, 0xe8b02, 0x0) 23:00:51 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 23:00:51 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = dup3(r1, r0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000180)) r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="e20600429503c18903da2ddaca4c713c"]) statx(r3, &(0x7f00000003c0)='./file0\x00', 0x6000, 0x80, &(0x7f0000000580)) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000240), 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x401, 0x0, 0x1}, 0xb7) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0', [{0x20, 'ext4\x00'}, {0x20, '\x00'}, {0x20, 'ext4\x00'}, {0x20, '}'}, {0x20, 'ext4\x00'}, {0x20, ':\x00'}, {0x20, '\x00'}, {}, {}, {0x20, 'ext4\x00'}], 0xa, "f804d5345fc44e786812a4a013f6de3e14fedd8f9bbc600a7d33b2ca200546884191a5494927536bf2737bf832af494d5b8f59b8145888b515198948436f2046794249a433ee4a007f437aed24f6cfbd0ee2c182030e9560428bdb70b77207e006157955a656101268e0423175d9a8229f512d02b766197aa0"}, 0xa7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x100) 23:00:51 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 4) 23:00:51 executing program 3: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 486.014527] FAULT_INJECTION: forcing a failure. [ 486.014527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.017353] CPU: 0 PID: 5937 Comm: syz-executor.4 Not tainted 5.10.258 #1 [ 486.018735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 486.020402] Call Trace: [ 486.020940] dump_stack+0x107/0x167 [ 486.021678] should_fail.cold+0x5/0xa [ 486.022449] _copy_to_user+0x2e/0x180 [ 486.023233] simple_read_from_buffer+0xcc/0x160 [ 486.024188] proc_fail_nth_read+0x198/0x230 [ 486.025087] ? proc_sessionid_read+0x230/0x230 [ 486.026019] ? security_file_permission+0xb1/0xe0 [ 486.026991] ? proc_sessionid_read+0x230/0x230 [ 486.027881] vfs_read+0x228/0x620 [ 486.028569] ksys_read+0x12d/0x260 [ 486.029286] ? vfs_write+0xb10/0xb10 [ 486.030055] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 486.031103] ? syscall_enter_from_user_mode+0x1d/0x50 [ 486.032135] do_syscall_64+0x33/0x40 [ 486.032886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 486.033913] RIP: 0033:0x7fe4760b069c [ 486.034668] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 486.038274] RSP: 002b:00007fe473673170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 486.039305] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 486.039771] RAX: ffffffffffffffda RBX: 000000000000003c RCX: 00007fe4760b069c [ 486.039815] RDX: 000000000000000f RSI: 00007fe4736731e0 RDI: 0000000000000007 [ 486.044368] RBP: 00007fe4736731d0 R08: 0000000000000000 R09: 0000000000000000 [ 486.045780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.047201] R13: 00007ffeec9c909f R14: 00007fe473673300 R15: 0000000000022000 [ 486.048510] FAULT_INJECTION: forcing a failure. [ 486.048510] name failslab, interval 1, probability 0, space 0, times 0 [ 486.051634] CPU: 1 PID: 5944 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 486.053307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 486.055267] Call Trace: [ 486.056024] dump_stack+0x107/0x167 [ 486.056957] should_fail.cold+0x5/0xa [ 486.057871] ? alloc_bprm+0x51/0x8f0 [ 486.058936] should_failslab+0x5/0x20 [ 486.059878] kmem_cache_alloc_trace+0x55/0x320 [ 486.060943] ? lock_downgrade+0x6d0/0x6d0 [ 486.061923] alloc_bprm+0x51/0x8f0 [ 486.062780] ? __virt_addr_valid+0x170/0x5d0 [ 486.063837] do_execveat_common+0x275/0x8d0 [ 486.064852] ? strncpy_from_user+0x9e/0x470 [ 486.065873] ? bprm_execve+0x1960/0x1960 [ 486.066851] __x64_sys_execveat+0xed/0x140 [ 486.067847] do_syscall_64+0x33/0x40 [ 486.068714] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 486.069893] RIP: 0033:0x7fc5ee6e0b19 [ 486.070757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 486.075238] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 486.077117] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 486.078913] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 486.080697] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 486.082432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.084214] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:00:51 executing program 3: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 486.147103] loop2: detected capacity change from 0 to 16776704 23:00:51 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 23:00:51 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 23:00:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) [ 486.204171] EXT4-fs (loop2): Unrecognized mount option "â" or missing value [ 486.218941] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:00:51 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 23:00:51 executing program 3: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:00:51 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 23:00:51 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 5) [ 486.364001] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 486.369600] FAULT_INJECTION: forcing a failure. [ 486.369600] name failslab, interval 1, probability 0, space 0, times 0 [ 486.372083] CPU: 1 PID: 5971 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 486.373540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 486.375317] Call Trace: [ 486.375899] dump_stack+0x107/0x167 [ 486.376671] should_fail.cold+0x5/0xa [ 486.377480] ? create_object.isra.0+0x3a/0xa30 [ 486.378449] should_failslab+0x5/0x20 [ 486.379258] kmem_cache_alloc+0x5b/0x310 [ 486.380129] create_object.isra.0+0x3a/0xa30 [ 486.381059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 486.382145] kmem_cache_alloc_trace+0x151/0x320 [ 486.383121] ? lock_downgrade+0x6d0/0x6d0 [ 486.383999] alloc_bprm+0x51/0x8f0 [ 486.384756] ? __virt_addr_valid+0x170/0x5d0 [ 486.385687] do_execveat_common+0x275/0x8d0 [ 486.386613] ? strncpy_from_user+0x9e/0x470 [ 486.387520] ? bprm_execve+0x1960/0x1960 [ 486.388399] __x64_sys_execveat+0xed/0x140 [ 486.389295] do_syscall_64+0x33/0x40 [ 486.390086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 486.391167] RIP: 0033:0x7fc5ee6e0b19 [ 486.391947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 486.395847] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 486.397449] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 486.398972] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 486.400480] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 486.402000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.403512] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:01:08 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 23:01:08 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 6) 23:01:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 503.450557] FAULT_INJECTION: forcing a failure. [ 503.450557] name failslab, interval 1, probability 0, space 0, times 0 [ 503.452138] CPU: 1 PID: 5982 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 503.453452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 503.456068] Call Trace: [ 503.456985] dump_stack+0x107/0x167 [ 503.458174] should_fail.cold+0x5/0xa [ 503.459476] ? mm_alloc+0x19/0xd0 [ 503.460600] should_failslab+0x5/0x20 [ 503.461833] kmem_cache_alloc+0x5b/0x310 [ 503.463302] ? kasan_unpoison_shadow+0x33/0x50 [ 503.464922] mm_alloc+0x19/0xd0 [ 503.466080] alloc_bprm+0x1cb/0x8f0 [ 503.467290] ? __virt_addr_valid+0x170/0x5d0 [ 503.468748] do_execveat_common+0x275/0x8d0 [ 503.470208] ? strncpy_from_user+0x9e/0x470 [ 503.471689] ? bprm_execve+0x1960/0x1960 [ 503.473030] __x64_sys_execveat+0xed/0x140 [ 503.474471] do_syscall_64+0x33/0x40 [ 503.475685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 503.477493] RIP: 0033:0x7fc5ee6e0b19 23:01:08 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:01:08 executing program 7: keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000580)='syzkaller\x00', &(0x7f0000001500)=@secondary) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "37ef40461c4985b0b1a3b6861e3b5f4db5150471000ef1c1cfdfff771afca36d0a87710f524091d111b12a148eabadcf0052dfc694095936619ca28f0ba12e72"}, 0x48, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000340)='@/}/%-\x00', r1) add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, r1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000380)='.request_key_auth\x00', &(0x7f0000000140)=@secondary) timer_gettime(0x0, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0x19, 0x1, @thr={&(0x7f0000000480)="e6ef30a3a82fbf2721d2a51903", &(0x7f00000004c0)="1dfddac721fc2c7683ea1c370f5e6e467e2db322b3b5f93c7904c9f49126bda233880c3828142ad76faee8aa582197bb7b425921a2afcaaaed4023309c5cbb40e419608e119b1f66513697eae15a0b019622e5a8e6429f0667e547239cb9bfdc80482efdc1d4449c5f1f42483c3bb72abfb47c174feb54a4ccda8dfb1f47118a2209162abaa89c0688c0b11fb40000bd63772d7b7ea8d8"}}, &(0x7f0000000440)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x0, 0x40000000, 0x3, 0x0, 0x1}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 23:01:08 executing program 3: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r2}]}]}, 0x28}}, 0x0) 23:01:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x3c, 0x0) 23:01:08 executing program 2: getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000140), &(0x7f0000000040)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='wchan\x00') getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) [ 503.481552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.488189] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 503.489422] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 503.490945] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 503.490955] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 503.490962] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 503.490970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.490977] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:01:08 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:01:08 executing program 3: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r2}]}]}, 0x28}}, 0x0) 23:01:08 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 23:01:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xa3ec296a00000000, 0x0) 23:01:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x1, 0x3, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x46e2, 0x89) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000200)=0x1) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000140), 0x0, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x6, 0xb20a}, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x203080, 0x100, 0x10}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r4}}, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xff, 0x7f, 0x9, 0x5, 0x0, 0x8001, 0x840, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x0, @perf_config_ext={0x8, 0x6978}, 0x10000, 0x7ff, 0x9, 0x5, 0x9, 0x9, 0x80, 0x0, 0x1f, 0x0, 0x200}, 0x0, 0x3, 0xffffffffffffffff, 0x1) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x41e502, 0x32) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000480)=ANY=[], 0x10) sendfile(r3, r5, &(0x7f0000000080)=0x2, 0x8) 23:01:08 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 503.700654] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:01:08 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 7) 23:01:08 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 23:01:08 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x2) 23:01:08 executing program 3: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 503.793782] FAULT_INJECTION: forcing a failure. [ 503.793782] name failslab, interval 1, probability 0, space 0, times 0 [ 503.798615] CPU: 1 PID: 6018 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 503.801458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 503.804885] Call Trace: [ 503.805978] dump_stack+0x107/0x167 [ 503.807694] should_fail.cold+0x5/0xa [ 503.809156] ? create_object.isra.0+0x3a/0xa30 [ 503.810904] should_failslab+0x5/0x20 [ 503.812469] kmem_cache_alloc+0x5b/0x310 [ 503.813986] create_object.isra.0+0x3a/0xa30 [ 503.815708] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 503.817710] kmem_cache_alloc+0x159/0x310 [ 503.819444] mm_alloc+0x19/0xd0 [ 503.820832] alloc_bprm+0x1cb/0x8f0 [ 503.822313] ? __virt_addr_valid+0x170/0x5d0 [ 503.824101] do_execveat_common+0x275/0x8d0 [ 503.825865] ? strncpy_from_user+0x9e/0x470 [ 503.827585] ? bprm_execve+0x1960/0x1960 [ 503.829231] __x64_sys_execveat+0xed/0x140 [ 503.831017] do_syscall_64+0x33/0x40 [ 503.832591] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 503.834693] RIP: 0033:0x7fc5ee6e0b19 [ 503.836189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.843705] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 503.846703] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 503.849722] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 503.852698] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 503.855701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.858613] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 503.879996] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:01:08 executing program 7: