eb385c899599d2a0a28456e8052ef074a", @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@multicast1}, @generic="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", @generic="68728e172ee9c03e1d4402b81c9b9144b86ec5eb037e6525e00fd59ba05b7c3778937e909a5bb6c35a2ac79a84f4d306782ec2ed3a397b77a69e140fee104e01652be8c2bc", @typed={0x4, 0x7}, @generic="7a71c0bdfc1b152b8d65be3170c0a5941503728e8bb565606074f5783d079e20179e897941892f4b7d8af4190ebba5"]}, @nested={0x1c5, 0x3c, 0x0, 0x1, [@generic="783c0519a229977d017f3a96c5824e0165cf51ff521c9a1910e85daac1166399c4f874ef832f14c269350d1e020d818765959eb2d482d7315d8361d08edc5aedfc0dbfa7e9fe2233b2b461d796fe7b449820419dfefbb43bfe6fb14099a4275ea0652942fd46a4fd4fffaaac6f37344a30fd857c6e09d604fd07c6461bbb8ec2ad5ff1cedc817c883a8a90a347c319285c03b0069ba02649ab25f0c44993ddfb3e57a990ca227a9ec4971dd088f728c18379555166a58c38a9c2573f97b727ad0c46d3fee316b6a44acbf4113db3f41735bede5399c52e55049cc53bd2be335f2d2efe7a", @generic="339c59c3ff09c4cf71", @generic="6fe14d149d43c2e9950eebedb43ad706ef1fd63fa608d7ea2d4c6c8b89ab045589ebf13513fcb8adfb5ff93f181e0a58b46b451fb2f3fc2f", @typed={0x8, 0x34, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="41e20e7c9f41f14b733618b89d9eb5cd35ddff7ab3e2be54006c7c586473a8985f005a62023e43d7cab6174b83bd1d41910168c591986d7b7d8eee3a600f439a4b9711fd4fa6bdaf44522bc78f8408f311524d444c9a", @typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}, @generic="6042200b48d660255d7eef946857420c824df4c8742a4abdb9db", @typed={0x11, 0x61, 0x0, 0x0, @str='/dev/usbmon#\x00'}, @typed={0x8, 0x11, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0x6f, 0x0, 0x0, @uid=0xee01}]}, 0x12f8}, 0x1, 0x0, 0x0, 0x4000800}, 0x4080)
r6 = getuid()
r7 = geteuid()
mount$9p_xen(&(0x7f0000000340), &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x900400, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=xen,aname=,access=user,noextend,dfltuid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6163636573733d616e792c64656275673d3078303030303030303030303030303130312c6d6d61702c6163636573733d757365722c6673757569643d34333865376330612d643566352d6361a036642d636135302d2e363461333537612c7365636c6162656c2c646f6e745f61707072616973652c7065726d69745f646972656374696f2c636f6e746578743d73746166665f752c666f776e65723e", @ANYRESDEC=r7, @ANYBLOB=',uid>', @ANYRESDEC=r6, @ANYBLOB=',\x00'])

15:28:49 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000002c0)={&(0x7f0000000000), &(0x7f0000000040)=""/36, 0x24})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0x82cb5000)

15:29:05 executing program 7:
sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x0, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x795}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
read$usbmon(r0, &(0x7f00000000c0)=""/144, 0x90)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006, 0x8010, r1, 0xb80cd000)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
fadvise64(r3, 0x2, 0x10000, 0x1)
ftruncate(r0, 0x7)

15:29:05 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x40014e, 0x40282)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180))
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)})

15:29:05 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x28)

15:29:05 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 58)

15:29:05 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x303000)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=<r1=>r0, @ANYBLOB="000000f0332f66696c080000"])
ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0xb13)
fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x5, 0xfffff801}]}, 0xc, 0x3)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_io_uring_setup(0x7400, &(0x7f0000000200)={0x0, 0xb13c, 0x8, 0x1, 0xca}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x1, &(0x7f00000000c0)="336ab7b948353748332461163e568c38cd622b6c0eeec7aaf799f07fa17447f25c5155f3e1f23e09f6eea01faa4c3abbb0f0aacc4d247a72b36f339f5b1473cee51d73a18df36e587ecae9da43a9cafc17a1af4ddc5781e6f0ef7b06e31f3caea5cd47f6d8e88b69882f5452d897a0ae25dfa67d18ab077bdef340cf556ebf94de8497995d1c81bb3fb8f62ba92b", 0x0, 0x0, 0x1, {0x3, r4}}, 0xd4f)
syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r4}}, 0x3)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x810, r2, 0x50491000)
write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'security.capability\x00'}, {0x20, '/dev/usbmon#\x00'}, {0x20, '@({/'}, {0x20, '/dev/usbmon#\x00'}, {0x20, '/dev/usbmon#\x00'}, {0x20, '$'}], 0xa, "4a7a7683ef73b9ad362cdac5f83d4a7a00b0983621aa9188369817e32a8fcee1f9456236b33efa7512efb4f7620b09a0d362e49b2efbcb9c423d634d0de7bbc29da73b2abeec94412f59a5cfb013e83b67f4afab7ef686ed838c1dab0072c2a62f503d977f12247ec77f8381479df02b745c3b401dc5f5f6a3e445eaf9da40f305"}, 0xd2)

15:29:05 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x500)

15:29:05 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2)
ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x450cbd1f)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:29:05 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001700)={0x0, 0x0, 0x10000000})

[ 2552.993377] FAULT_INJECTION: forcing a failure.
[ 2552.993377] name failslab, interval 1, probability 0, space 0, times 0
[ 2552.995001] CPU: 1 PID: 11941 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2552.995925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2552.997033] Call Trace:
[ 2552.997387]  dump_stack+0x107/0x167
[ 2552.997862]  should_fail.cold+0x5/0xa
[ 2552.998366]  ? ___slab_alloc+0x155/0x700
[ 2552.998909]  ? create_object.isra.0+0x3a/0xa30
[ 2552.999509]  should_failslab+0x5/0x20
[ 2553.000016]  kmem_cache_alloc+0x5b/0x310
[ 2553.000553]  create_object.isra.0+0x3a/0xa30
[ 2553.001128]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2553.001802]  kmem_cache_alloc+0x159/0x310
[ 2553.002357]  xas_alloc+0x336/0x440
[ 2553.002828]  xas_create+0x34a/0x10d0
[ 2553.003340]  ? kernel_text_address+0xf2/0x120
[ 2553.003923]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2553.004613]  xas_store+0x8c/0x1c40
[ 2553.005080]  __xa_store+0x164/0x2d0
[ 2553.005561]  ? xa_delete_node+0x280/0x280
[ 2553.006109]  ? trace_hardirqs_on+0x5b/0x180
[ 2553.006675]  xa_store+0x31/0x50
[ 2553.007130]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2553.007753]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2553.008429]  ? alloc_fd+0x2e7/0x670
[ 2553.008918]  io_uring_setup+0x1fbb/0x2980
[ 2553.009475]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2553.010154]  ? wait_for_completion_io+0x270/0x270
[ 2553.010812]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2553.011504]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2553.012185]  do_syscall_64+0x33/0x40
[ 2553.012674]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2553.013351] RIP: 0033:0x7fd237085b19
[ 2553.013844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2553.016252] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2553.017253] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2553.018183] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2553.019119] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2553.020057] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2553.020994] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:29:05 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x40014e, 0x40282)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180))
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)})

15:29:05 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 59)

15:29:05 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x600)

15:29:05 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x40014e, 0x40282)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180))
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)})

[ 2553.097848] FAULT_INJECTION: forcing a failure.
[ 2553.097848] name failslab, interval 1, probability 0, space 0, times 0
[ 2553.099460] CPU: 1 PID: 11960 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2553.100337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2553.101392] Call Trace:
[ 2553.101735]  dump_stack+0x107/0x167
[ 2553.102191]  should_fail.cold+0x5/0xa
[ 2553.102669]  ? xas_alloc+0x336/0x440
[ 2553.103147]  should_failslab+0x5/0x20
[ 2553.103622]  kmem_cache_alloc+0x5b/0x310
[ 2553.104139]  xas_alloc+0x336/0x440
[ 2553.104588]  xas_create+0x34a/0x10d0
[ 2553.105073]  ? kernel_text_address+0xf2/0x120
[ 2553.105638]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2553.106300]  xas_store+0x8c/0x1c40
[ 2553.106749]  __xa_store+0x164/0x2d0
[ 2553.107210]  ? xa_delete_node+0x280/0x280
[ 2553.107740]  ? trace_hardirqs_on+0x5b/0x180
[ 2553.108285]  xa_store+0x31/0x50
[ 2553.108700]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2553.109300]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2553.109951]  ? alloc_fd+0x2e7/0x670
[ 2553.110412]  io_uring_setup+0x1fbb/0x2980
[ 2553.110942]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2553.111576]  ? wait_for_completion_io+0x270/0x270
[ 2553.112189]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2553.112841]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2553.113483]  do_syscall_64+0x33/0x40
[ 2553.113952]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2553.114612] RIP: 0033:0x7fd237085b19
[ 2553.115086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2553.117367] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2553.118320] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2553.119232] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2553.120137] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2553.121022] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2553.121915] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:29:06 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0xa00)

15:29:06 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400142, 0x8)
r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r2, 0x8, 0xfffffffffffffff7, 0x1})
dup3(r1, r2, 0x80000)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xfffffffffffffffd)