timer_create(0x5, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000400)={{r0}, "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"}) clone3(&(0x7f00000001c0)={0x141a0e00, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0, 0x4, {r0}}, 0x58) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) 23:01:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:01:08 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r2}]}]}, 0x28}}, 0x0) 23:01:09 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 23:01:09 executing program 3: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 503.954373] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 503.976918] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:01:09 executing program 7: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) truncate(&(0x7f0000000140)='./file0\x00', 0x8) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0xe0, 0x0, 0x8, 0x0, 0x9, 0x7fff, 0x0, 0x807e, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mq_getsetattr(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) chroot(&(0x7f0000000180)='./file1\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) pidfd_getfd(r1, r3, 0x0) pread64(r2, &(0x7f0000000440)=""/158, 0x9e, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14}, 0x40100}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x1) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000001600)={{'\x00', 0x3}, {}, 0x83, 0x0, 0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000500)="3668aa2f85f49a2919feff81c2652942c221bbf9b18ec9b23f260b27654ad1f40a12bad0c42c42ec4acaf238e00663e49bbd1701109941354d49a873bc3a9d0b73e839e29cfde22e8f5fa6980a5afc134c57fdf93808d0582357171f873ab00596dd3b1d47a19cb490ae9ef4756f40570e6a938bc126a81937ee747894b132df9f06c7ed577ee953ace4312850e1c8360738c935e3bfe44262f6afa3a37ae5ae7e84785a159f88d4c985e0d3e60cf87836b4f7d4f15f883f416cae9e907525ee277748878da955cb7f8d3163183952b68472eb83880d", 0xd6, 0x0, &(0x7f0000001e00)=ANY=[], 0x10d6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x10000, 0x18c) unlinkat(r5, &(0x7f0000000200)='./file0\x00', 0x0) 23:01:09 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 23:01:09 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r2}]}]}, 0x28}}, 0x0) 23:01:09 executing program 3: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 504.080127] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:01:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x8) [ 504.112143] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:01:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17, 0x1}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) 23:01:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:01:26 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2a40}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) read(r1, &(0x7f0000000200)=""/4096, 0x1000) [ 521.434093] loop7: detected capacity change from 0 to 41948160 23:01:26 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 23:01:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:01:26 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 521.443930] FAT-fs (loop7): bogus number of FAT structure [ 521.446141] FAT-fs (loop7): Can't find a valid FAT filesystem 23:01:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 8) [ 521.450713] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 521.460348] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:01:26 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x10) [ 521.479618] FAULT_INJECTION: forcing a failure. [ 521.479618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 521.481650] CPU: 1 PID: 6082 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 521.482774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 521.484092] Call Trace: [ 521.484501] dump_stack+0x107/0x167 [ 521.485066] should_fail.cold+0x5/0xa [ 521.485675] __alloc_pages_nodemask+0x182/0x600 [ 521.486427] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 521.487399] alloc_pages_current+0x187/0x280 [ 521.488090] __get_free_pages+0xc/0xa0 [ 521.488703] pgd_alloc+0x84/0x4e0 [ 521.489247] ? pgd_page_get_mm+0x40/0x40 [ 521.489861] ? lockdep_init_map_type+0x2c7/0x780 [ 521.490594] ? lockdep_init_map_type+0x2c7/0x780 [ 521.491256] mm_init+0x670/0xab0 [ 521.491723] mm_alloc+0xa2/0xd0 [ 521.492149] loop7: detected capacity change from 0 to 41948160 [ 521.492171] alloc_bprm+0x1cb/0x8f0 [ 521.492184] ? __virt_addr_valid+0x170/0x5d0 [ 521.492205] do_execveat_common+0x275/0x8d0 [ 521.494777] ? strncpy_from_user+0x9e/0x470 [ 521.495480] ? bprm_execve+0x1960/0x1960 [ 521.496143] __x64_sys_execveat+0xed/0x140 [ 521.496826] do_syscall_64+0x33/0x40 [ 521.497425] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 521.498222] RIP: 0033:0x7fc5ee6e0b19 [ 521.498829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 521.501711] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 521.502895] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 521.503428] FAT-fs (loop7): bogus number of FAT structure [ 521.503973] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 521.503983] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 521.503990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.503997] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 521.509938] FAT-fs (loop7): Can't find a valid FAT filesystem 23:01:26 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 23:01:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 521.582682] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 521.704600] audit: type=1326 audit(1781132486.798:57): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6073 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a16db19 code=0x7ffc0000 [ 521.714617] audit: type=1326 audit(1781132486.808:58): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6073 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7eff7a16db19 code=0x7ffc0000 [ 521.723988] audit: type=1326 audit(1781132486.814:59): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6073 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a16db19 code=0x7ffc0000 [ 521.730893] audit: type=1326 audit(1781132486.818:60): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6073 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7eff7a16db19 code=0x7ffc0000 [ 521.748004] audit: type=1326 audit(1781132486.818:61): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6073 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a16db19 code=0x7ffc0000 [ 521.751020] audit: type=1326 audit(1781132486.818:62): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6073 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7a16db19 code=0x7ffc0000 23:01:43 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000a40)) fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_io_uring_setup(0x5e13, &(0x7f00000003c0)={0x0, 0xea53, 0x10, 0x1, 0x2b3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd, 0x800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x1, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:ksm_device_t:s0\x00', 0x22, 0x2) clone3(&(0x7f0000000500)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x7240, &(0x7f0000000100)={0x0, 0xc845, 0x4, 0x0, 0x210, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000200)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 23:01:43 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000001840), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 23:01:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:01:43 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 23:01:43 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001991dd459c9a36b7e1b9aadce55c3a9007f75661305720393d0644bd19d82bd1adddb9849aacdd61d10711cb413aa5bc8d0e0289c0b58b3ac634448cdacee51c6f824850dd9c9c8e8d68c9cbba68a0a3751c0e7492a1b8f6f317ad21b25b277d20ad1061d610e33268", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:01:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x3c) 23:01:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:01:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 9) [ 538.634741] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:01:43 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) [ 538.644398] FAULT_INJECTION: forcing a failure. [ 538.644398] name failslab, interval 1, probability 0, space 0, times 0 [ 538.647374] CPU: 1 PID: 6110 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 538.663145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 538.664298] Call Trace: [ 538.664698] dump_stack+0x107/0x167 [ 538.665242] should_fail.cold+0x5/0xa [ 538.665814] ? vm_area_alloc+0x1c/0x110 [ 538.666417] should_failslab+0x5/0x20 [ 538.667012] kmem_cache_alloc+0x5b/0x310 [ 538.667571] vm_area_alloc+0x1c/0x110 [ 538.668100] alloc_bprm+0x337/0x8f0 [ 538.668593] ? __virt_addr_valid+0x170/0x5d0 [ 538.669256] do_execveat_common+0x275/0x8d0 [ 538.669893] ? strncpy_from_user+0x9e/0x470 [ 538.670539] ? bprm_execve+0x1960/0x1960 [ 538.671184] __x64_sys_execveat+0xed/0x140 [ 538.671832] do_syscall_64+0x33/0x40 [ 538.672410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 538.673176] RIP: 0033:0x7fc5ee6e0b19 [ 538.673740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 538.676344] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 538.677371] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 538.678364] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 538.695431] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 538.696440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.697492] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 538.714447] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:01:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x3c00) 23:01:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 10) 23:01:43 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 538.829501] FAULT_INJECTION: forcing a failure. [ 538.829501] name failslab, interval 1, probability 0, space 0, times 0 [ 538.831264] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 538.833356] CPU: 0 PID: 6129 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 538.833365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 538.833370] Call Trace: [ 538.833395] dump_stack+0x107/0x167 [ 538.833418] should_fail.cold+0x5/0xa [ 538.840612] ? vm_area_alloc+0x1c/0x110 [ 538.841192] should_failslab+0x5/0x20 [ 538.841776] kmem_cache_alloc+0x5b/0x310 [ 538.842379] vm_area_alloc+0x1c/0x110 [ 538.842980] alloc_bprm+0x337/0x8f0 [ 538.843553] ? __virt_addr_valid+0x170/0x5d0 [ 538.844225] do_execveat_common+0x275/0x8d0 [ 538.844889] ? strncpy_from_user+0x9e/0x470 [ 538.845498] ? bprm_execve+0x1960/0x1960 [ 538.846091] __x64_sys_execveat+0xed/0x140 [ 538.846776] do_syscall_64+0x33/0x40 [ 538.847299] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 538.848007] RIP: 0033:0x7fc5ee6e0b19 [ 538.848529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 538.854897] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 538.856839] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 538.857804] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 538.859189] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 538.861316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.863493] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 538.961515] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:01:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:01:43 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x80000) 23:01:43 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 23:01:43 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x1}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x58, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400f6ff0f00010000000000000000960000090693e73a466889c0dcd50687161e500000"], 0x24}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x4e23, 0x3b, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5a4c2b39}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000740), 0x1, 0x0, 0x1}, 0x1) r4 = signalfd4(r3, &(0x7f00000003c0)={[0x3b]}, 0x8, 0x80000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x4010, r4, 0xb55f5000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xcc, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x8e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c2bded6", @ANYRES16=0x0, @ANYBLOB="010025bd71000000000003000000050005efff004b98bdcd7d209bc3dc695d2aa8ae534b20fbb35351142c7d3355a2791220bec7465cbbd3a4c603f0e19e35a3300d34f074008501d03c58a80414819ce31b0f1efdc88c2200"/101], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000440)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)="1d", 0x1}], 0x1) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0400bfd1"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x801) 23:01:43 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40800, 0x131) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5, 0x0, 0x0, 0x0, 0x1ff}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280)="1be0e082867910ffe2edb9e92a97f34e8d861343bc", 0x15, r2}, 0x68) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}, {0x0}, {0x0}], 0x33}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000) r6 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x1d5) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0xc, 0x0, r9) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r6, 0x0, &(0x7f0000000480)='./file0\x00', 0x28, 0x262040, 0x23456, {0x0, r9}}, 0x3b) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') 23:02:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x5, 0x6000, @fd_index=0x1, 0x9, &(0x7f00000004c0)="614437749475614446e4cf5b30b7631995f8fa518e943b7a948f068bf51e9f393c0f0f5cc2fdb318c7e155ae0c889c7b3ecc25756eacbde5f537f678b1ee3c972dcd5ad2a9de521b74bd05026536bc1ed85c489fd9b72b2ffa1d71ce3c8ca81c8b09f381456c2388aa92319f08f2b6f9f7a1a447494acea0b6b230f37aee51a8246be7eb45ef997664a7b539c34b577f7eaf6ab0e13968d0ff7c644b90f384583c0d488b52aa1ecf43e633c98ec4e098e6bd1b1473db38db2b9ebe7a09994aa087c3", 0xc2, 0x0, 0x0, {0x0, r5}}, 0x3) ioctl$KDFONTOP_GET(r0, 0x5452, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x163, &(0x7f00000000c0)}) 23:02:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:02:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 555.655317] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:02:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 11) 23:02:00 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x1000000) 23:02:00 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) 23:02:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 555.667434] FAULT_INJECTION: forcing a failure. [ 555.667434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 555.669226] CPU: 0 PID: 6165 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 555.670212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 555.671581] Call Trace: [ 555.671986] dump_stack+0x107/0x167 [ 555.672622] should_fail.cold+0x5/0xa [ 555.672644] __alloc_pages_nodemask+0x182/0x600 [ 555.672659] ? __lockdep_reset_lock+0x180/0x180 [ 555.672677] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 23:02:00 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="14000200776731000000009fb0d5dfeb6600008845f6521edddbd23cc3d2000000"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0e4}, 0x4000000) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x184, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x7d}}}}, [@NL80211_ATTR_IE={0x14d, 0x2a, [@random_vendor={0xdd, 0x44, "aa91c07ca516eceb8032c6ebb79d924c913d950effeb5281d9af5290d162c4ea1c0d312d5b1e3ac69f72778aa64278c21e42a91acb171a12ebca98630ab48ce905f01846"}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x48}}, @random={0x1, 0x95, "bfe7ce079d8dad8bc6b2dbffd60d2dc603fffa3d1e225dbe199a7ea2f7848b94386a9dc79ddbc6b7abe1d262a7fd5e2246b4fa9af06affbed2cd5f8513d482fb6f4df91c1233aaf252f08f77dd6aa6de371f3c83d618bdc25107a0284c7c3de2cca5d54a7ea0943ae478e3dc341831168e99e907d55f37eeacfa6b91c4707bed7095160fa2d42d92b3bf0750e40e69674ac1d64980"}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x6c, 0x85}}, @preq={0x82, 0x2b, @ext={{0x1}, 0x1, 0x81, 0x400, @device_b, 0x1, @device_b, 0x3, 0x6, 0x1, [{{}, @device_a, 0x7fffffff}]}}, @ht={0x2d, 0x1a, {0x800, 0x0, 0x1, 0x0, {0x3, 0x1, 0x0, 0x3f, 0x0, 0x1, 0x1, 0x3, 0x1}, 0xb09, 0x8, 0xf5}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x882) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002000210c000000000000000002"], 0x20}}, 0x0) [ 555.672692] ? add_mm_counter_fast+0x220/0x220 [ 555.672719] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 555.672739] alloc_pages_current+0x187/0x280 [ 555.672757] get_zeroed_page+0x14/0xb0 [ 555.672771] __pud_alloc+0x33/0x270 [ 555.672790] handle_mm_fault+0x1a73/0x3500 23:02:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 555.672811] ? perf_trace_lock+0xac/0x490 [ 555.672825] ? SOFTIRQ_verbose+0x10/0x10 [ 555.672840] ? __pmd_alloc+0x630/0x630 [ 555.672879] __get_user_pages+0x6ec/0x1620 [ 555.672907] ? follow_page_mask+0x1900/0x1900 [ 555.672923] ? __lockdep_reset_lock+0x180/0x180 [ 555.672937] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 555.672968] __get_user_pages_remote+0x1d5/0x870 [ 555.672985] ? lock_downgrade+0x6d0/0x6d0 [ 555.673008] get_user_pages_remote+0x63/0x90 [ 555.673030] get_arg_page+0xba/0x200 [ 555.673047] ? acct_arg_size+0xe0/0xe0 [ 555.673060] ? downgrade_write+0x3a0/0x3a0 [ 555.673077] ? count.constprop.0+0x1b3/0x290 [ 555.673101] copy_string_kernel+0x1b4/0x450 [ 555.673130] do_execveat_common+0x525/0x8d0 [ 555.673151] ? bprm_execve+0x1960/0x1960 [ 555.673184] __x64_sys_execveat+0xed/0x140 [ 555.673207] do_syscall_64+0x33/0x40 [ 555.673222] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 555.673232] RIP: 0033:0x7fc5ee6e0b19 [ 555.673247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 555.673254] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 555.673269] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 555.673277] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 555.673285] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 555.673293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.673352] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 555.692263] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 555.783758] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 555.788586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6178 comm=syz-executor.7 [ 555.789753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 555.801183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6178 comm=syz-executor.7 [ 570.841908] loop2: detected capacity change from 0 to 262144 23:02:15 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f00000004c0), 0x0, 0x400}, {&(0x7f0000010400)}], 0x2203010, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xe90, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/ieee80211', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/150, 0x96) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x2, 0x0, 0xfb, 0x8, 0x0, 0x1, 0x140, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7465, 0x4, @perf_bp={&(0x7f0000000500), 0x2}, 0x40011, 0x20, 0x1ff, 0x5, 0x6, 0x9, 0x2, 0x0, 0x5, 0x0, 0x400}, 0x0, 0xe, r0, 0x19) mmap$usbmon(&(0x7f0000d19000/0x3000)=nil, 0x3000, 0x0, 0x8010, 0xffffffffffffffff, 0x7f) 23:02:15 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 12) 23:02:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:02:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:02:15 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x2000000) 23:02:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:02:15 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x16, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35383633343136333700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000bdcefad9b4924007bb7e3623d7c96baa010000000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e1f4655fe1f4655fe1f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f00000000000004000800000000000000050000000800"/64, 0x40, 0x4200}, {&(0x7f0000012700)="20000000d4c49a2ed4c49a2e00000000e1f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012800)="c041000000300000e1f4655fe1f4655fe1f4655f0000000000000200180000000000000000000000090000000a0000000b00"/64, 0x40, 0x5400}, {&(0x7f0000012900)="20000000000000000000000000000000e1f4655f000000000000000000000000000002ea00"/64, 0x40, 0x5480}, {&(0x7f0000012a00)="ed4100003c000000e2f4655fe2f4655fe2f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000048c5e5fc00000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x5600}, {&(0x7f0000012b00)="ed8100001a040000e2f4655fe2f4655fe2f4655f00000000000001000800000000000000010000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b6a4ff5400000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000", 0xa0, 0x5800}, {&(0x7f0000012c00)="ffa1000026000000e2f4655fe2f4655fe2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3538363334313633372f66696c65302f66696c6530000000000000000000000000000000000000000000005960499000000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000", 0xa0, 0x5a00}, {&(0x7f0000012d00)="ed8100000a000000e2f4655fe2f4655fe2f4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd265a5700000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x5c00}, {&(0x7f0000012e00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000e2f4655fe2f4655fe2f4655f00000000000002001800000000000000010000000d0000000e0000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e970470900000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000", 0xc0, 0x5de0}, {&(0x7f0000012f00)="ed81000064000000e2f4655fe2f4655fe2f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c979cb91e00000000000000000000000000000000000000000000000020000000d4c49a2ed4c49a2ed4c49a2ee2f4655fd4c49a2e0000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000013000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x61c0}, {&(0x7f0000013100)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000013200)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x9000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0xa000}, {&(0x7f0000013400)="00000000001000"/32, 0x20, 0xb000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xc000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00bc26c600e775ac5825783d5c06f6d902794803736b1e753817ed4fab5c0f9a9d4bff57168aa6e55e454fc5d96a2af8ab83ae425b3a2bf0c0d4bc953e3161d9d634b33bb53006000000d40911cba0ab9a887e1fe2f00100ba51062c08ca47"]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3ff}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r1, &(0x7f0000000140)={0x20000, 0x55, 0x2}, &(0x7f0000000180)='./file0\x00', 0x18}, 0x1000) 23:02:15 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 1) [ 570.863579] FAULT_INJECTION: forcing a failure. [ 570.863579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.863979] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 570.865092] CPU: 0 PID: 6204 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 570.867586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 570.868648] Call Trace: [ 570.868994] dump_stack+0x107/0x167 [ 570.869461] should_fail.cold+0x5/0xa [ 570.869955] _copy_from_user+0x2e/0x1b0 [ 570.870473] io_uring_setup+0x9b/0x2980 [ 570.870993] ? __mutex_unlock_slowpath+0xe1/0x600 [ 570.871608] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 570.872239] ? wait_for_completion_io+0x270/0x270 [ 570.872859] ? rcu_read_lock_any_held+0x75/0xa0 [ 570.873452] ? vfs_write+0x354/0xb10 [ 570.873932] ? fput_many+0x2f/0x1a0 [ 570.874395] ? ksys_write+0x1a9/0x260 [ 570.874883] ? __ia32_sys_read+0xb0/0xb0 [ 570.875416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 570.876093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 570.876762] do_syscall_64+0x33/0x40 [ 570.877240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 570.877900] RIP: 0033:0x7ff283a12b19 [ 570.878370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 570.878953] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 570.880744] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 570.880756] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 570.880762] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 570.880768] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 570.880775] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 570.880780] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 570.884069] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 570.892329] loop7: detected capacity change from 0 to 262144 [ 570.894442] FAULT_INJECTION: forcing a failure. [ 570.894442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 570.896010] CPU: 0 PID: 6207 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 570.896876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 570.897877] Call Trace: [ 570.898208] dump_stack+0x107/0x167 [ 570.898670] should_fail.cold+0x5/0xa [ 570.899160] __alloc_pages_nodemask+0x182/0x600 [ 570.899745] ? __lockdep_reset_lock+0x180/0x180 [ 570.900337] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 570.901100] ? add_mm_counter_fast+0x220/0x220 [ 570.901676] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 570.902341] alloc_pages_current+0x187/0x280 [ 570.902897] get_zeroed_page+0x14/0xb0 [ 570.903388] __pud_alloc+0x33/0x270 [ 570.903848] handle_mm_fault+0x1a73/0x3500 [ 570.904378] ? register_lock_class+0xbb/0x17b0 [ 570.904954] ? perf_trace_lock+0xac/0x490 [ 570.905475] ? __lockdep_reset_lock+0x180/0x180 [ 570.906057] ? __pmd_alloc+0x630/0x630 [ 570.906559] __get_user_pages+0x6ec/0x1620 [ 570.907133] ? follow_page_mask+0x1900/0x1900 [ 570.907697] ? __lockdep_reset_lock+0x180/0x180 [ 570.908281] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 570.908878] __get_user_pages_remote+0x1d5/0x870 [ 570.909472] ? lock_downgrade+0x6d0/0x6d0 [ 570.909998] get_user_pages_remote+0x63/0x90 [ 570.910548] get_arg_page+0xba/0x200 [ 570.911028] ? acct_arg_size+0xe0/0xe0 [ 570.911513] ? downgrade_write+0x3a0/0x3a0 [ 570.912045] ? count.constprop.0+0x1b3/0x290 [ 570.912604] copy_string_kernel+0x1b4/0x450 [ 570.913151] do_execveat_common+0x525/0x8d0 [ 570.913698] ? bprm_execve+0x1960/0x1960 [ 570.914220] __x64_sys_execveat+0xed/0x140 [ 570.914757] do_syscall_64+0x33/0x40 [ 570.915230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 570.915874] RIP: 0033:0x7fc5ee6e0b19 [ 570.916324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 570.918656] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 570.919625] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 570.920488] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 