15:29:06 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/77, 0x4d})
ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x7fff)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x2f1f)

15:29:06 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x40014e, 0x40282)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180))

15:29:21 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 60)

15:29:21 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'U-', 0x6}, 0x16, 0x1)

15:29:21 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x2800)

15:29:21 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001700)={0x0, 0x0, 0x1000000000})

15:29:21 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x40014e, 0x40282)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x2)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)

15:29:21 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x700)

15:29:21 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
fcntl$setlease(r1, 0x400, 0x2)

15:29:21 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', <r1=>0x0, 0x4, 0x78, 0x1, 0x1, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x700, 0x1f, 0x6}})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x5, 0xfffffffffffffffa, 0x7})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x15, r1, 0x1, 0x1, 0x6, @remote}, 0x14)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r2, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x200043, 0x48)
fallocate(r3, 0xc, 0xfffffffffffff142, 0x8001)
writev(r3, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @private0, 0x6}, 0x1c)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0x0, 0x2, 0x40, 0x6, 0x4})

[ 2568.927075] FAULT_INJECTION: forcing a failure.
[ 2568.927075] name failslab, interval 1, probability 0, space 0, times 0
[ 2568.929698] CPU: 1 PID: 11995 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2568.931120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2568.932812] Call Trace:
[ 2568.933353]  dump_stack+0x107/0x167
[ 2568.934099]  should_fail.cold+0x5/0xa
[ 2568.934875]  ? create_object.isra.0+0x3a/0xa30
[ 2568.935827]  should_failslab+0x5/0x20
[ 2568.936602]  kmem_cache_alloc+0x5b/0x310
[ 2568.937436]  ? mark_held_locks+0x9e/0xe0
[ 2568.938316]  create_object.isra.0+0x3a/0xa30
[ 2568.939237]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2568.940300]  kmem_cache_alloc+0x159/0x310
[ 2568.941154]  xas_alloc+0x336/0x440
[ 2568.941880]  xas_create+0x34a/0x10d0
[ 2568.942651]  ? kernel_text_address+0xf2/0x120
[ 2568.943578]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2568.944670]  xas_store+0x8c/0x1c40
[ 2568.945562]  __xa_store+0x164/0x2d0
[ 2568.946315]  ? xa_delete_node+0x280/0x280
[ 2568.947181]  ? trace_hardirqs_on+0x5b/0x180
[ 2568.948063]  xa_store+0x31/0x50
[ 2568.948743]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2568.949803]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2568.950887]  ? alloc_fd+0x2e7/0x670
[ 2568.951669]  io_uring_setup+0x1fbb/0x2980
[ 2568.952525]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2568.953549]  ? wait_for_completion_io+0x270/0x270
[ 2568.954556]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2568.955637]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2568.956688]  do_syscall_64+0x33/0x40
[ 2568.957444]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2568.958479] RIP: 0033:0x7fd237085b19
[ 2568.959250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2568.963110] RSP: 002b:00007fd2345fb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2568.964680] RAX: ffffffffffffffda RBX: 00007fd237198f60 RCX: 00007fd237085b19
[ 2568.966148] RDX: 0000000020ff9000 RSI: 0000000020000000 RDI: 0000000000006f65
[ 2568.967625] RBP: 0000000020000000 R08: 0000000020000100 R09: 0000000020000100
[ 2568.969103] R10: 00000000200000c0 R11: 0000000000000202 R12: 0000000020000100
[ 2568.970569] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:29:21 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 61)

15:29:21 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x80000)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x20010, r1, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x12740b)

15:29:21 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x4000)

15:29:21 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=<r1=>0x0)
r2 = geteuid()
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000140)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {<r6=>r3, r5}}, './file0\x00'})
stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setresuid(0x0, r7, 0x0)
setresuid(r6, r7, r3)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=<r8=>0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x0, r1}, {0x2, 0x6, r2}, {0x2, 0x1}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x4, 0xee01}, {0x2, 0x7, r3}, {0x2, 0x4, r4}, {0x2, 0x2, r8}], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x3}}, 0x64, 0x0)

15:29:21 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x40014e, 0x40282)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x2)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

[ 2569.087828] FAULT_INJECTION: forcing a failure.
[ 2569.087828] name failslab, interval 1, probability 0, space 0, times 0
[ 2569.090356] CPU: 0 PID: 12017 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2569.091844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2569.093611] Call Trace:
[ 2569.094187]  dump_stack+0x107/0x167
[ 2569.094965]  should_fail.cold+0x5/0xa
[ 2569.095803]  ? vm_area_dup+0x78/0x290
[ 2569.096611]  should_failslab+0x5/0x20
[ 2569.097418]  kmem_cache_alloc+0x5b/0x310
[ 2569.098283]  vm_area_dup+0x78/0x290
[ 2569.099061]  ? lock_release+0x680/0x680
[ 2569.099925]  ? mark_lock+0xf5/0x2df0
[ 2569.100721]  ? lock_chain_count+0x20/0x20
[ 2569.101611]  ? mark_lock+0xf5/0x2df0
[ 2569.102411]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2569.103546]  ? lock_chain_count+0x20/0x20
[ 2569.104439]  ? mark_lock+0xf5/0x2df0
[ 2569.105232]  ? vm_area_alloc+0x110/0x110
[ 2569.106112]  ? __lock_acquire+0x1657/0x5b00
[ 2569.107055]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2569.108173]  ? vmacache_find+0x55/0x2a0
[ 2569.109030]  __split_vma+0xa8/0x4e0
[ 2569.109809]  __do_munmap+0x365/0x1260
[ 2569.110626]  ? arch_get_unmapped_area+0x450/0x450
[ 2569.111665]  ? lock_release+0x680/0x680
[ 2569.112509]  mmap_region+0x7cc/0x1500
[ 2569.113320]  do_mmap+0x868/0x1370
[ 2569.114082]  vm_mmap_pgoff+0x198/0x1f0
[ 2569.114900]  ? randomize_page+0xb0/0xb0
[ 2569.115769]  ksys_mmap_pgoff+0x41c/0x560
[ 2569.116635]  ? find_mergeable_anon_vma+0x250/0x250
[ 2569.117676]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2569.118792]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2569.119906]  do_syscall_64+0x33/0x40
[ 2569.120715]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2569.121814] RIP: 0033:0x7fd237085b62
[ 2569.122602] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2569.126510] RSP: 002b:00007fd2345fb0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2569.128143] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd237085b62
[ 2569.129659] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000
[ 2569.131189] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000
[ 2569.132718] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100
[ 2569.134237] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:29:22 executing program 1:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000015c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001600)={0x114, r0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6bb748bc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x88}]}, @TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2b, 0x3, "a9dd19e659f7334a6e2614f4f18b80cc23129412af12bb9b07de3f5edc3b20611c59caebecd7cf"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff592}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40815}, 0x4005800)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000040)={0x7, 0x26, 0x7, 0x0, 0xde})
ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000ac0)={0x0, 0xf0, 0x1, 0x0, 0x68})
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x0)
r2 = syz_open_dev$vcsn(0x0, 0x1, 0x0)
ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000001540)=@hrpcs={0xb, 0xc6})
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r3, 0x9201)

[ 2569.254132] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[ 2569.319892] sr 1:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
15:29:36 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x50040, 0x0)
ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000180))
r2 = dup(r0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0)
ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/7, 0x7})
ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000001700)={0x0, 0x0})

15:29:36 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x40014e, 0x40282)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x2)

15:29:36 executing program 7:
read$usbmon(0xffffffffffffffff, 0x0, 0x0)

15:29:36 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x0, 0xffffffffffffffff}}, './file0\x00'})
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5})

15:29:36 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x80000)

15:29:36 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0xa00)

15:29:36 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 62)

15:29:36 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={<r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0xd8, "c3b057e37f7fda"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004cbc0)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r3=>0x0}], 0x7, "9cc3d2f815816e"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={<r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0xd8, "c3b057e37f7fda"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004dbc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}, {r4, r5}], 0x1, "bd96b5f67f5e17"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000000c0)={r5, 0x0, "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", "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"})
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2583.673079] FAULT_INJECTION: forcing a failure.
[ 2583.673079] name failslab, interval 1, probability 0, space 0, times 0
[ 2583.675553] CPU: 0 PID: 12046 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2583.676983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2583.678723] Call Trace:
[ 2583.679296]  dump_stack+0x107/0x167
[ 2583.680071]  should_fail.cold+0x5/0xa
[ 2583.680859]  ? create_object.isra.0+0x3a/0xa30
[ 2583.681822]  should_failslab+0x5/0x20
[ 2583.682631]  kmem_cache_alloc+0x5b/0x310
[ 2583.683515]  create_object.isra.0+0x3a/0xa30
[ 2583.684415]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2583.685479]  kmem_cache_alloc+0x159/0x310
[ 2583.686356]  vm_area_dup+0x78/0x290
[ 2583.687132]  ? lock_release+0x680/0x680
[ 2583.687975]  ? mark_lock+0xf5/0x2df0
[ 2583.688769]  ? lock_chain_count+0x20/0x20
[ 2583.689640]  ? mark_lock+0xf5/0x2df0
[ 2583.690440]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2583.691549]  ? lock_chain_count+0x20/0x20
[ 2583.692405]  ? mark_lock+0xf5/0x2df0
[ 2583.693172]  ? vm_area_alloc+0x110/0x110
[ 2583.694016]  ? __lock_acquire+0x1657/0x5b00
[ 2583.694936]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2583.696051]  ? vmacache_find+0x55/0x2a0
[ 2583.696870]  __split_vma+0xa8/0x4e0
[ 2583.697627]  __do_munmap+0x365/0x1260
[ 2583.698413]  ? arch_get_unmapped_area+0x450/0x450
[ 2583.699436]  ? lock_release+0x680/0x680
[ 2583.700252]  mmap_region+0x7cc/0x1500
[ 2583.701066]  do_mmap+0x868/0x1370
[ 2583.701788]  vm_mmap_pgoff+0x198/0x1f0
[ 2583.702607]  ? randomize_page+0xb0/0xb0
[ 2583.703448]  ksys_mmap_pgoff+0x41c/0x560
[ 2583.704290]  ? find_mergeable_anon_vma+0x250/0x250
[ 2583.705325]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2583.705347]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2583.705372]  do_syscall_64+0x33/0x40
[ 2583.708315]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2583.709386] RIP: 0033:0x7fd237085b62
[ 2583.710165] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2583.713964] RSP: 002b:00007fd2345fb0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2583.715540] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd237085b62
[ 2583.716985] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000
[ 2583.718473] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000
[ 2583.719955] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100
[ 2583.721420] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:29:36 executing program 4:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x4cd0, &(0x7f0000000000)={0x0, 0xc389, 0x0, 0x0, 0x248}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x7daf6)