570.921352] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 570.922209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.923080] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:02:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 570.948702] loop7: detected capacity change from 0 to 262144 23:02:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 13) 23:02:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x10000000) [ 570.998015] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:02:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:02:16 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 2) [ 571.026242] FAULT_INJECTION: forcing a failure. [ 571.026242] name failslab, interval 1, probability 0, space 0, times 0 [ 571.029058] CPU: 1 PID: 6218 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 571.030548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 571.032547] Call Trace: [ 571.033183] dump_stack+0x107/0x167 [ 571.034054] should_fail.cold+0x5/0xa [ 571.034964] ? __pmd_alloc+0x94/0x630 [ 571.035889] should_failslab+0x5/0x20 23:02:16 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x240) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) sendfile(r0, r2, 0x0, 0x56f9) mount$9p_unix(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x391002, 0x0) [ 571.036799] kmem_cache_alloc+0x5b/0x310 [ 571.038005] __pmd_alloc+0x94/0x630 [ 571.038931] handle_mm_fault+0x1ac4/0x3500 [ 571.039962] ? register_lock_class+0xbb/0x17b0 [ 571.041063] ? perf_trace_lock+0xac/0x490 [ 571.042058] ? __lockdep_reset_lock+0x180/0x180 [ 571.043093] ? __pmd_alloc+0x630/0x630 [ 571.044038] __get_user_pages+0x6ec/0x1620 [ 571.045074] ? follow_page_mask+0x1900/0x1900 [ 571.046019] ? __lockdep_reset_lock+0x180/0x180 [ 571.047154] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 571.048291] __get_user_pages_remote+0x1d5/0x870 [ 571.049446] ? lock_downgrade+0x6d0/0x6d0 [ 571.050452] get_user_pages_remote+0x63/0x90 [ 571.051531] get_arg_page+0xba/0x200 [ 571.052430] ? acct_arg_size+0xe0/0xe0 [ 571.053366] ? downgrade_write+0x3a0/0x3a0 [ 571.054386] ? count.constprop.0+0x1b3/0x290 [ 571.055426] copy_string_kernel+0x1b4/0x450 [ 571.056371] do_execveat_common+0x525/0x8d0 [ 571.057330] ? bprm_execve+0x1960/0x1960 [ 571.058222] __x64_sys_execveat+0xed/0x140 [ 571.059153] do_syscall_64+0x33/0x40 [ 571.059971] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 571.061082] RIP: 0033:0x7fc5ee6e0b19 [ 571.061881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 571.065906] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 571.067582] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 571.069135] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 571.070683] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.072240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.073786] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 571.091299] FAULT_INJECTION: forcing a failure. [ 571.091299] name failslab, interval 1, probability 0, space 0, times 0 [ 571.093846] CPU: 1 PID: 6222 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 571.095377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 571.097243] Call Trace: [ 571.097832] dump_stack+0x107/0x167 [ 571.098644] should_fail.cold+0x5/0xa [ 571.099501] ? io_uring_setup+0x258/0x2980 [ 571.100448] should_failslab+0x5/0x20 [ 571.101298] kmem_cache_alloc_trace+0x55/0x320 23:02:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 571.102327] io_uring_setup+0x258/0x2980 [ 571.103495] ? __mutex_unlock_slowpath+0xe1/0x600 [ 571.104576] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 571.105709] ? wait_for_completion_io+0x270/0x270 [ 571.106809] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 571.107994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 571.109163] do_syscall_64+0x33/0x40 [ 571.110001] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 571.111163] RIP: 0033:0x7ff283a12b19 [ 571.111998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 571.116176] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 23:02:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_enter(0xffffffffffffffff, 0x250e, 0x0, 0x2, &(0x7f0000000280)={[0x7e]}, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) dup3(r0, r2, 0x80000) r3 = signalfd4(r0, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40ffffffffffff, 0x0, 0x0, 0x1000004, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r3, 0x7f, 0x0, 0x0, 0x2}, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) syz_io_uring_submit(0x0, 0x0, 0x0, 0xb7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x5, 0x9, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f0000000480)=""/59, 0x3b}, {&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f00000007c0)=""/64, 0x40}, {0x0}, {&(0x7f0000000b80)=""/235, 0xeb}], 0x8, 0x8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x308800c, &(0x7f00000001c0)=ANY=[]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000000, 0x10, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0/../file0\x00', 0x80000001, 0x2, &(0x7f0000000240)=[{&(0x7f00000003c0)="d843fd2ce293a71944e1c672395582a24bf24d7c7c4bdbe2e833ec7ae6d2f1dc0a33ef510e26e4047c63d4a5cac72e53b1dd2a3fdc663166154512a620c793e0b5af649983b5caedbd8ba97907c7da66f983cecbbda60558744036f1b32af24fc97dce1dae5a5f0236c8a2e3d0cdbde7b754383ecb53f435052ab0b2d0a9e37bd7b276b47929364fb3f9790081c186", 0x8f, 0x1}, {&(0x7f0000000200)="de021ae610c0bf6d0d52982aa2e48054e32bfba16070fe72e8c1e04cee8cd6c5d0821ccd4b703d69", 0x28, 0x3}], 0x2088000, &(0x7f00000004c0)={[{@rodir}, {@rodir}, {@nonumtail}, {@shortname_win95}, {@utf8}, {@shortname_lower}, {@uni_xlateno}], [{@obj_user={'obj_user', 0x3d, ':^+-!'}}, {@subj_user={'subj_user', 0x3d, '/+*+*(}+'}}]}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x20010, 0xffffffffffffffff, 0x10000000) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) [ 571.117929] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 571.119756] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 571.121378] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 571.123030] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 571.124666] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 571.143414] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 571.166642] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:02:16 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r0}]}]}, 0x28}}, 0x0) [ 571.212709] loop7: detected capacity change from 0 to 135266304 23:02:16 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(r2, r0, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x0, 0x1, 0x6}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}]) 23:02:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 14) 23:02:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x3c000000) 23:02:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:02:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 571.348197] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 571.362462] FAULT_INJECTION: forcing a failure. [ 571.362462] name failslab, interval 1, probability 0, space 0, times 0 [ 571.364983] CPU: 1 PID: 6250 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 571.366445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 571.368222] Call Trace: [ 571.368792] dump_stack+0x107/0x167 [ 571.369583] should_fail.cold+0x5/0xa [ 571.370393] ? create_object.isra.0+0x3a/0xa30 [ 571.371375] should_failslab+0x5/0x20 [ 571.372181] kmem_cache_alloc+0x5b/0x310 [ 571.373046] create_object.isra.0+0x3a/0xa30 [ 571.373969] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 571.375056] kmem_cache_alloc+0x159/0x310 [ 571.375936] __pmd_alloc+0x94/0x630 [ 571.376718] handle_mm_fault+0x1ac4/0x3500 [ 571.377616] ? register_lock_class+0xbb/0x17b0 [ 571.378579] ? perf_trace_lock+0xac/0x490 [ 571.379458] ? __lockdep_reset_lock+0x180/0x180 [ 571.380437] ? __pmd_alloc+0x630/0x630 [ 571.381280] __get_user_pages+0x6ec/0x1620 [ 571.382188] ? follow_page_mask+0x1900/0x1900 [ 571.383149] ? __lockdep_reset_lock+0x180/0x180 [ 571.384128] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 571.385124] __get_user_pages_remote+0x1d5/0x870 [ 571.386129] ? lock_downgrade+0x6d0/0x6d0 [ 571.387018] get_user_pages_remote+0x63/0x90 [ 571.387957] get_arg_page+0xba/0x200 [ 571.388745] ? acct_arg_size+0xe0/0xe0 [ 571.389566] ? downgrade_write+0x3a0/0x3a0 [ 571.390464] ? count.constprop.0+0x1b3/0x290 [ 571.391407] copy_string_kernel+0x1b4/0x450 [ 571.392342] do_execveat_common+0x525/0x8d0 [ 571.393266] ? bprm_execve+0x1960/0x1960 [ 571.394152] __x64_sys_execveat+0xed/0x140 [ 571.395062] do_syscall_64+0x33/0x40 [ 571.395854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 571.396943] RIP: 0033:0x7fc5ee6e0b19 [ 571.397726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 571.401598] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 571.403215] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 571.404731] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 571.406236] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 571.407751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.409258] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:02:30 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 3) 23:02:30 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(r2, r0, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x0, 0x1, 0x6}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}]) 23:02:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 585.575728] FAULT_INJECTION: forcing a failure. [ 585.575728] name failslab, interval 1, probability 0, space 0, times 0 [ 585.577191] CPU: 1 PID: 6269 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 585.578055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.579104] Call Trace: [ 585.579455] dump_stack+0x107/0x167 [ 585.579922] should_fail.cold+0x5/0xa [ 585.580411] ? create_object.isra.0+0x3a/0xa30 [ 585.580992] should_failslab+0x5/0x20 [ 585.581479] kmem_cache_alloc+0x5b/0x310 [ 585.582000] create_object.isra.0+0x3a/0xa30 [ 585.582560] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 585.583215] kmem_cache_alloc_trace+0x151/0x320 [ 585.583818] io_uring_setup+0x258/0x2980 [ 585.584340] ? __mutex_unlock_slowpath+0xe1/0x600 [ 585.584958] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 585.585601] ? wait_for_completion_io+0x270/0x270 [ 585.586238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 585.586907] ? syscall_enter_from_user_mode+0x1d/0x50 [ 585.587571] do_syscall_64+0x33/0x40 [ 585.588045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 585.588699] RIP: 0033:0x7ff283a12b19 [ 585.589167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 585.591509] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 585.592470] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 585.593371] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 585.594273] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 585.595184] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 585.596083] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 585.610008] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:02:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:02:30 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_enter(0xffffffffffffffff, 0x250e, 0x0, 0x2, &(0x7f0000000280)={[0x7e]}, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) dup3(r0, r2, 0x80000) r3 = signalfd4(r0, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40ffffffffffff, 0x0, 0x0, 0x1000004, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r3, 0x7f, 0x0, 0x0, 0x2}, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) syz_io_uring_submit(0x0, 0x0, 0x0, 0xb7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x5, 0x9, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f0000000480)=""/59, 0x3b}, {&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f00000007c0)=""/64, 0x40}, {0x0}, {&(0x7f0000000b80)=""/235, 0xeb}], 0x8, 0x8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x308800c, &(0x7f00000001c0)=ANY=[]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000000, 0x10, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0/../file0\x00', 0x80000001, 0x2, &(0x7f0000000240)=[{&(0x7f00000003c0)="d843fd2ce293a71944e1c672395582a24bf24d7c7c4bdbe2e833ec7ae6d2f1dc0a33ef510e26e4047c63d4a5cac72e53b1dd2a3fdc663166154512a620c793e0b5af649983b5caedbd8ba97907c7da66f983cecbbda60558744036f1b32af24fc97dce1dae5a5f0236c8a2e3d0cdbde7b754383ecb53f435052ab0b2d0a9e37bd7b276b47929364fb3f9790081c186", 0x8f, 0x1}, {&(0x7f0000000200)="de021ae610c0bf6d0d52982aa2e48054e32bfba16070fe72e8c1e04cee8cd6c5d0821ccd4b703d69", 0x28, 0x3}], 0x2088000, &(0x7f00000004c0)={[{@rodir}, {@rodir}, {@nonumtail}, {@shortname_win95}, {@utf8}, {@shortname_lower}, {@uni_xlateno}], [{@obj_user={'obj_user', 0x3d, ':^+-!'}}, {@subj_user={'subj_user', 0x3d, '/+*+*(}+'}}]}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x20010, 0xffffffffffffffff, 0x10000000) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) 23:02:30 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r0}]}]}, 0x28}}, 0x0) 23:02:30 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x8000000000000) 23:02:30 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 15) [ 585.623244] FAULT_INJECTION: forcing a failure. [ 585.623244] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 585.625952] CPU: 0 PID: 6280 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 585.627480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.629318] Call Trace: [ 585.629909] dump_stack+0x107/0x167 [ 585.630723] should_fail.cold+0x5/0xa [ 585.631574] __alloc_pages_nodemask+0x182/0x600 [ 585.632607] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 585.633923] ? find_held_lock+0x2c/0x110 [ 585.634822] ? __pmd_alloc+0x31d/0x630 [ 585.635686] ? lock_downgrade+0x6d0/0x6d0 [ 585.636598] ? do_raw_spin_lock+0x121/0x260 [ 585.637547] alloc_pages_current+0x187/0x280 [ 585.638521] pte_alloc_one+0x16/0x1a0 [ 585.639356] __pte_alloc+0x1d/0x330 [ 585.640159] handle_mm_fault+0x287f/0x3500 23:02:30 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r0}]}]}, 0x28}}, 0x0) [ 585.641099] ? perf_trace_lock+0xac/0x490 [ 585.642118] ? __lockdep_reset_lock+0x180/0x180 [ 585.643168] ? __pmd_alloc+0x630/0x630 [ 585.644050] __get_user_pages+0x6ec/0x1620 [ 585.644995] ? follow_page_mask+0x1900/0x1900 [ 585.645987] ? __lockdep_reset_lock+0x180/0x180 [ 585.647013] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 585.648061] __get_user_pages_remote+0x1d5/0x870 [ 585.648069] loop7: detected capacity change from 0 to 135266304 [ 585.650421] ? lock_downgrade+0x6d0/0x6d0 [ 585.651344] get_user_pages_remote+0x63/0x90 [ 585.652311] get_arg_page+0xba/0x200 [ 585.653124] ? acct_arg_size+0xe0/0xe0 [ 585.653967] ? downgrade_write+0x3a0/0x3a0 [ 585.654889] ? count.constprop.0+0x1b3/0x290 [ 585.655866] copy_string_kernel+0x1b4/0x450 [ 585.656816] do_execveat_common+0x525/0x8d0 [ 585.657763] ? bprm_execve+0x1960/0x1960 [ 585.658675] __x64_sys_execveat+0xed/0x140 [ 585.659616] do_syscall_64+0x33/0x40 [ 585.660426] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 585.661527] RIP: 0033:0x7fc5ee6e0b19 [ 585.662336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 585.666376] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 585.668042] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 585.669605] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 585.671168] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 585.672717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.674264] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:02:30 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r0}]}]}, 0x28}}, 0x0) 23:02:30 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 4) [ 585.752392] FAULT_INJECTION: forcing a failure. [ 585.752392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 585.753913] CPU: 1 PID: 6294 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 585.754721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 585.755712] Call Trace: [ 585.756032] dump_stack+0x107/0x167 [ 585.756478] should_fail.cold+0x5/0xa [ 585.756939] __alloc_pages_nodemask+0x182/0x600 [ 585.757499] ? lock_release+0x680/0x680 [ 585.757981] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 585.758699] ? lock_downgrade+0x6d0/0x6d0 [ 585.759215] alloc_pages_current+0x187/0x280 [ 585.759735] kmalloc_order+0x35/0x160 [ 585.760186] kmalloc_order_trace+0x14/0xa0 [ 585.760692] io_uring_setup+0x33c/0x2980 [ 585.761173] ? __mutex_unlock_slowpath+0xe1/0x600 [ 585.761747] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 585.762349] ? wait_for_completion_io+0x270/0x270 [ 585.762933] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 585.763570] ? syscall_enter_from_user_mode+0x1d/0x50 [ 585.764184] do_syscall_64+0x33/0x40 [ 585.764663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 585.765278] RIP: 0033:0x7ff283a12b19 [ 585.765720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 585.767959] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 585.768858] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 585.769692] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 585.770527] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 585.771387] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 585.772225] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:02:45 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(r2, r0, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x0, 0x1, 0x6}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}]) 23:02:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_enter(0xffffffffffffffff, 0x250e, 0x0, 0x2, &(0x7f0000000280)={[0x7e]}, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) dup3(r0, r2, 0x80000) r3 = signalfd4(r0, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40ffffffffffff, 0x0, 0x0, 0x1000004, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r3, 0x7f, 0x0, 0x0, 0x2}, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) syz_io_uring_submit(0x0, 0x0, 0x0, 0xb7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x5, 0x9, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f0000000480)=""/59, 0x3b}, {&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f00000007c0)=""/64, 0x40}, {0x0}, {&(0x7f0000000b80)=""/235, 0xeb}], 0x8, 0x8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x308800c, &(0x7f00000001c0)=ANY=[]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000000, 0x10, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0/../file0\x00', 0x80000001, 0x2, &(0x7f0000000240)=[{&(0x7f00000003c0)="d843fd2ce293a71944e1c672395582a24bf24d7c7c4bdbe2e833ec7ae6d2f1dc0a33ef510e26e4047c63d4a5cac72e53b1dd2a3fdc663166154512a620c793e0b5af649983b5caedbd8ba97907c7da66f983cecbbda60558744036f1b32af24fc97dce1dae5a5f0236c8a2e3d0cdbde7b754383ecb53f435052ab0b2d0a9e37bd7b276b47929364fb3f9790081c186", 0x8f, 0x1}, {&(0x7f0000000200)="de021ae610c0bf6d0d52982aa2e48054e32bfba16070fe72e8c1e04cee8cd6c5d0821ccd4b703d69", 0x28, 0x3}], 0x2088000, &(0x7f00000004c0)={[{@rodir}, {@rodir}, {@nonumtail}, {@shortname_win95}, {@utf8}, {@shortname_lower}, {@uni_xlateno}], [{@obj_user={'obj_user', 0x3d, ':^+-!'}}, {@subj_user={'subj_user', 0x3d, '/+*+*(}+'}}]}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x20010, 0xffffffffffffffff, 0x10000000) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) 23:02:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x100000000000000) 23:02:45 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r0}]}]}, 0x28}}, 0x0) 23:02:45 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 16) 23:02:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 23:02:45 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 5) 23:02:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 600.476642] loop7: detected capacity change from 0 to 135266304 23:02:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) [ 600.496567] FAULT_INJECTION: forcing a failure. [ 600.496567] name failslab, interval 1, probability 0, space 0, times 0 [ 600.498147] CPU: 0 PID: 6320 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 600.499076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 600.500220] Call Trace: [ 600.500582] dump_stack+0x107/0x167 [ 600.501084] should_fail.cold+0x5/0xa [ 600.501601] ? create_object.isra.0+0x3a/0xa30 [ 600.502223] should_failslab+0x5/0x20 [ 600.502743] kmem_cache_alloc+0x5b/0x310 [ 600.503302] create_object.isra.0+0x3a/0xa30 [ 600.503907] ? kasan_unpoison_shadow+0x33/0x50 [ 600.504535] kmalloc_order+0xfe/0x160 [ 600.505056] kmalloc_order_trace+0x14/0xa0 [ 600.505633] io_uring_setup+0x33c/0x2980 [ 600.506203] ? __mutex_unlock_slowpath+0xe1/0x600 [ 600.506865] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 600.507554] ? wait_for_completion_io+0x270/0x270 [ 600.508223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 600.508933] ? syscall_enter_from_user_mode+0x1d/0x50 [ 600.509637] do_syscall_64+0x33/0x40 [ 600.510148] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 600.510850] RIP: 0033:0x7ff283a12b19 [ 600.511367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.513885] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 600.514917] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 600.515886] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 600.516855] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 600.517827] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 600.518793] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 600.523606] FAULT_INJECTION: forcing a failure. [ 600.523606] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 600.525338] CPU: 0 PID: 6319 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 600.526287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 600.527424] Call Trace: [ 600.527785] dump_stack+0x107/0x167 [ 600.528272] should_fail.cold+0x5/0xa [ 600.528786] __alloc_pages_nodemask+0x182/0x600 [ 600.529427] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 600.530254] ? find_held_lock+0x2c/0x110 [ 600.530814] ? __pmd_alloc+0x31d/0x630 [ 600.531343] ? lock_downgrade+0x6d0/0x6d0 [ 600.531908] ? do_raw_spin_lock+0x121/0x260 [ 600.532491] alloc_pages_current+0x187/0x280 [ 600.533099] pte_alloc_one+0x16/0x1a0 [ 600.533614] __pte_alloc+0x1d/0x330 [ 600.534106] handle_mm_fault+0x287f/0x3500 [ 600.534675] ? perf_trace_lock+0xac/0x490 [ 600.535240] ? __lockdep_reset_lock+0x180/0x180 [ 600.535880] ? __pmd_alloc+0x630/0x630 [ 600.536418] __get_user_pages+0x6ec/0x1620 [ 600.536997] ? follow_page_mask+0x1900/0x1900 [ 600.537608] ? __lockdep_reset_lock+0x180/0x180 [ 600.538240] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 600.538885] __get_user_pages_remote+0x1d5/0x870 [ 600.539531] ? lock_downgrade+0x6d0/0x6d0 [ 600.540103] get_user_pages_remote+0x63/0x90 [ 600.540696] get_arg_page+0xba/0x200 [ 600.541205] ? acct_arg_size+0xe0/0xe0 [ 600.541721] ? downgrade_write+0x3a0/0x3a0 [ 600.542305] ? count.constprop.0+0x1b3/0x290 [ 600.542906] copy_string_kernel+0x1b4/0x450 [ 600.543499] do_execveat_common+0x525/0x8d0 [ 600.544086] ? bprm_execve+0x1960/0x1960 [ 600.544645] __x64_sys_execveat+0xed/0x140 [ 600.545224] do_syscall_64+0x33/0x40 [ 600.545748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 600.546439] RIP: 0033:0x7fc5ee6e0b19 [ 600.546945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.549433] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 600.550460] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 600.551407] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 600.552365] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 600.553339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.554300] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:02:45 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r0}]}]}, 0x28}}, 0x0) 23:02:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x200000000000000) 23:02:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_enter(0xffffffffffffffff, 0x250e, 0x0, 0x2, &(0x7f0000000280)={[0x7e]}, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) dup3(r0, r2, 0x80000) r3 = signalfd4(r0, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40ffffffffffff, 0x0, 0x0, 0x1000004, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r3, 0x7f, 0x0, 0x0, 0x2}, 0x0) r4 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) pread64(r4, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) syz_io_uring_submit(0x0, 0x0, 0x0, 0xb7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x5, 0x9, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f0000000480)=""/59, 0x3b}, {&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f00000007c0)=""/64, 0x40}, {0x0}, {&(0x7f0000000b80)=""/235, 0xeb}], 0x8, 0x8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x308800c, &(0x7f00000001c0)=ANY=[]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000000, 0x10, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0/../file0\x00', 0x80000001, 0x2, &(0x7f0000000240)=[{&(0x7f00000003c0)="d843fd2ce293a71944e1c672395582a24bf24d7c7c4bdbe2e833ec7ae6d2f1dc0a33ef510e26e4047c63d4a5cac72e53b1dd2a3fdc663166154512a620c793e0b5af649983b5caedbd8ba97907c7da66f983cecbbda60558744036f1b32af24fc97dce1dae5a5f0236c8a2e3d0cdbde7b754383ecb53f435052ab0b2d0a9e37bd7b276b47929364fb3f9790081c186", 0x8f, 0x1}, {&(0x7f0000000200)="de021ae610c0bf6d0d52982aa2e48054e32bfba16070fe72e8c1e04cee8cd6c5d0821ccd4b703d69", 0x28, 0x3}], 0x2088000, &(0x7f00000004c0)={[{@rodir}, {@rodir}, {@nonumtail}, {@shortname_win95}, {@utf8}, {@shortname_lower}, {@uni_xlateno}], [{@obj_user={'obj_user', 0x3d, ':^+-!'