15:29:36 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x40014e, 0x40282)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)

15:29:36 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x400000)

15:29:36 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x100000001, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x116011, 0xffffffffffffffff, 0x8000000)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x2}}, './file0\x00'})
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x1, &(0x7f00000000c0)="336ab7b948353748332461163e568c38cd622b6c0eeec7aaf799f07fa17447f25c5155f3e1f23e09f6eea01faa4c3abbb0f0aacc4d247a72b36f339f5b1473cee51d73a18df36e587ecae9da43a9cafc17a1af4ddc5781e6f0ef7b06e31f3caea5cd47f6d8e88b69882f5452d897a0ae25dfa67d18ab077bdef340cf556ebf94de8497995d1c81bb3fb8f62ba92b", 0x0, 0x0, 0x1, {0x3, r3}}, 0xd4f)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r2, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/234, 0xea}, {&(0x7f0000000280)=""/15, 0xf}], 0x3}, 0x0, 0x0, 0x0, {0x2, r3}}, 0x4)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x5)

15:29:36 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, 0xffffffffffffffff, 0xfffff000)

15:29:36 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x2000)

15:29:36 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x1000000)

15:29:36 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x840200)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
write$binfmt_elf32(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/1590], 0x62a)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000700))
writev(r2, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
socket$packet(0x11, 0x2, 0x300)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r3 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x5, 0x2, &(0x7f0000000380)=[{&(0x7f0000000180)="d89f986055912865a706af64691e05dbbbbf41036272b3cf5a0195837bf0b7d0c59f13cc00bf9b843754a44fc33f91154f650dcc1737d7b4469d51eb931b7512677520ab1cffa87ed69e890ec4f9bd58b97b69bdb9e551c8ae8ae18ecd687ba41c040c8dfaf05e32d52f9773ecdff2b4335b74012604541bc037f179f056751b64c52ba050a2cec2ddaf417ae429893b824fdcffd3b2eda306af52d7b9aadb573b883f6eefde6a3b90b01b92c2da4265a8fa21dbda4403b83cfdfb07488c4d6a924aa16edf3f1169eddb3b2812176ed1850293de38a50befddf4acabd9dd738954bad1bde2b933dc868587", 0xeb, 0x9}, {&(0x7f0000000280)="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", 0xfc, 0x4}], 0x200000, &(0x7f00000003c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x47, 0x63, 0x66, 0x0, 0x32, 0x61, 0x39, 0x35], 0x2d, [0x64, 0x38, 0x39, 0x36], 0x2d, [0x37, 0x61, 0x0, 0x35], 0x2d, [0x63, 0x66, 0x30, 0x38], 0x2d, [0x33, 0x31, 0x65, 0x63, 0x65, 0x30, 0x31, 0x65]}}}, {@subj_user={'subj_user', 0x3d, '}'}}]})
openat(r3, &(0x7f00000000c0)='./file0\x00', 0x68a820, 0x20)

15:29:56 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x3f00)

[ 2603.712432] FAULT_INJECTION: forcing a failure.
[ 2603.712432] name failslab, interval 1, probability 0, space 0, times 0
[ 2603.713906] CPU: 1 PID: 12091 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2603.714747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2603.715771] Call Trace:
[ 2603.716102]  dump_stack+0x107/0x167
[ 2603.716550]  should_fail.cold+0x5/0xa
15:29:56 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={0x0, 0x0})
r1 = dup(r0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000001700)={0x0, 0x0})
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r2, 0xfffff000)
ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x2)

15:29:56 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x2000000)

15:29:56 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 63)

[ 2603.717018]  ? vm_area_alloc+0x1c/0x110
[ 2603.717669]  should_failslab+0x5/0x20
[ 2603.718139]  kmem_cache_alloc+0x5b/0x310
[ 2603.718639]  vm_area_alloc+0x1c/0x110
[ 2603.719106]  mmap_region+0x982/0x1500
[ 2603.719590]  do_mmap+0x868/0x1370
[ 2603.720020]  vm_mmap_pgoff+0x198/0x1f0
[ 2603.720503]  ? randomize_page+0xb0/0xb0
[ 2603.720998]  ksys_mmap_pgoff+0x41c/0x560
[ 2603.721499]  ? find_mergeable_anon_vma+0x250/0x250
[ 2603.722105]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2603.722749]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2603.723384]  do_syscall_64+0x33/0x40
[ 2603.723852]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2603.724486] RIP: 0033:0x7fd237085b62
[ 2603.724946] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2603.727190] RSP: 002b:00007fd2345fb0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2603.728120] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd237085b62
[ 2603.728982] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000
[ 2603.729847] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000
[ 2603.730736] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100
[ 2603.731632] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:29:56 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, 0xffffffffffffffff, 0xfffff000)

15:29:56 executing program 4:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00'})
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x8, {0x0, 0x4, 0x3, 0x8001, 0x21}})
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r1, 0x0)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7daf6)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @multicast}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @multicast}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @multicast}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x3, 0x6, @multicast}, 0x10)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000080)={r9, 0x3, 0x6, @multicast}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x134, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4040010}, 0x4801)