}}, {@subj_user={'subj_user', 0x3d, '/+*+*(}+'}}]}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x20010, 0xffffffffffffffff, 0x10000000) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) 23:02:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 23:02:45 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 17) 23:02:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x1000000000000000) 23:02:45 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 6) [ 600.695708] loop7: detected capacity change from 0 to 135266304 [ 600.745419] FAULT_INJECTION: forcing a failure. [ 600.745419] name failslab, interval 1, probability 0, space 0, times 0 [ 600.748019] CPU: 1 PID: 6348 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 600.749472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 600.751241] Call Trace: [ 600.751817] dump_stack+0x107/0x167 [ 600.752596] should_fail.cold+0x5/0xa [ 600.753405] ? create_object.isra.0+0x3a/0xa30 [ 600.754376] should_failslab+0x5/0x20 [ 600.755193] kmem_cache_alloc+0x5b/0x310 [ 600.756066] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 600.757342] create_object.isra.0+0x3a/0xa30 [ 600.758278] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 600.759368] kmem_cache_alloc+0x159/0x310 [ 600.760257] ptlock_alloc+0x1d/0x70 [ 600.761033] pte_alloc_one+0x68/0x1a0 [ 600.761843] __pte_alloc+0x1d/0x330 [ 600.762617] handle_mm_fault+0x287f/0x3500 [ 600.763528] ? perf_trace_lock+0xac/0x490 [ 600.764416] ? __lockdep_reset_lock+0x180/0x180 [ 600.765407] ? __pmd_alloc+0x630/0x630 [ 600.766256] __get_user_pages+0x6ec/0x1620 [ 600.767167] ? follow_page_mask+0x1900/0x1900 [ 600.768127] ? __lockdep_reset_lock+0x180/0x180 [ 600.769119] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 600.770128] __get_user_pages_remote+0x1d5/0x870 [ 600.771132] ? lock_downgrade+0x6d0/0x6d0 [ 600.772031] get_user_pages_remote+0x63/0x90 [ 600.772969] get_arg_page+0xba/0x200 [ 600.773763] ? acct_arg_size+0xe0/0xe0 [ 600.774585] ? downgrade_write+0x3a0/0x3a0 [ 600.775493] ? count.constprop.0+0x1b3/0x290 [ 600.776433] copy_string_kernel+0x1b4/0x450 [ 600.777360] do_execveat_common+0x525/0x8d0 [ 600.778281] ? bprm_execve+0x1960/0x1960 [ 600.779170] __x64_sys_execveat+0xed/0x140 [ 600.780083] do_syscall_64+0x33/0x40 [ 600.780874] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 600.781964] RIP: 0033:0x7fc5ee6e0b19 [ 600.782751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.783973] FAULT_INJECTION: forcing a failure. [ 600.783973] name failslab, interval 1, probability 0, space 0, times 0 [ 600.786649] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 600.786675] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 600.791145] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 600.792662] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 600.794177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.795699] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 600.797235] CPU: 0 PID: 6349 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 600.798066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 600.799055] Call Trace: [ 600.799383] dump_stack+0x107/0x167 [ 600.799817] should_fail.cold+0x5/0xa [ 600.800273] ? io_uring_setup+0x40b/0x2980 [ 600.800773] should_failslab+0x5/0x20 [ 600.801229] kmem_cache_alloc_trace+0x55/0x320 [ 600.801769] io_uring_setup+0x40b/0x2980 [ 600.802251] ? __mutex_unlock_slowpath+0xe1/0x600 [ 600.802821] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 600.803427] ? wait_for_completion_io+0x270/0x270 [ 600.804017] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 600.804639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 600.805249] do_syscall_64+0x33/0x40 [ 600.805706] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 600.806315] RIP: 0033:0x7ff283a12b19 [ 600.806758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.808933] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 600.809835] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 600.810670] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 600.811524] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 600.812364] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 600.813196] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 614.026407] FAULT_INJECTION: forcing a failure. [ 614.026407] name failslab, interval 1, probability 0, space 0, times 0 [ 614.030132] CPU: 0 PID: 6359 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 614.031588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 614.033335] Call Trace: [ 614.033902] dump_stack+0x107/0x167 [ 614.034681] should_fail.cold+0x5/0xa [ 614.035505] ? create_object.isra.0+0x3a/0xa30 [ 614.036471] should_failslab+0x5/0x20 [ 614.037286] kmem_cache_alloc+0x5b/0x310 [ 614.038147] create_object.isra.0+0x3a/0xa30 [ 614.039075] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 614.040161] kmem_cache_alloc_trace+0x151/0x320 [ 614.041139] io_uring_setup+0x40b/0x2980 [ 614.041995] ? __mutex_unlock_slowpath+0xe1/0x600 [ 614.043021] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 614.044083] ? wait_for_completion_io+0x270/0x270 [ 614.045126] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 614.046216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 614.047287] do_syscall_64+0x33/0x40 [ 614.048073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 614.049145] RIP: 0033:0x7ff283a12b19 [ 614.049914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 614.053740] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 614.055332] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 614.056833] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 614.058321] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 614.059821] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 614.061329] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:02:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:02:59 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 7) 23:02:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 18) 23:02:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x3c00000000000000) 23:02:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:02:59 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(r2, r0, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x0, 0x1, 0x6}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}]) 23:02:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 23:02:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23:02:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) [ 614.107822] FAULT_INJECTION: forcing a failure. [ 614.107822] name failslab, interval 1, probability 0, space 0, times 0 [ 614.110245] CPU: 1 PID: 6369 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 614.111635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 614.113301] Call Trace: [ 614.113836] dump_stack+0x107/0x167 [ 614.114582] should_fail.cold+0x5/0xa [ 614.115347] ? __anon_vma_prepare+0x62/0x500 [ 614.116248] should_failslab+0x5/0x20 [ 614.117037] kmem_cache_alloc+0x5b/0x310 [ 614.117856] __anon_vma_prepare+0x62/0x500 [ 614.118701] ? __pte_alloc+0x194/0x330 [ 614.119497] handle_mm_fault+0x2b2d/0x3500 [ 614.120370] ? perf_trace_lock+0xac/0x490 [ 614.121241] ? __lockdep_reset_lock+0x180/0x180 [ 614.122166] ? __pmd_alloc+0x630/0x630 [ 614.122969] __get_user_pages+0x6ec/0x1620 [ 614.123850] ? follow_page_mask+0x1900/0x1900 [ 614.124766] ? __lockdep_reset_lock+0x180/0x180 [ 614.125724] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 614.126679] __get_user_pages_remote+0x1d5/0x870 [ 614.127640] ? lock_downgrade+0x6d0/0x6d0 [ 614.128476] get_user_pages_remote+0x63/0x90 [ 614.129365] get_arg_page+0xba/0x200 [ 614.130119] ? acct_arg_size+0xe0/0xe0 [ 614.130929] ? downgrade_write+0x3a0/0x3a0 [ 614.131863] ? count.constprop.0+0x1b3/0x290 [ 614.132795] copy_string_kernel+0x1b4/0x450 [ 614.133770] do_execveat_common+0x525/0x8d0 [ 614.134692] ? bprm_execve+0x1960/0x1960 [ 614.135597] __x64_sys_execveat+0xed/0x140 [ 614.136508] do_syscall_64+0x33/0x40 [ 614.137334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 614.138481] RIP: 0033:0x7fc5ee6e0b19 [ 614.139297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 614.143221] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 614.144854] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 614.146362] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 614.147874] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 614.149373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 614.150878] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:02:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23:02:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0xffffffff00000000) 23:02:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 23:02:59 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 8) 23:02:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 614.357261] FAULT_INJECTION: forcing a failure. [ 614.357261] name failslab, interval 1, probability 0, space 0, times 0 [ 614.359607] CPU: 1 PID: 6392 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 614.360892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 614.362487] Call Trace: [ 614.363005] dump_stack+0x107/0x167 [ 614.363738] should_fail.cold+0x5/0xa [ 614.364466] ? create_object.isra.0+0x3a/0xa30 [ 614.365340] should_failslab+0x5/0x20 [ 614.366067] kmem_cache_alloc+0x5b/0x310 [ 614.366850] create_object.isra.0+0x3a/0xa30 [ 614.367709] kmemleak_alloc_percpu+0xa0/0x100 [ 614.368569] pcpu_alloc+0x4e2/0x1240 [ 614.369291] ? io_tctx_exit_cb+0xf0/0xf0 [ 614.370084] percpu_ref_init+0x31/0x3d0 [ 614.370853] io_uring_setup+0x47a/0x2980 [ 614.371655] ? __mutex_unlock_slowpath+0xe1/0x600 [ 614.372583] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 614.373562] ? wait_for_completion_io+0x270/0x270 [ 614.374506] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 614.375517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 614.376496] do_syscall_64+0x33/0x40 [ 614.377209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 614.378177] RIP: 0033:0x7ff283a12b19 [ 614.378882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 614.382331] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 614.383809] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 614.385140] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 614.386474] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 614.387813] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 614.389157] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:03:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:03:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23:03:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:03:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x8010, r3, 0xb617e000) 23:03:13 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 19) 23:03:13 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(r2, r0, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) 23:03:13 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 9) 23:03:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 628.508034] FAULT_INJECTION: forcing a failure. [ 628.508034] name failslab, interval 1, probability 0, space 0, times 0 [ 628.510177] CPU: 1 PID: 6415 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 628.511392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 628.512886] Call Trace: [ 628.513360] dump_stack+0x107/0x167 [ 628.514014] should_fail.cold+0x5/0xa [ 628.514695] ? create_object.isra.0+0x3a/0xa30 [ 628.515508] should_failslab+0x5/0x20 [ 628.516216] kmem_cache_alloc+0x5b/0x310 [ 628.516951] create_object.isra.0+0x3a/0xa30 [ 628.517742] kmemleak_alloc_percpu+0xa0/0x100 [ 628.518561] pcpu_alloc+0x4e2/0x1240 [ 628.519244] ? io_tctx_exit_cb+0xf0/0xf0 [ 628.519970] percpu_ref_init+0x31/0x3d0 [ 628.520690] io_uring_setup+0x47a/0x2980 [ 628.521429] ? __mutex_unlock_slowpath+0xe1/0x600 [ 628.522297] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 628.523204] ? wait_for_completion_io+0x270/0x270 [ 628.524097] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 628.525041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 628.525960] do_syscall_64+0x33/0x40 [ 628.526621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 628.527538] RIP: 0033:0x7ff283a12b19 [ 628.528212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 628.531524] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 628.532896] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 628.534171] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 628.535438] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 628.536711] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 628.537999] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 628.548782] FAULT_INJECTION: forcing a failure. [ 628.548782] name failslab, interval 1, probability 0, space 0, times 0 [ 628.551247] CPU: 0 PID: 6418 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 628.552711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 628.554470] Call Trace: [ 628.555026] dump_stack+0x107/0x167 [ 628.555805] should_fail.cold+0x5/0xa [ 628.556621] ? create_object.isra.0+0x3a/0xa30 [ 628.557596] should_failslab+0x5/0x20 [ 628.558393] kmem_cache_alloc+0x5b/0x310 [ 628.559244] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 628.560527] create_object.isra.0+0x3a/0xa30 [ 628.561452] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 628.562537] kmem_cache_alloc+0x159/0x310 [ 628.563415] ptlock_alloc+0x1d/0x70 [ 628.564199] pte_alloc_one+0x68/0x1a0 [ 628.565001] __pte_alloc+0x1d/0x330 [ 628.565777] handle_mm_fault+0x287f/0x3500 [ 628.566671] ? perf_trace_lock+0xac/0x490 [ 628.567558] ? __pmd_alloc+0x630/0x630 [ 628.568422] __get_user_pages+0x6ec/0x1620 [ 628.569331] ? follow_page_mask+0x1900/0x1900 [ 628.570283] ? __lockdep_reset_lock+0x180/0x180 [ 628.571277] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 628.572285] __get_user_pages_remote+0x1d5/0x870 [ 628.573287] ? lock_downgrade+0x6d0/0x6d0 [ 628.574168] get_user_pages_remote+0x63/0x90 [ 628.575117] get_arg_page+0xba/0x200 [ 628.575919] ? acct_arg_size+0xe0/0xe0 [ 628.576736] ? downgrade_write+0x3a0/0x3a0 [ 628.577634] ? count.constprop.0+0x1b3/0x290 [ 628.578568] copy_string_kernel+0x1b4/0x450 [ 628.579500] do_execveat_common+0x525/0x8d0 [ 628.580422] ? bprm_execve+0x1960/0x1960 [ 628.581317] __x64_sys_execveat+0xed/0x140 [ 628.582213] do_syscall_64+0x33/0x40 [ 628.583002] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 628.584093] RIP: 0033:0x7fc5ee6e0b19 [ 628.584878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 628.588764] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 628.590377] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 628.591898] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 628.593348] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 628.594815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 628.596291] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:03:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 628.611367] Zero length message leads to an empty skb 23:03:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) write$P9_RLOCK(r3, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x14) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:03:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:03:13 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 10) 23:03:13 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(r2, r0, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) [ 628.725267] FAULT_INJECTION: forcing a failure. [ 628.725267] name failslab, interval 1, probability 0, space 0, times 0 [ 628.727122] CPU: 1 PID: 6433 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 628.728238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 628.729559] Call Trace: [ 628.729981] dump_stack+0x107/0x167 [ 628.730572] should_fail.cold+0x5/0xa [ 628.731210] ? percpu_ref_init+0xd8/0x3d0 [ 628.731874] should_failslab+0x5/0x20 [ 628.732484] kmem_cache_alloc_trace+0x55/0x320 [ 628.733224] ? io_tctx_exit_cb+0xf0/0xf0 [ 628.733896] percpu_ref_init+0xd8/0x3d0 [ 628.734529] io_uring_setup+0x47a/0x2980 [ 628.735180] ? __mutex_unlock_slowpath+0xe1/0x600 [ 628.735951] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 628.736743] ? wait_for_completion_io+0x270/0x270 [ 628.737519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 628.738357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 628.739177] do_syscall_64+0x33/0x40 [ 628.739769] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 628.740580] RIP: 0033:0x7ff283a12b19 [ 628.741175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 628.744132] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 628.745326] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 628.746455] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 628.747573] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 628.748717] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 628.749848] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:03:13 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) write$P9_RLOCK(r2, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x1}, 0x8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x80, 0x0) 23:03:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23:03:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:03:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000be2b2e2f6669ee3d4a83bc6c61dee6201508dadfbbbb3ffee791f1e2fd6340ed8ca696f8bdaff2d6c00d68d6982dbe944171830a33ccf02e1f4caf96ed3c1efd16a59e8541dc0ed7ddbe5ece53cbbf356e6bc49966ba2276617cf193b33cb1cc29ad3012ef5dcbcd97d8d850591250f28e0322d9f4feff9f06e5dffefbc7580f95dbbfbb1d62844c46c2456801ea0e74729d409de10c033f54800809a32f2a25a16d4a9f4d2c33bab3a5726a256dd69c169c3b17dc9f7602c5e13bba14a3b5b35501e6f23f75489212c3332ac473803a8ab8bed8e4ad9cc6becd29726fb5e682c33e08a801000000ffed8c69b07f42af1907e8f8a8cbedf1d2467ab6bcf557bfb0042bf4abdbaa27157ba87d19814f10ce30b86ec78edbf0fe4f80aa20f1d09089135b3773453c0b52f38edadaf424ef4f378bd9294a926939771e6ab7b54d93629f26f08f8a82663a2e86ded097b988d21580b836c07bc515d21da25365a40b9ddac965fdc7ff1890602e69c7c2a96a52794ee0f698fabfcd3d4ea063b3fc9ffc2433eeb7eb646a8680f5d5b0ff749b544cf8254986ede0f16a1532a459ee46a0f5b4270d1ebd2fa043533e04615d34c0dfaa045dc6a39bee067b5e07edb92c53ff2576b6864524e6e8106408edb9e013df3e09df0f22a83a9450e7105f0fa141fc9f60a293ed30402ee099d35c23bafe38fd32d19cb66dd3e2197e5920058404e8585c7999841dc09e8579101a23cf256ec283eb62f40eb8551a485124ac6ceb9d15a6453764d64a5f95a26aeceeb17f4b8bee216fdb45169af7619fd50c979b285060bee5d712dc7b69367af55d2bfd44cf62ad8411279d91bdf2a7c61c993c25989e62a82adaf7820f20e30a846cbb4bfa2a3f061c07c46285a45cf94487b6b78fc6b8540eafd2ab977fedce1bcdeef81b8457276b26935bf2dc8373310b576088c61ea82720f06ed42db6c216ac7b667284eff9f41a48269561db039ecb9bf6b5a155ebcce1a0ef2ffa6708a470c16bcfde3ddc148e2108a3cc951a76caf5e5de80e57a2f1924a5292378f7660deb9d7a6721a3270bf382e6779c1a66f2c35b2a51b6c4402df8c078cbed7bb1a1ce0708f263b2aa0a19e93db9698083f6c829accf4a6171c93dfaba76985eb1c27c103bfe0de7c677de489a57cef1ba95909627580697e37e32df870b85f7ca682eeaa26c03ee5e971037c4e0678a99e28ba785c377ab1098113333e4832ff7597514e04fe335180cc8e64e535f26f9dbb24e5a65cc4c671bd204f6e5143009ce404b2a7bd31eca2448dc66d37ebf"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:03:26 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(r2, r0, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ptrace(0x10, r2) 23:03:26 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x94, 0xd3, 0x8, 0x1, 0x0, 0x0, 0x88002, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_config_ext={0x2, 0x8}, 0x11248, 0x1000, 0x3, 0x3, 0xfffffffffffff830, 0x3, 0x2, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xa) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setpipe(r4, 0x407, 0x5) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) fcntl$getown(r3, 0x9) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x80, 0x0) 23:03:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 20) 23:03:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:03:26 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 11) 23:03:26 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) write$P9_RLOCK(r3, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x14) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:03:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 641.041051] FAULT_INJECTION: forcing a failure. [ 641.041051] name failslab, interval 1, probability 0, space 0, times 0 [ 641.042458] CPU: 1 PID: 6466 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 641.043259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 641.044230] Call Trace: [ 641.044541] dump_stack+0x107/0x167 [ 641.044960] should_fail.cold+0x5/0xa [ 641.045396] ? create_object.isra.0+0x3a/0xa30 [ 641.045914] should_failslab+0x5/0x20 [ 641.046345] kmem_cache_alloc+0x5b/0x310 [ 641.046811] create_object.isra.0+0x3a/0xa30 [ 641.047311] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 641.047901] kmem_cache_alloc_trace+0x151/0x320 [ 641.048479] ? io_tctx_exit_cb+0xf0/0xf0 [ 641.048944] percpu_ref_init+0xd8/0x3d0 [ 641.049402] io_uring_setup+0x47a/0x2980 [ 641.049870] ? __mutex_unlock_slowpath+0xe1/0x600 [ 641.050172] FAULT_INJECTION: forcing a failure. [ 641.050172] name failslab, interval 1, probability 0, space 0, times 0 [ 641.050434] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 641.053291] ? wait_for_completion_io+0x270/0x270 [ 641.053855] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 641.054455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 641.055045] do_syscall_64+0x33/0x40 [ 641.055470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 641.056061] RIP: 0033:0x7ff283a12b19 [ 641.056483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 641.058583] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 641.059455] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 641.060276] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 641.061091] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 641.061908] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 641.062724] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 641.063567] CPU: 0 PID: 6473 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 641.065012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 641.066714] Call Trace: [ 641.067253] dump_stack+0x107/0x167 [ 641.068015] should_fail.cold+0x5/0xa [ 641.068808] ? __anon_vma_prepare+0x270/0x500 [ 641.069728] should_failslab+0x5/0x20 [ 641.070511] kmem_cache_alloc+0x5b/0x310 [ 641.071351] __anon_vma_prepare+0x270/0x500 [ 641.072234] ? __pte_alloc+0x194/0x330 [ 641.073040] handle_mm_fault+0x2b2d/0x3500 [ 641.073902] ? perf_trace_lock+0xac/0x490 [ 641.074746] ? __lockdep_reset_lock+0x180/0x180 [ 641.075686] ? __pmd_alloc+0x630/0x630 [ 641.076518] __get_user_pages+0x6ec/0x1620 [ 641.077408] ? follow_page_mask+0x1900/0x1900 [ 641.078325] ? __lockdep_reset_lock+0x180/0x180 [ 641.079279] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 641.080255] __get_user_pages_remote+0x1d5/0x870 [ 641.081225] ? lock_downgrade+0x6d0/0x6d0 [ 641.082081] get_user_pages_remote+0x63/0x90 [ 641.082979] get_arg_page+0xba/0x200 [ 641.083737] ? acct_arg_size+0xe0/0xe0 [ 641.084539] ? downgrade_write+0x3a0/0x3a0 [ 641.085407] ? count.constprop.0+0x1b3/0x290 [ 641.086300] copy_string_kernel+0x1b4/0x450 [ 641.087201] do_execveat_common+0x525/0x8d0 [ 641.088091] ? bprm_execve+0x1960/0x1960 [ 641.088934] __x64_sys_execveat+0xed/0x140 [ 641.089814] do_syscall_64+0x33/0x40 [ 641.090570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 641.091613] RIP: 0033:0x7fc5ee6e0b19 [ 641.092373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 641.096116] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 641.097730] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 641.099193] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 641.100665] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 641.102122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 641.103575] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 641.106134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6472 comm=syz-executor.3 23:03:26 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) write$P9_RLOCK(r3, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x14) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:03:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:03:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 23:03:26 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 12) 23:03:26 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) write$P9_RLOCK(r3, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x14) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:03:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:03:26 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x3, 0x0) fcntl$getown(r3, 0x9) [ 641.207646] FAULT_INJECTION: forcing a failure. [ 641.207646] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 641.209075] CPU: 1 PID: 6488 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 641.209858] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 641.210811] Call Trace: [ 641.211125] dump_stack+0x107/0x167 [ 641.211541] should_fail.cold+0x5/0xa [ 641.211990] __alloc_pages_nodemask+0x182/0x600 [ 641.212530] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 641.213227] ? cap_capable+0x1cd/0x230 [ 641.213676] alloc_pages_current+0x187/0x280 [ 641.214184] __get_free_pages+0xc/0xa0 [ 641.214633] io_uring_setup+0xe27/0x2980 [ 641.215103] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 641.215679] ? wait_for_completion_io+0x270/0x270 [ 641.216260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 641.216865] ? syscall_enter_from_user_mode+0x1d/0x50 [ 641.217460] do_syscall_64+0x33/0x40 [ 641.217889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 641.218478] RIP: 0033:0x7ff283a12b19 [ 641.218903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 641.221023] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 641.221906] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 641.222722] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 641.223547] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 641.224370] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 641.225187] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 641.246465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6494 comm=syz-executor.3 23:03:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 641.289883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6499 comm=syz-executor.1 23:03:40 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(r2, r0, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:03:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:03:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:03:40 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x81, 0x1, 0x4, 0x0, 0x100, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x2100, 0xee0, 0x800, 0x5, 0x1, 0x745b, 0x2, 0x0, 0x1, 0x0, 0x7ffffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) write$9p(r2, &(0x7f00000000c0)="718ff6fba663c55d4c02f6f15db70eaf0799f8fc3661dd1781d0ddea64ee37114c", 0x21) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='\x00') 23:03:40 