15:29:56 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r1, 0xfffff000)
ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000000)={r0})
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
r2 = eventfd(0x1)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r3, 0xfffff000)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000cc0), 0x48000, 0x0)
r5 = syz_open_dev$vcsu(&(0x7f0000000d00), 0x8000, 0xc2)
r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r6, 0xfffff000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r8, 0xfffff000)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000031c0), 0x3)
r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r10, 0xfffff000)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003200)=<r11=>0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="59575f6614c24390fb1806b1e8c24a1f61e245eccf5681e0d2dce6a6ddfeb6365ee7bb7ae65222f377a20d58b1e1c1c7434d521ccd094002f6", 0x39}, {&(0x7f0000000100)="34b8f322c12133d243414d57a77118b2d9e87334c08e0d5103dc549a553cbb3ad984b1add8f9f069b59030e4aa42f6350c71d60ad7b93a555ec88ada75926a0fbe8b6bc8d8d5d2d5b7cc8e5b1c3c43328cbd88c84dd5a015619cf6663298bd7fb91ac2c610619f9bf913db03b6ab1def44a4436ff5a2632d80361f2b431dca6165b80ecf533fa876439e3ece2a2371", 0x8f}, {&(0x7f00000001c0)="6ecb544e428b06d50c86f3f106ba43e799217ff98c13d206be65ee2917fb5618b507752bd22c54f25e2d29262dab30dda3683d6450aa323136a62b3b594a8f363ff7ec0f", 0x44}, {&(0x7f0000000240)="8ad1ecc01f651c2f2b83779c2d58e0e4f40ce0367e4a68e3f8fd492c6662a6f8782f2c50d23cff577e29e7ee4ba22c71c53ab3ec15c316e197189a697cfc438a4cfbb7870ae37cf87d09281499720dc05a0916db039d690873dbbe5ad39f9c06e08a82373f04820359352035ffbb7557b5b80338d5ce0ac7ec43f3159b0328a35130ac74fb06d595a7b056eb24409d60e78f2081167623c777a04a03aa1898e88766400c86202ce5a828014c0bf2e9cb4fae0ad687676598e4532d43", 0xbc}, {&(0x7f0000000300)="19a30040fb19706e8a31c0845f3eb79341ab86d1af06e440f974a35fde821c737e8d5d26b75edda02bc2b87dc550", 0x2e}, {&(0x7f0000000340)="1bc8e7611e3210b1123358e2d1e86a6c87826960ca2b8fa0484a97", 0x1b}, {&(0x7f0000000380)="976dab1bb9ce0c8107c54d642e458c9e0ea672163374624e4c84dea8a6bec3bbe4f247ab3cbab4c42e28ff98c9ec80e9ac77bda374795d0bbbb082d072f2c8e31005cddcf7cf8ebbcc3e429d6b0b5a864164413adbf3c2aa7a68bfa93aa6164d85ee28d302244598b563c420796d881c887e97b8aea9546503c3bb0f0515486e466af0a9d71d8caedfbd09db71e4f975447ab482e55d3c5150a879247843f413cd29186b118302bc2c9dbcb2ffba876051b2562a239d409725f003ac2c0216b95bfaa7fe1d7d3f4bfd2b12fa0e59ff5419303812b9696d869d5bbb3ab4c07e1d15875a9014d1d44d22", 0xe9}], 0x7, &(0x7f0000000580)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r1]}}], 0x20}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000640)="59db9bf9e9e8249d6e2ebb5e5080956ca5b378f6460cb24ce6404472f42fc51439161a87ac897c8c7671e97b9c82ed5fac622940dfac5b6a05174ef305a78e255136d7aeb16f889e5ef0188ed8b9208ee3077b3394c97e44f1117cffafa8c8282a71d25a6818391f107a48e3d4dacc8c015cba07665b405a", 0x78}, {&(0x7f00000006c0)="fd9f774a41e81c89893a9ef2032a0e0e4f40eeca10459bcc68a462c4b015e3cd2b62de2a9c1cebcda27b2986df6df2e965a4b8e75743017e381fc634ee1a1b7654980cb07eb990f8e6254deb789a6cdc8f0c77827dc2d66fd0de5506618809bb863d37c77aeffc0483f0566346bed1ad7eb5d2014d9f63b43c7b12724256ba49e433ab8f22039ddd533d75e70471a387eebca260cab94af6a36776003edb5643f653febbe8d7f727f6b3ac7419d8347ee3306ed4d3b3660ce412ebb63e49f9b030ea2181ef59432a7ab2420fe8", 0xcd}, {&(0x7f00000007c0)="27b6da8f49ba355a3219cde3b81f9caf71856c36a1229b5e3040a7018f1f7f5da740428a19bdee6538998aef418c15f3683ae707962fc7dd07ea83e1b85b5d159cc567325a2c3b3be42002cdbefdcc659810114e384e0a0b78c322aeaa20fef246d77d40e75e3613640034c56a1bfad0c01f", 0x72}, {&(0x7f0000000840)="608877af283a6183559c1a76bdf086331087f13fecf0b5aa51a363903800", 0x1e}, {&(0x7f0000000880)="5c976a635ed81b86edad5bebc8490b534c002dd20f1334596f0a2b57edf2eb811c425262e62ef73d7870c4ff05faccc74be99dc9c2ab3d190919b5f0f9a0bb2395a585d4d853bf88c1f1c2e822221e1ba866e67ca09b045913dd42b147ff089f4e50a52ea31100b3e24ecbbed4a8bf", 0x6f}], 0x5, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r1]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r2, r3]}}, @rights={{0x2c, 0x1, 0x1, [r4, r5, r6, r7, r8, r1, r0]}}], 0xd8, 0x20048000}}, {{&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="6192bdb55110028de69d3a0f5679d310a29c73f017ef8ac5decb0a105877cb526e71793acfbe8120abbc60f869f4cbc65de29cd4a2153e9f9e87a12b274dd10cecb42a52f853a1545d3296a3db03ed1a6bffac01c141134ff02e3695", 0x5c}, {&(0x7f0000001f40)="087406c4e54228e0183de5e65e96e6f3ae0aeccd5a71333d", 0x18}, {&(0x7f0000001f80)="42e845a9f89efd4d7937dc62af49f0b710002e3ea794b0872178b97a062a7d3cb5da92a8fc1f67b88bc160ca08a35b15ef0ef65579bcac8f8ed0d62340566baebf0fa4eccecf1ae1d5b8b5e8ba6f9cda065d0a65f5e27f9cf6da2bb6694a2cf00c1a98e66f3d6be1e3650a1ea03053438c87010c3c8a7e947650b0dcbf007d0b3a1ba8c999c49f681cbf79b5de65862d", 0x90}, {&(0x7f0000002040)="f74ac4153bc2321ad904622aba4786330cdf7fee8266882028757ac052e0a9c3b6929d19a4c2ec6e31fda6a09f98377160a35dfc1b1b504bf6d83f1ddaf0f8aa451f4b20d61095dc2a9c468ca27410bb0f48ca3b29ee90630abced4950ca97bf0648a0df2a47ba4024abb23a3283593a76de6077371622844597fcaa61ac6fc2aa0f3b78a2f2e618556ee70debe8b39cf663694d5d15b3f062c346e18760f93aaef4f05504684af5cac26743a62d3486e85d3449d925774aeeab454cb86de78404ead6c4288a1c373406303ca2eeda51ede680", 0xd3}, {&(0x7f0000002140)="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", 0x1000}], 0x6, &(0x7f0000003240)=[@rights={{0x18, 0x1, 0x1, [r9, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r10, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee01}}}], 0x70, 0x4008811}}, {{&(0x7f00000032c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000003340)="52314fa2154569914394d6d5ad0dacea6d54936b4c686b511d8356373b9e61fd356fd77e149a5dc8c490773b6d6c11bec7dfc380731d49c9d19a6d99e5cd417e6aa8115e39b5cd11c22c2df6da11ca923ce83efc892f66efba809f6f6a6fe14600750cfa1b825876a32710bdfb11bf13efc66e4750ef133c524ad993b5235f24ac04e61aa18a259100d9252b4fa3684f097084fc08e40ef3ff1562708916a5a3a6f0bf5e3cd9fdf57b1932973f4a93aa33e847989bba7e", 0xb7}], 0x1, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000003440)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000034c0)="f0c4d7add78de4399240e69635343fc3c53e25f9b64afdb9e779d63e", 0x1c}, {&(0x7f0000003500)="7790e8ca0af608", 0x7}, {&(0x7f0000003540)="599c319ff40a3d9c63db7810848510ce2f80a80214341ed7101594a72d8d0abbb53916e5c0a677e5887e7d04c0df1320b268560ec8f6349f7e77194fa68db258516bee0528d1862164aa77441052a56110d8baad1c3132c4af0a8e56", 0x5c}], 0x3, 0x0, 0x0, 0x81}}], 0x5, 0x5)

15:29:56 executing program 7:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
read$usbmon(r0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000005, 0x1f012, r1, 0xfffff000)
r2 = pidfd_open(0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={<r4=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {0x0, <r5=>0x0}, {}, {}, {}, {}, {}, {<r6=>0x0}, {}, {}, {}, {0x0, <r7=>0x0}, {<r8=>0x0}, {}, {}, {}, {<r9=>0x0}, {}, {}, {}, {}, {}, {}, {<r10=>0x0}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}, {0x0, <r12=>0x0}, {<r13=>0x0}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}, {}, {}, {}, {0x0, <r15=>0x0}, {<r16=>0x0}, {}, {}, {}, {}, {0x0, <r17=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r18=>0x0}, {}, {<r19=>0x0}, {}, {0x0, <r20=>0x0}, {0x0, <r21=>0x0}, {}, {}, {}, {}, {}, {}, {<r22=>0x0}, {}, {}, {<r23=>0x0, <r24=>0x0}, {}, {0x0, <r25=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r26=>0x0}, {<r27=>0x0}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r28=>0x0}, {}, {}, {}, {0x0, <r29=>0x0}, {}, {<r30=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r31=>0x0}, {0x0, <r32=>0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r33=>0x0}, {<r34=>0x0, <r35=>0x0}, {}, {}, {}, {}, {<r36=>0x0}, {0x0, <r37=>0x0}, {0x0, <r38=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r39=>0x0}, {<r40=>0x0}, {<r41=>0x0}, {}, {}, {}, {}, {}, {}, {<r42=>0x0}, {<r43=>0x0, <r44=>0x0}, {}, {}, {0x0, <r45=>0x0}, {}, {<r46=>0x0}, {}, {}, {}, {0x0, <r47=>0x0}, {}, {<r48=>0x0, <r49=>0x0}, {}, {}, {0x0, <r50=>0x0}, {}, {}, {}, {<r51=>0x0}, {}, {0x0, <r52=>0x0}, {}, {}, {<r53=>0x0}, {}, {}, {<r54=>0x0}, {}, {}, {<r55=>0x0}, {}, {}, {}, {}, {}, {}, {<r56=>0x0, <r57=>0x0}, {<r58=>0x0}, {}, {}, {}, {}, {0x0, <r59=>0x0}, {<r60=>0x0}, {}, {<r61=>0x0}, {}, {}, {0x0, <r62=>0x0}, {}, {}, {<r63=>0x0}, {0x0, <r64=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r65=>0x0}, {}, {}, {0x0, <r66=>0x0}, {}, {}, {0x0, <r67=>0x0}, {}, {}, {}, {}, {}, {<r68=>0x0, <r69=>0x0}, {}, {}, {<r70=>0x0, <r71=>0x0}, {}, {}, {<r72=>0x0}, {0x0, <r73=>0x0}, {0x0, <r74=>0x0}, {}, {}, {<r75=>0x0}], 0xd8, "c3b057e37f7fda"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000004cbc0)={0xfff, [{}, {}, {}, {<r76=>0x0}, {}, {0x0, <r77=>0x0}, {}, {}, {}, {0x0, <r78=>0x0}, {0x0, <r79=>0x0}, {}, {}, {0x0, <r80=>0x0}, {}, {}, {}, {}, {<r81=>0x0}, {0x0, <r82=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r83=>0x0}, {}, {}, {}, {<r84=>0x0}, {}, {}, {<r85=>0x0, <r86=>0x0}, {}, {}, {}, {<r87=>0x0}, {}, {<r88=>0x0}, {}, {}, {}, {<r89=>0x0}, {}, {0x0, <r90=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r91=>0x0}, {0x0, <r92=>0x0}, {}, {}, {0x0, <r93=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r94=>0x0}, {}, {}, {}, {}, {}, {}, {<r95=>0x0}, {<r96=>0x0}, {}, {}, {}, {<r97=>0x0}, {}, {}, {}, {}, {0x0, <r98=>0x0}, {}, {}, {}, {<r99=>0x0}, {}, {0x0, <r100=>0x0}, {0x0, <r101=>0x0}, {0x0, <r102=>0x0}, {}, {}, {}, {}, {<r103=>0x0}, {}, {}, {<r104=>0x0}, {}, {}, {}, {<r105=>0x0}, {<r106=>0x0}, {}, {0x0, <r107=>0x0}, {}, {}, {}, {}, {}, {}, {<r108=>0x0}, {}, {<r109=>0x0}, {<r110=>0x0}, {}, {0x0, <r111=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r112=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r113=>0x0}, {}, {}, {}, {<r114=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r115=>0x0}, {}, {}, {0x0, <r116=>0x0}, {<r117=>0x0}, {}, {}, {}, {}, {0x0, <r118=>0x0}, {}, {}, {}, {}, {}, {<r119=>0x0}, {}, {}, {}, {0x0, <r120=>0x0}, {0x0, <r121=>0x0}, {0x0, <r122=>0x0}, {}, {}, {}, {0x0, <r123=>0x0}, {}, {}, {}, {}, {0x0, <r124=>0x0}, {}, {}, {<r125=>0x0}, {}, {}, {0x0, <r126=>0x0}, {}, {0x0, <r127=>0x0}, {0x0, <r128=>0x0}, {<r129=>0x0}, {}, {}, {<r130=>0x0}, {0x0, <r131=>0x0}, {}, {}, {}, {0x0, <r132=>0x0}, {}, {<r133=>0x0}, {0x0, <r134=>0x0}, {}, {}, {}, {}, {0x0, <r135=>0x0}, {<r136=>0x0, <r137=>0x0}, {<r138=>0x0}, {}, {}, {}, {0x0, <r139=>0x0}, {}, {<r140=>0x0}, {0x0, <r141=>0x0}, {}, {}, {0x0, <r142=>0x0}, {<r143=>0x0}, {}, {}, {}, {}, {0x0, <r144=>0x0}, {}, {}, {0x0, <r145=>0x0}, {}, {}, {<r146=>0x0}, {}, {0x0, <r147=>0x0}, {0x0, <r148=>0x0}, {<r149=>0x0}, {0x0, <r150=>0x0}], 0x7, "9cc3d2f815816e"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={<r151=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055580)={0xffffffffffffffe1, [{}, {}, {}, {0x0, <r152=>0x0}, {}, {<r153=>0x0}, {<r154=>0x0}, {<r155=>0x0}, {0x0, <r156=>0x0}, {<r157=>0x0}, {}, {}, {0x0, <r158=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r159=>0x0}, {}, {0x0, <r160=>0x0}, {}, {}, {}, {}, {0x0, <r161=>0x0}, {}, {<r162=>0x0}, {}, {}, {}, {}, {}, {<r163=>0x0, <r164=>0x0}, {}, {}, {}, {<r165=>0x0}, {}, {}, {}, {0x0, <r166=>0x0}, {}, {}, {}, {}, {<r167=>0x0, <r168=>0x0}, {}, {}, {}, {}, {}, {}, {}, {<r169=>0x0}, {<r170=>0x0}, {}, {}, {0x0, <r171=>0x0}, {}, {0x0, <r172=>0x0}, {}, {0x0, <r173=>0x0}, {<r174=>0x0}, {}, {<r175=>0x0}, {}, {<r176=>0x0}, {}, {<r177=>0x0}, {}, {}, {<r178=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r179=>0x0}, {}, {}, {<r180=>0x0}, {0x0, <r181=>0x0}, {r151}, {<r182=>0x0, <r183=>0x0}, {}, {}, {}, {<r184=>0x0, <r185=>0x0}, {}, {}, {0x0, <r186=>0x0}, {<r187=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r188=>0x0}, {0x0, <r189=>0x0}, {}, {}, {}, {}, {0x0, <r190=>0x0}, {}, {0x0, <r191=>0x0}, {0x0, <r192=>0x0}, {}, {}, {}, {0x0, <r193=>0x0}, {}, {}, {}, {}, {}, {<r194=>0x0}, {}, {}, {}, {}, {}, {}, {<r195=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r196=>0x0}, {}, {}, {}, {}, {<r197=>0x0}, {}, {}, {}, {0x0, <r198=>0x0}, {0x0, <r199=>0x0}, {}, {}, {0x0, <r200=>0x0}, {}, {0x0, <r201=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r202=>0x0}, {}, {}, {}, {}, {0x0, <r203=>0x0}, {}, {}, {}, {}, {0x0, <r204=>0x0}, {}, {<r205=>0x0}, {0x0, <r206=>0x0}, {0x0, <r207=>0x0}, {}, {}, {}, {0x0, <r208=>0x0}, {<r209=>0x0, <r210=>0x0}, {<r211=>0x0}, {}, {<r212=>0x0}, {}, {0x0, <r213=>0x0}, {}, {<r214=>0x0}, {}, {}, {}, {}, {}, {}, {0x0, <r215=>0x0}, {}, {<r216=>0x0}, {}, {}, {<r217=>0x0}, {<r218=>0x0}, {<r219=>0x0}, {}, {0x0, <r220=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r221=>0x0}, {<r222=>0x0}, {}, {0x0, <r223=>0x0}, {}, {}, {}, {}, {}, {}, {}, {<r224=>0x0}, {}, {}, {}, {}, {<r225=>0x0}], 0xd8, "c3b057e37f7fda"})
r226 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r226, 0xfffff000)
flistxattr(r226, &(0x7f00000010c0)=""/200, 0xc8)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000900)={0x0, ""/256, 0x0, <r227=>0x0})
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000011c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0xff})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000004c140)={0x0, ""/256, 0x0, <r228=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b580)={0x0, [{}, {r84}, {}, {r63, r35}, {r162, r220}, {r51}, {r65, r203}, {r211}, {r8, r17}, {r197}, {0x0, r33}, {0x0, r82}, {0x0, r120}, {0x0, r21}, {r195}, {}, {r209, r45}, {}, {}, {0x0, r90}, {}, {r99}, {r153, r18}, {r178}, {r105}, {0x0, r127}, {0x0, r118}, {r205}, {r89, r5}, {0x0, r62}, {}, {}, {0x0, r102}, {0x0, r208}, {r56}, {r177, r123}, {r112, r98}, {r175}, {0x0, r11}, {r48, r80}, {}, {}, {r216, r132}, {r222}, {0x0, r152}, {}, {r65, r173}, {r97, r15}, {r114}, {r136, r26}, {0x0, r206}, {0x0, r141}, {}, {}, {}, {0x0, r49}, {}, {}, {}, {0x0, r47}, {r218}, {0x0, r134}, {}, {r9}, {r28, r20}, {}, {r157}, {0x0, r24}, {0x0, r139}, {}, {}, {r133}, {r143}, {0x0, r199}, {}, {}, {0x0, r25}, {r217}, {}, {}, {r42}, {0x0, r14}, {}, {0x0, r67}, {}, {r87}, {}, {}, {}, {r36}, {r155}, {r81}, {r108, r179}, {}, {}, {}, {r170}, {}, {r95, r111}, {}, {r60}, {r196, r121}, {}, {}, {r53, r147}, {0x0, r158}, {0x0, r122}, {}, {}, {0x0, r91}, {r110}, {r23, r156}, {}, {}, {0x0, r185}, {}, {r225, r32}, {}, {0x0, r213}, {r119}, {}, {r54, r191}, {}, {r58}, {0x0, r166}, {r167, r166}, {0x0, r193}, {r75, r166}, {r68}, {0x0, r188}, {r149, r190}, {r46}, {r40, r204}, {r165, r86}, {r13}, {r106}, {r140}, {0x0, r64}, {}, {r83, r59}, {r10, r92}, {}, {}, {0x0, r78}, {r55}, {r30}, {}, {0x0, r210}, {0x0, r29}, {r176, r183}, {0x0, r115}, {}, {}, {}, {r4}, {0x0, r160}, {0x0, r213}, {0x0, r201}, {r212}, {}, {r6, r101}, {r103, r160}, {0x0, r31}, {0x0, r93}, {r63, r71}, {0x0, r116}, {r94, r44}, {r169, r145}, {r202}, {0x0, r193}, {}, {r194, r172}, {0x0, r164}, {r104}, {}, {r174}, {r84}, {r72}, {r27}, {0x0, r12}, {}, {r146}, {r43, r102}, {r129, r128}, {0x0, r73}, {0x0, r198}, {r214, r80}, {r184, r131}, {r16, r50}, {0x0, r107}, {0x0, r142}, {}, {}, {r224, r74}, {0x0, r113}, {0x0, r189}, {}, {0x0, r137}, {}, {}, {0x0, r181}, {0x0, r37}, {r19, r79}, {r169, r77}, {0x0, r168}, {r34}, {r219, r39}, {r76}, {}, {}, {r130, r100}, {0x0, r192}, {0x0, r66}, {0x0, r38}, {r61}, {r88}, {}, {}, {0x0, r150}, {0x0, r171}, {r70}, {0x0, r186}, {0x0, r135}, {}, {r117, r124}, {r112, r200}, {}, {r182}, {r138}, {}, {r163}, {r187}, {0x0, r93}, {0x0, r69}, {r125, r207}, {}, {}, {0x0, r126}, {0x0, r52}, {r154, r223}, {}, {r221}, {r85}, {r180}, {r96}, {0x0, r161}, {}, {r136, r148}, {}, {r41}, {0x0, r215}, {r109}, {}, {r159, r228}, {r22, r57}], 0xb, "b198707d3c4cd7"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004dbc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r144}, {r151, r227}], 0x1, "bd96b5f67f5e17"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000000c0)={r7, 0x0, "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", "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"})

15:29:56 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
read$usbmon(r0, 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, 0xffffffffffffffff, 0xfffff000)

[ 2603.778049] device wlan1 entered promiscuous mode
15:29:56 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x4000000)

15:29:56 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 64)

[ 2603.816368] FAULT_INJECTION: forcing a failure.
[ 2603.816368] name failslab, interval 1, probability 0, space 0, times 0
[ 2603.817772] CPU: 1 PID: 12109 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2603.818593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2603.819581] Call Trace:
[ 2603.819896]  dump_stack+0x107/0x167
[ 2603.820331]  should_fail.cold+0x5/0xa
[ 2603.820786]  ? create_object.isra.0+0x3a/0xa30
[ 2603.821337]  should_failslab+0x5/0x20
[ 2603.821786]  kmem_cache_alloc+0x5b/0x310
[ 2603.822273]  create_object.isra.0+0x3a/0xa30
[ 2603.822789]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2603.823394]  kmem_cache_alloc+0x159/0x310
[ 2603.823895]  vm_area_alloc+0x1c/0x110
[ 2603.824359]  mmap_region+0x982/0x1500
[ 2603.824816]  do_mmap+0x868/0x1370
[ 2603.825234]  vm_mmap_pgoff+0x198/0x1f0
[ 2603.825696]  ? randomize_page+0xb0/0xb0
[ 2603.826174]  ksys_mmap_pgoff+0x41c/0x560
[ 2603.826654]  ? find_mergeable_anon_vma+0x250/0x250
[ 2603.827238]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2603.827865]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2603.828478]  do_syscall_64+0x33/0x40
[ 2603.828920]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2603.829532] RIP: 0033:0x7fd237085b62
[ 2603.829973] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2603.832153] RSP: 002b:00007fd2345fb0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2603.833054] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd237085b62
[ 2603.833895] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000
[ 2603.834737] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000
[ 2603.835619] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100
[ 2603.836454] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2603.839181] device wlan1 left promiscuous mode
15:29:56 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
writev(r1, &(0x7f00000015c0)=[{&(0x7f00000004c0)="a8", 0x1}], 0x200004c1)
r2 = fcntl$getown(r0, 0x9)
sendmsg$netlink(r1, &(0x7f0000001340)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)=[{&(0x7f00000000c0)={0x1234, 0x24, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@typed={0xc, 0x10, 0x0, 0x0, @u64=0x698}, @nested={0x108d, 0x5f, 0x0, 0x1, [@generic="3f9a94a716a6f2966f", @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@loopback}, @generic="b47bd1809e3f45767d3a43905d880a3fbe9f2c3ba713cf669a45ff7c664b72178a87a10073073b967d506883edde29de64ffa8b613ba784595985aa8509a2de9c13a9c702a22d0d1472e95926084afd83a5ae77ba93111840534e4dbd83bf261bf600c3bc38c9291df23551707813e6ffdbfd243fce1bfd43beee317b5aa772cd6ab04009bcc96144b08c2682c19f15e93eccbe12943a44652d208b932063476e14a47fbe9b384969777409aefba49f07f8a7729d5deb5b3c6a95466fe5174b374cbbcf98467aa8ef21ce74b436b6ecf34517f58fcd1df32146ee15faf4a08880dcf521fdcfcabac5c0c0f1ac22597680d55984d54cbebaa5cd7b1b783e24b9255be214bee971d493191dd958b42494ce0c261d788ed882d86c4d74bf761f5f3a060aad3e524396e843ef9be9f1df02c4ce00accdf0ee5dd0ebff32f6535058fe1389d9740e19e644bfb23fceb91e89e94f159c23ed71e65ea0b61b17d551fb4a5ec94ddbe94c1da8e6a2d82795da50597aef1cb519e714c015d6741eedf83207ead68d630a882f29e5133a0308548ebc32a97e6066500b75c84aced928600b1a12d876dc8156680456fd9d2eb83f5dbe97b9bfa28dab0882cea75ed5ea03aed1a14ae4688fabddf2d7ce66d55f37f9d8787b1fc7213722cf9bbd1732f2d20eafb2819b0dc0ebb2a8fd3dc6866968159ecc8f0fbbdcaecedcc580ddf4ec65c734450ff3ee1e61141cacfd0ef0ac1080487497645bba9c925fc650dd0531b493d95bf223c86855f30328bf68071e446e977b9de43e2f3a37c2e2b0524fdc19d124479fa130c79a28cf4b5b2899e4ff6d7d6f7a329a4cf948e054755d89b80b29c196671f702834e9ba02d9cbe398794dd53d1273cf08dfb5b208de793ceec74308d39af64d38d35ef9c69e0551f17bee82027647b91a9ed188af8fa843a5d6e09255f9bc109d73748e5f2160c71425e3a0c88a9319eda9a6cb4294ab20edee4b43cf5b65e86bb6c90ab81027c6e9c0f37aded58ab2747cef9cd10939b18cc2056498c874dc90927be35bb23fd8c208bb4d7c60a42f380550dfc978c0f6f9a0c63a433c4d9ae416183650cf2fd9998b6dcfdbc79d41c979ad7ea1f35ce417e757cd04342fbad6638bb41e4b1503bc1eb7d8e15171e0d65b7739f14eaa6cb7a6c53b8cad8ba408d9fff893e46c74a9429ab68dcc64fdff724ff63a66c366ce9e24b95f84391c1c219c61fe2dde01be4cc925e7b3dfae48ab0d45f777893202e7b353efea50d602afc8099194b87b1be19c11097058e72b86b44af8f99468a25a79f20bdbea45d2f0d3913aef5e61522fb03fb7e22d999273c215347a4936291f60427a16567c660b428d7e2abc40fb4e47c632dc108fdf8076ded12c2f05cf2bd8ee515c48853aa3a6c4b01b1c42160b8e380e0738eb3cac08443e1a9b6838dd22ce15f34d2585a009a7dd66a78926476f6de402decb45fca8d6edafa519ed485d1f1ab0202ceda76c754d08c8bc2c01cfd04813fb50e1f9231771357e07d5bace6a6a8c5f32cc89047477b7d503c4cd4581ca8c696852c7b6c58961d948ea6076efb671ba736f038efce339677f874ee69950c3eff3b8ae7162b2cb230fc6421625180b7c47f44bbe35f56f7ea776618f3ef1c42870104a62bac9f3e48484fd15e3a0bab110815455ff96119389681fd7d97c3e76274f2be138069879066c8bf15696c76245ce7c3dc4fef06de1bf76f4ad64fdd56f5c2bcd5b6be7679b183e471b61291959533e8a4d7ce68e2081adadeb54991553140c2c5644585ec21906add431ca27c65ea12a67759ee1bf8e2c8deb58b90d2acf3c6b5c3c78879567719b3eb949fb4a820ef760f705768eeae0b33be49572a499dd444d8e86ca458e216668a8cce09be36dec7ed9a10e401081084adb0eab97481d68cded38beceb49af788ce08274d7e7b0e0794b94b72c4582042a753c383ed0c8230e0402d7f66df1bfacd807eb65744628fbdd7deef2e7e2b077699fc42937b85af74afdc265e4b9d0bec8d68315a0042f6af26788dd72fa393b005b8a082c14a8056698852278cc9276da55a8258eb8def65d49a275335a1d90a7675baf0dbc2354c883260d962dad497b5d3e80f24355ef02452838cb45f508bba0044e007797347014f207afbafa9c73eeef853f7ad6735a2b9b0e1d93655c66f53ba4a20c66ed1ced50acefe6ef7f1af25632611c9e986e8c972d3bf47ce0ad9c9cacaf8ddd89d161b35aac3cf04982d1aad484091f4689ad8e0410c69746fe1b82d37fbb21a896519472d335f1e3e1824314751c5362494c1d50623f8db9b9cd37d4a2741ebb739d328bb21673b02d770b12b5981df49a8fc497136bf640ec8d160bf8a6bd3b52bdfa499fce88583d5ccc8db97effd6749b3a0f3a3dd579845e5cb0900d5dc68787f52ee4e0f5a156a8917a411ce3dc9bdd90fa10e2629fb4d991330ca4e40ba98d45079795ac9e476be69f6af01b794bb3fb8c25891cc98c035e43271deff52d4b8e770a297f01b3cca919936071f94da9ab73052d51be83d662e14453fa3ffaea9263ce33fdd2d38b5223677f5b56f4fa08471b3abc3f5d71e819ee36d25c0ee83d1b12acaa8f714232d0955464abf1b369cd348bf23adad803eb97496e64cc75cf1e6eee09b3e87a816ce625337a97b24a773ab2ea7d73b42e37db2adf1aebc2a2946a152b22586e7557c418848f12dc8ce097e5d5bc0757c1a8e6fa7005603fe8a6ae79f6820ff54b4ce9bf93584c37bf035a237c3843f7d14e63465dd361608783bfb3c9b6fcf93643607087a95a3fb33bb1e90a6ade8ee76143642ae7df73d4feeccf8f3aa6a03f0579359fc18897802de9480d153e0c951d57c5e866770e19df46f647e5a00f18ff485787e25cb62800714464805c3ed5d62e3c66d792d3cb244097a42b142cfbf199224958899d60c5beecc4a4392e3a60df8ad324d91a079e74c984389c9cf2da5c4425d5a23621086008b5652f769033482c88d5c0e3bb19872f276528ca5d42656ebcc8906884edb2d44b70a9241e23794c134f67e75e395d2a31056fcae68f5379c34ea682f0dd88e6f5d9bff41a25e4a1a155f0c536391c882e588eb22c45b10541fab3ee43f86c46c0f49e91c9ca070b682aa9e1a993384c065dbb870b466ab6a9a61f7eb1e9c34c6c838333cdd8b87e2cfa468ccb6651259938e2e9a09df96058c577a30be869e2107bc8bcab37ab3771f27e83e11ffb71a04b720b994f9c569c5c01b11e531d1c70cb43fcbfa80ca51e0f6952e40ce067e5ba28eeb916f2111901b522cddb06a3375904a55f08957d2df2e6cfa4f75b6a8a0c1020cda551fb041fd7d5a72d289193103cfadf1af74c39532030ae2b31e0096932d98f2494b926d57e6b57c047d8eeab3c8baba19560aeb7b322cb5220afa61efbfc4886a2d5a3074a702f7a741a698f7757e3d5c626d6d136e49e028a3275671cf1c5af79494d92095a936bc40ec20931919dc48e1f6a0d70820db2e676f9a86e1ffeaff03b86ffdcf458e44523c97911eabee6714ad19469c2131bffef6fc4f1f98b92f03c0d3ed7d26d634b27e2a18fa39287976a66b9045f4ab9615f652071140995f73f90be2a3e863b4277aae442435afd95f92afdbd8835dd06e7d26cc47a3f2019944e784f1d8d96f5ebd2c4481050fc7b1df8f8758a20b9ab95ddddf944abd93d353eb68a66fc8d3f6880c918a53d256b39617b2ef0b4ed236f76331f54f927717f2e96094830206f966066a707afbe60fa91b8a9498f9758eb0403d7377c45c4dfb8385413e78a3ee454e04c365c271076f97d21510ea444f853062b69323f1aecfb780857ecfe0a3f97a5ddad250ddc021f0d75c5741a9bec74ebd38ed403334be8fa75f46fbf8631e7a3cd8d4377fc038aeee73b2db60e77293844f8791260349878175a9f9b02f5c82eb90c1e70339192fe040d0c89ec7a807053bce9438dd86419a74858b7ff215303b23adf11a05f6a3a9fd3d1bf8748d5666b4e8ac4b43ea0497c6e72f92a726b56a09253f79f468e95051a83dfbb8f23b4aee9ad4a5cd3e2709c80728a9bbc11a69aa57b5610ae28bd396b85f7ffe0b3f3d4b2f4d97c0796632d4c44d209933bba30dffd06cd8f8f98e8ee55118855508954601ea1cf79fb46db7625963b8f4409a8374012c3f2d29e07f80b42f5c9f1640019dcad231495d052c87e3636d7088f010b832a8c543f1ba9b6831ede14a8ca7e6dd1b9c703d89e78cd85bbf38a98b1767f306963e1029c1d4147906f2d4fe39f1513e64c9f0ad55e17b6a2d17807a09027ce40383605ce5db55c2ace775ce4207ebc98b981239b589779d098ae84b101f0817763f7e6d49bb4fb3e2ef9cac223b1eacf4c265f472ef8b817e250c2e7502a34fb0f85d3090b908972e899375c4f2b244334ad846668727ecf079d30b358407145b4c28de7cfe73ad3ea01dd82baa33a7296a16d52fcc0a7c76faac4f6372eaf89d3a60553ec63294ab9dc00003570ff179a1c08deb576844afc5a199999a55c99bec87271d0fc30d12b196d3e4d53107d4702a85c0403864aab769309093e3f47e78590c3c107b6a2a6ad0b28e3fa33f5a9baea4964dad7f2b43f7b50d12e2b32b358bb81e80865dea7f78d6fe9f3c4f5481b1957af04cb8675c30d9c19fc3d245c461c2c266cbbfa9b247f3209c267e82c34af0e2649b46769661d3a91458c999ad98e9960ccb114bc0d9a5740d6f3b4c24cf25cc90b748270159d98506629e7d3d71447825cafc78f0c8906e0ca3c9530a7feea63ab2c8b67b0c8f0696d9b58d5c6ab887374fc6a4a870e83704184fe1d18dc3430279f3af53e048fbd99b4dbd200db0c26ce7f2f0f44103044c2f364c873ef82c15f5c54bd2432a19288689e5d29b10df9395640d9200fc78346efb96da1380ef14386cc8e3dbf07e3c8aa202c6fbfe2c889fb852b5f6968bcfe18bb4f7de8be1005d9c035e1683c07e10100843853d338b9eb5f4705c8d0b0f0cffbacaf9f97f70e9ea06dec0035a6290587e71bba2150bb47c05066280db6f6aa6039f1176ef4a5a3f1d1a4b4803d8decf33c6c5058c5a968937b12309ca862ff549c72780766e688a59f54bf10d6713f5796c5e80f9d109be3afc0f83dae644c7687deac735e38fe803f96ac1a2eae0a75cb35765ba0c0d5fa03c494e86f260655d9f961041fed449519ce381074f1b9e8f604ed77e92c66cd34c0012741a869010231470905dee5627fd22b605a79bd02ea9b7dfa124bd145edf48182cdb7cc9c4be18f198077095dde09d36708f48ba37bfa8908f62b1671cd6bc079ab1e3a40c199c1bca370516a30f055a1976c88eb6154d0d5223a50939c36e19dac06f89b1c8d16084abd04e8ba619e62750d8a8ec41e20709328dfcab9db2a4d89b7a64c899077be24d606f237e370324bf53d91e5c9b5d876ab47499eddcc987b708296ae27b6b4329c9c1cd2f76202cad494b2ac58f3600fcbc42f9c2cc4a8049b668872b01c9814699710a7bd5d1239eb88a8bca40ad3df19339aa5bfc9b6dd959737a97a449da554283f6021ff262efbbfa02f6893c2d0d10201a3b32578e668a57b34e960b6825daed7e3d158518d6a8f3cd81779ca65b4a5746e09d80b2a970eedaae886e1a53ed638f5b5e5ebf06810a163f76a038d7de253e4ec8d44a98cf3a9bc572fba3095660cafd1fb7d135ffa0d419da6e88a229f61af40209a638ad0505e50d691347f8e0db8cfd7742514a556c5cd9a1042a0fddd08c929", @generic="c6f72ffd2d12b319f46e0878e20e1534d8d3bc497340481f5c3152a04b2c3063b08c0ece88c5dd4f6b7d2b0619d4797c7107ce01faee6e1efce4229bc713f29acf41624cefeb6eae6c321c9d626bd209224ea32dd16d535c2ae776cfca1308e34cc19ad3", @typed={0x11, 0x54, 0x0, 0x0, @str='/dev/usbmon#\x00'}]}, @typed={0x8, 0x86, 0x0, 0x0, @uid=0xee01}, @generic="62c4fcea26bf3c411df8fec71e405e98dc0e07b6dae0161a848ad7036435e50b1b2306ba340cda23204427a27b39dafd8a9e5411f6bee99bc5fb8af0d212fb211dfc01356274eaaeaacf18e697629acdb1f93c267d60", @typed={0x8, 0x95, 0x0, 0x0, @uid=0xee01}, @nested={0xb4, 0x37, 0x0, 0x1, [@generic="2bf2b1f03754e71b884bfddce7dc313117340842f2b905233eca8bc1d9c8f28d2d50749a6c7e0516b09a8a8c21a842e298b94f12e1dea3aaff2de207b30ca4c5db72188d94e50a44ab7206b645c0fd3c207c28935f83bc83134e79250d46eaeb227855acde1becf543594f61cae60216084674328b50ab89aac0ccaae20bf1ba77c66038fa59ae05a6e32bbb9bb494887b1de0fcb407087fc56d8813cd1a0bc89750af32", @generic, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x2340}]}, @generic, @generic="b55468bdea7bcaba9afbfcb0cc4fd197ee512e87cc5bf2d3b5af4696e269dbdea9d30f605275956e466b250287a7b5ba3914b8530c606ce4f3280be6cb12230f38a373bdf127b43eba32e725420d3c9314e7a25874986a9ee2c87520dbbd0adec59a217336b9a4d73a93d4"]}, 0x1234}], 0x1, &(0x7f0000001300)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}], 0x40, 0x8081}, 0x85)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)

[ 2603.853741] device wlan1 entered promiscuous mode
15:29:56 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, 0x0, 0x0, @inherit={0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000021170700000000000000b218ab90f3fad59a03000000cd000000000000000000000052c70000000000a580040000000000b664f17b02000000000000007eac03027c4830daa39375770000ffff00006eed22d900000000010000800000001e0900000000000000080000000000000004000000000000580b080623f1b53708916edf8ff0787ec46bff6b01731852cbd56f81b75fd3ac4ca517042584649f9e7f4d95c6065a837c327b014ea21797f0653bd3b4393154cab5d5f75b19511ce6e28b5e493c28a969caf5c0be65575e098fe6980d3d89c27d6ba5a22c9c49802473d0b1"]}, @devid})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xa)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'nr0\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000480))
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x2e8002, 0x0)
r3 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x3, 0x6eaa4808, 0x401})
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
r4 = socket$inet(0x2, 0xa, 0x0)
poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x3330}], 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x197f8000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000002c0))
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r0, 0x4000)

15:29:56 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x10000000, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x40014e, 0x40282)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x1f012, r0, 0xfffff000)

15:29:56 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0x0)
syz_io_uring_setup(0x6f65, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (fail_nth: 65)

[ 2603.895406] device wlan1 left promiscuous mode
[ 2603.913802] FAULT_INJECTION: forcing a failure.
[ 2603.913802] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2603.915266] CPU: 1 PID: 12126 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2603.916068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2603.917014] Call Trace:
[ 2603.917322]  dump_stack+0x107/0x167
[ 2603.917744]  should_fail.cold+0x5/0xa
[ 2603.918181]  __alloc_pages_nodemask+0x182/0x600
[ 2603.918712]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2603.919404]  ? walk_mem_res+0x170/0x170
[ 2603.919869]  alloc_pages_current+0x187/0x280
[ 2603.920374]  pte_alloc_one+0x16/0x1a0
[ 2603.920809]  __pte_alloc+0x1d/0x330
[ 2603.921228]  remap_pfn_range_internal+0x9a3/0xf60
[ 2603.921788]  ? lookup_memtype+0x5b/0x200
[ 2603.922258]  ? apply_to_existing_page_range+0x40/0x40
[ 2603.922856]  remap_pfn_range+0xcd/0x160
[ 2603.923308]  ? remap_pfn_range_notrack+0x70/0x70
[ 2603.923855]  ? memcg_slab_post_alloc_hook+0x17a/0x430
[ 2603.924447]  io_uring_mmap+0x398/0x530
[ 2603.924891]  mmap_file+0x5e/0xe0
[ 2603.925275]  mmap_region+0xc4d/0x1500
[ 2603.925713]  do_mmap+0x868/0x1370
[ 2603.926112]  vm_mmap_pgoff+0x198/0x1f0
[ 2603.926556]  ? randomize_page+0xb0/0xb0
[ 2603.927013]  ksys_mmap_pgoff+0x41c/0x560
[ 2603.927479]  ? find_mergeable_anon_vma+0x250/0x250
[ 2603.928041]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2603.928637]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2603.929229]  do_syscall_64+0x33/0x40
[ 2603.929649]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2603.930233] RIP: 0033:0x7fd237085b62
[ 2603.930654] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2603.932762] RSP: 002b:00007fd2345fb0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2603.933631] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd237085b62
[ 2603.934436] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000
[ 2603.935247] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000
[ 2603.936063] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100
[ 2603.936868] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
15:29:56 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r2, 0x0)
dup2(r1, r2)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x1f012, r0, 0xa000000)

15:29:56 executing program 1:
pipe(&(0x7f0000000040))
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x4, 0x8})

[ 2603.984050] ------------[ cut here ]------------
[ 2603.984719] WARNING: CPU: 1 PID: 12126 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270
[ 2603.985786] Modules linked in:
[ 2603.986197] CPU: 1 PID: 12126 Comm: syz-executor.0 Not tainted 5.10.252 #1
[ 2603.986989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2603.987979] RIP: 0010:get_pat_info+0x216/0x270
[ 2603.988524] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 b1 88 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 9a 88 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 b5 a5 5a 00 e9
[ 2603.990658] RSP: 0018:ffff888043817890 EFLAGS: 00010206
[ 2603.991289] RAX: 0000000000013500 RBX: ffff888017619e00 RCX: ffffc900007e3000
[ 2603.992144] RDX: 0000000000040000 RSI: ffffffff81125466 RDI: 0000000000000007
[ 2603.992960] RBP: ffff888043817948 R08: 0000000000000000 R09: ffff888043817818
[ 2603.993801] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028
[ 2603.994637] R13: 1ffff11008702f12 R14: 0000000000000000 R15: ffff888017619e50
[ 2603.995485] FS:  00007fd2345fb700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 2603.996428] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2603.997108] CR2: 00005627e8a99480 CR3: 0000000043974000 CR4: 0000000000350ee0
[ 2603.997938] Call Trace:
[ 2603.998268]  ? pgprot_writethrough+0xc0/0xc0
[ 2603.998771]  ? finish_task_switch+0x126/0x5d0
[ 2603.999305]  ? finish_task_switch+0xef/0x5d0
[ 2603.999841]  untrack_pfn+0xdc/0x240
[ 2604.000277]  ? track_pfn_insert+0x150/0x150
[ 2604.000777]  ? lock_downgrade+0x6d0/0x6d0
[ 2604.001279]  ? uprobe_munmap+0x1c/0x560
[ 2604.001757]  unmap_single_vma+0x1bc/0x300
[ 2604.002266]  zap_page_range_single+0x2ce/0x450
[ 2604.002804]  ? unmap_single_vma+0x300/0x300
[ 2604.003323]  ? remap_pfn_range_internal+0xc56/0xf60
[ 2604.003903]  ? lookup_memtype+0x5b/0x200
[ 2604.004398]  ? apply_to_existing_page_range+0x40/0x40
[ 2604.004999]  remap_pfn_range+0x139/0x160
[ 2604.005484]  ? remap_pfn_range_notrack+0x70/0x70
[ 2604.006027]  ? memcg_slab_post_alloc_hook+0x17a/0x430
[ 2604.006640]  io_uring_mmap+0x398/0x530
[ 2604.007116]  mmap_file+0x5e/0xe0
[ 2604.007514]  mmap_region+0xc4d/0x1500
[ 2604.007967]  do_mmap+0x868/0x1370
[ 2604.008404]  vm_mmap_pgoff+0x198/0x1f0
[ 2604.008869]  ? randomize_page+0xb0/0xb0
[ 2604.009364]  ksys_mmap_pgoff+0x41c/0x560
[ 2604.009841]  ? find_mergeable_anon_vma+0x250/0x250
[ 2604.010449]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2604.011093]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2604.011710]  do_syscall_64+0x33/0x40
[ 2604.012177]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2604.012783] RIP: 0033:0x7fd237085b62
[ 2604.013746] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2604.019721] RSP: 002b:00007fd2345fb0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2604.022164] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd237085b62
[ 2604.022974] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffa000
[ 2604.023820] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000
[ 2604.024659] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100
[ 2604.025495] R13: 0000000020ff9000 R14: 00000000200000c0 R15: 0000000020ffa000
[ 2604.026339] irq event stamp: 1335
[ 2604.026739] hardirqs last  enabled at (1343): [<ffffffff8129becd>] console_unlock+0x92d/0xb40
[ 2604.027742] hardirqs last disabled at (1352): [<ffffffff8129bdd9>] console_unlock+0x839/0xb40
[ 2604.028741] softirqs last  enabled at (826): [<ffffffff84001092>] asm_call_irq_on_stack+0x12/0x20
[ 2604.029765] softirqs last disabled at (761): [<ffffffff84001092>] asm_call_irq_on_stack+0x12/0x20
[ 2604.030783] ---[ end trace 15eb0860cfde92c6 ]---

VM DIAGNOSIS:
15:29:57  Registers:
info registers vcpu 0
RAX=00000000005da980 RBX=0000000000000010 RCX=000000c0000fcc00 RDX=000000c007caf580
RSI=00000000000055aa RDI=00000000008e08e0 RBP=000000c00400b0c8 RSP=000000c00400b090
R8 =0000000000ea8ac0 R9 =0000000000ea89c0 R10=0000000000000002 R11=0000000000000011
R12=00000000000000f1 R13=0000000000000000 R14=0000000000e5dacd R15=0000000000000000
RIP=00000000005da9a6 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000000c000030410 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff27febcd58 CR3=000000001a652000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000038 XMM01=adb9639af4bdc7312adeb75078f3a819
XMM02=a19c02961165bc06de04e561d32dd580 XMM03=7b4d268d0e19836b03ac26314020c0a9
XMM04=883775749f141706ce2d7bf2f85b8537 XMM05=e9a19e061dc7a75278adb9639af4bdc7
XMM06=06de04e561d32dd580017fa990f23168 XMM07=cce6b6acba3970e00ba19c02961165bc
XMM08=6b03ac26314020c0a92fe9c42ac89fb4 XMM09=eb5ef80538d833e0497b4d268d0e1983
XMM10=8413fb05fc5898e16e7f6bf38aa822e6 XMM11=43bef2b3cb7ad070c631f4ca0254c1cb
XMM12=7284ebb017227c87f6d60d211f6c1e0c XMM13=0000000000000000968cf7c05f65f4de
XMM14=000000280000000003340704ea020000 XMM15=00000000000000006174616400000000
info registers vcpu 1
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822e8271 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff8880438171d8
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001
R12=0000000000000030 R13=0000000000000030 R14=ffffffff879fa200 R15=dffffc0000000000
RIP=ffffffff822e82c8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd2345fb700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005627e8a99480 CR3=0000000043974000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273
XMM02=000000000000000000ffffffff000000 XMM03=00007fd23716c7c800007fd23716c7c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000