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 13) 23:03:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000be2b2e2f6669ee3d4a83bc6c61dee6201508dadfbbbb3ffee791f1e2fd6340ed8ca696f8bdaff2d6c00d68d6982dbe944171830a33ccf02e1f4caf96ed3c1efd16a59e8541dc0ed7ddbe5ece53cbbf356e6bc49966ba2276617cf193b33cb1cc29ad3012ef5dcbcd97d8d850591250f28e0322d9f4feff9f06e5dffefbc7580f95dbbfbb1d62844c46c2456801ea0e74729d409de10c033f54800809a32f2a25a16d4a9f4d2c33bab3a5726a256dd69c169c3b17dc9f7602c5e13bba14a3b5b35501e6f23f75489212c3332ac473803a8ab8bed8e4ad9cc6becd29726fb5e682c33e08a801000000ffed8c69b07f42af1907e8f8a8cbedf1d2467ab6bcf557bfb0042bf4abdbaa27157ba87d19814f10ce30b86ec78edbf0fe4f80aa20f1d09089135b3773453c0b52f38edadaf424ef4f378bd9294a926939771e6ab7b54d93629f26f08f8a82663a2e86ded097b988d21580b836c07bc515d21da25365a40b9ddac965fdc7ff1890602e69c7c2a96a52794ee0f698fabfcd3d4ea063b3fc9ffc2433eeb7eb646a8680f5d5b0ff749b544cf8254986ede0f16a1532a459ee46a0f5b4270d1ebd2fa043533e04615d34c0dfaa045dc6a39bee067b5e07edb92c53ff2576b6864524e6e8106408edb9e013df3e09df0f22a83a9450e7105f0fa141fc9f60a293ed30402ee099d35c23bafe38fd32d19cb66dd3e2197e5920058404e8585c7999841dc09e8579101a23cf256ec283eb62f40eb8551a485124ac6ceb9d15a6453764d64a5f95a26aeceeb17f4b8bee216fdb45169af7619fd50c979b285060bee5d712dc7b69367af55d2bfd44cf62ad8411279d91bdf2a7c61c993c25989e62a82adaf7820f20e30a846cbb4bfa2a3f061c07c46285a45cf94487b6b78fc6b8540eafd2ab977fedce1bcdeef81b8457276b26935bf2dc8373310b576088c61ea82720f06ed42db6c216ac7b667284eff9f41a48269561db039ecb9bf6b5a155ebcce1a0ef2ffa6708a470c16bcfde3ddc148e2108a3cc951a76caf5e5de80e57a2f1924a5292378f7660deb9d7a6721a3270bf382e6779c1a66f2c35b2a51b6c4402df8c078cbed7bb1a1ce0708f263b2aa0a19e93db9698083f6c829accf4a6171c93dfaba76985eb1c27c103bfe0de7c677de489a57cef1ba95909627580697e37e32df870b85f7ca682eeaa26c03ee5e971037c4e0678a99e28ba785c377ab1098113333e4832ff7597514e04fe335180cc8e64e535f26f9dbb24e5a65cc4c671bd204f6e5143009ce404b2a7bd31eca2448dc66d37ebf"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:03:40 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) write$P9_RLOCK(r2, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x14) 23:03:40 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 21) [ 655.266761] FAULT_INJECTION: forcing a failure. [ 655.266761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 655.269280] CPU: 0 PID: 6509 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 655.270717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 655.272470] Call Trace: [ 655.273037] dump_stack+0x107/0x167 [ 655.273806] should_fail.cold+0x5/0xa [ 655.274614] __alloc_pages_nodemask+0x182/0x600 [ 655.275601] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 655.276765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6518 comm=syz-executor.3 [ 655.276878] ? cap_capable+0x1cd/0x230 [ 655.276905] alloc_pages_current+0x187/0x280 [ 655.281123] __get_free_pages+0xc/0xa0 [ 655.281955] io_uring_setup+0xf9a/0x2980 [ 655.282819] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 655.283886] ? wait_for_completion_io+0x270/0x270 [ 655.284944] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 655.286044] ? syscall_enter_from_user_mode+0x1d/0x50 [ 655.287133] do_syscall_64+0x33/0x40 [ 655.287929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 655.289035] RIP: 0033:0x7ff283a12b19 [ 655.289818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 655.293714] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 655.295330] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 655.296850] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 655.298351] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 655.299861] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 655.301378] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 655.318939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6524 comm=syz-executor.1 [ 655.334770] FAULT_INJECTION: forcing a failure. [ 655.334770] name failslab, interval 1, probability 0, space 0, times 0 [ 655.337377] CPU: 1 PID: 6525 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 655.338817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 655.340590] Call Trace: [ 655.341147] dump_stack+0x107/0x167 [ 655.341917] should_fail.cold+0x5/0xa [ 655.342722] ? create_object.isra.0+0x3a/0xa30 [ 655.343689] should_failslab+0x5/0x20 [ 655.344501] kmem_cache_alloc+0x5b/0x310 [ 655.345358] create_object.isra.0+0x3a/0xa30 [ 655.346276] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 655.347360] kmem_cache_alloc+0x159/0x310 [ 655.348245] __anon_vma_prepare+0x270/0x500 [ 655.349151] ? __pte_alloc+0x194/0x330 [ 655.349971] handle_mm_fault+0x2b2d/0x3500 [ 655.350872] ? perf_trace_lock+0xac/0x490 [ 655.351742] ? __lockdep_reset_lock+0x180/0x180 [ 655.352723] ? __pmd_alloc+0x630/0x630 [ 655.353563] __get_user_pages+0x6ec/0x1620 [ 655.354466] ? follow_page_mask+0x1900/0x1900 [ 655.355407] ? __lockdep_reset_lock+0x180/0x180 [ 655.356390] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 655.357390] __get_user_pages_remote+0x1d5/0x870 [ 655.358388] ? lock_downgrade+0x6d0/0x6d0 [ 655.359264] get_user_pages_remote+0x63/0x90 [ 655.360213] get_arg_page+0xba/0x200 [ 655.361004] ? acct_arg_size+0xe0/0xe0 [ 655.361819] ? downgrade_write+0x3a0/0x3a0 [ 655.362724] ? count.constprop.0+0x1b3/0x290 [ 655.363651] copy_string_kernel+0x1b4/0x450 [ 655.364576] do_execveat_common+0x525/0x8d0 [ 655.365490] ? bprm_execve+0x1960/0x1960 [ 655.366361] __x64_sys_execveat+0xed/0x140 [ 655.367260] do_syscall_64+0x33/0x40 [ 655.368054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 655.369131] RIP: 0033:0x7fc5ee6e0b19 [ 655.369911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 655.373801] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 655.375413] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 655.376928] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 655.378429] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 655.379940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 655.381451] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:03:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:03:40 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) write$P9_RLOCK(r2, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:03:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:03:40 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) r5 = socket(0x25, 0x4, 0x6) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r9, 0x0, r8, 0x0, 0x80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYBLOB="a0d31c9f602121fd130fb036e7d41094398fe53961416a", @ANYBLOB="19000000000064ab930000010000a585730013000000504ef11fc268ce42460701036e81f155a4aa3a6a54c7bb041226b6d460bb7d3789847aed2f9eb8f1bfdbae5680f49d29aa16990f8e196d7aa12e09574083e7a41f7c471421caf42167305d22f559e16fbd4999b1408b6d6b30329e51e25df7c28948ead08815c161f5100a21072f2b7c711b159867363b1ec38adafdf59267d17c0cc9df83a22b858492a003dbd3a737cadcd37d12dfbcf690ee74a2dac34242eefe08f4c843d19c1d554b293d303907021f7b61bf", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRESDEC=r8, @ANYRES32, @ANYRES32=r5], 0x40}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) fcntl$setstatus(r4, 0x4, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) splice(0xffffffffffffffff, 0x0, r10, 0x0, 0x80, 0x0) [ 655.468516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6536 comm=syz-executor.1 23:03:40 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:03:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:03:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:03:40 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:03:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:03:40 executing program 4: r0 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x3cb, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000140)="bb87066549759c357ef785e3fa95ee3ba7e710eeb695dcd17023b3607c1de5b87ed7091f1d1b5e33acbd9c0768df97c8f156d5584747503cc3912b5d62f564f745285e5a1f11ca67d4fc20d3183ee0def0678a0491d2ad4182018afafe9f49cf575725f398f260b7438ecedc68f82ffad1a081ea8028404c359024468f23e2a4028c36744a222d885edcf426de4fef17cdf10414b50ea70a135dc24199866d7bc6f19ebed2871aaae0282b65700dc9af75b75340e9ddb6777677cee58d55be279911736e7cb512f93cee7c2ac0c44855454f7b2c481c8b3927fa88c288442f9bb92750421eba02a29a4d44815d26cb2d", 0xf0, 0xf46}, {&(0x7f0000000240)="ac5dc5ef427c0f76310817016a300f79a2bedc2a6eea370f05c3a6086b164c3a1bca2eae7ecdf0774b01", 0x2a, 0x2}, {&(0x7f0000000280)="261b47691060d51dcf24b0e034763fd15f9630f6379b0df6367a6945644c73c81232728a9d862b61c09b8af8d90e27688636d1b4259e95fc97bae1209e60446a583d45a74ad2c5d96702b2a443645ff5c866ab6f33ddc60134ac8f8decdf7ecd34818179874e3df68b3c052740ae14b055e25c86799c48de33b26d0067e6c2b3433637af17915f002cd84001bcd9ea7f6ce958b1e82cbccb740bdefe1da7d49ac33f6fc57c7132c2b3faea21422bda405e88b786d29e2f2004420a7e804a311b8f", 0xc1, 0x100}, {&(0x7f0000000380)="59d9c52d744a3a14c4f7483a2952fb416bcdc087672d87316d270d59e2f444e8d4f8fa1e831c7d811f6d5ce84004ce0778a5886b976459fb67b681ed6bd80aeec006ceae06c8ea3b50d82dabea15ae8e281a2e15c58dbf3cc0145077aaecd5abea5b39e538a194a5876345258c90ab3537bf76d1940b621c", 0x78, 0xfff}, {&(0x7f0000000400)="b390c214a5e67622fd6a46b880564b1e69a0e12160652622dce5f68260e6500000665da7fd73618ab31f497cfdcc507d0adc2f2ae678bfafac97169c066dfb3dcfe8c993c23b77e1274c6f0560ae826870bcb2e27f06076eb753991f38f8454aa7c7e86418528389aea64c9d4c2a34adcc1a29e72113c808a8a70dd528727f1f20001fae77d054c3a244d513e91592dd0c73b5165e2f", 0x96, 0xfffffffffffffb8b}], 0x2030, &(0x7f0000000700)={[{','}, {'^B#::\x83'}, {'--.]}$'}], [{@context={'context', 0x3d, 'staff_u'}}, {@seclabel}, {@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '^'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x38, 0x37, 0x38, 0x63, 0x38, 0x66, 0x37], 0x2d, [0x62, 0x38, 0x66, 0x65], 0x2d, [0x34, 0x37, 0x35, 0x32], 0x2d, [0x62, 0x62, 0x33, 0x55], 0x2d, [0x63, 0x61, 0x61, 0x30, 0x34, 0x63, 0x64, 0x66]}}}, {@measure}]}) dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) sendfile(r2, r4, &(0x7f0000000640)=0x2, 0x80000001) pivot_root(&(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600)='./file0\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x80, 0x0) [ 655.750149] loop4: detected capacity change from 0 to 8386048 [ 655.768293] loop4: detected capacity change from 0 to 8386048 23:03:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:03:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:03:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:03:54 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) fork() munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:03:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:03:54 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 22) 23:03:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x3, &(0x7f0000000140)={@dev, @remote}, &(0x7f0000000180)=0xc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x83, 0x0) 23:03:54 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 14) [ 669.772872] FAULT_INJECTION: forcing a failure. [ 669.772872] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 669.774953] CPU: 1 PID: 6576 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 669.776115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 669.777560] Call Trace: [ 669.778001] dump_stack+0x107/0x167 [ 669.778618] should_fail.cold+0x5/0xa [ 669.779260] __alloc_pages_nodemask+0x182/0x600 [ 669.780041] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 669.781065] ? up_write+0x191/0x550 [ 669.781679] ? rwlock_bug.part.0+0x90/0x90 [ 669.782399] ? anon_vma_interval_tree_insert+0x277/0x450 [ 669.783302] alloc_pages_vma+0xbb/0x410 [ 669.783983] handle_mm_fault+0x152f/0x3500 [ 669.784719] ? perf_trace_lock+0xac/0x490 [ 669.785408] ? __lockdep_reset_lock+0x180/0x180 [ 669.786191] ? __pmd_alloc+0x630/0x630 [ 669.786877] __get_user_pages+0x6ec/0x1620 [ 669.787591] ? follow_page_mask+0x1900/0x1900 [ 669.788382] ? __lockdep_reset_lock+0x180/0x180 [ 669.789161] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 669.789955] __get_user_pages_remote+0x1d5/0x870 [ 669.790750] ? lock_downgrade+0x6d0/0x6d0 [ 669.791449] get_user_pages_remote+0x63/0x90 [ 669.792214] get_arg_page+0xba/0x200 [ 669.792839] ? acct_arg_size+0xe0/0xe0 [ 669.793490] ? downgrade_write+0x3a0/0x3a0 [ 669.794205] ? count.constprop.0+0x1b3/0x290 [ 669.794948] copy_string_kernel+0x1b4/0x450 [ 669.795676] do_execveat_common+0x525/0x8d0 [ 669.796434] ? bprm_execve+0x1960/0x1960 [ 669.797125] __x64_sys_execveat+0xed/0x140 [ 669.797846] do_syscall_64+0x33/0x40 [ 669.798471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 669.799326] RIP: 0033:0x7fc5ee6e0b19 [ 669.799943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 669.803046] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 669.804358] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 669.805576] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 669.806281] FAULT_INJECTION: forcing a failure. [ 669.806281] name failslab, interval 1, probability 0, space 0, times 0 [ 669.806776] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 669.806786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.806799] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 669.811730] CPU: 0 PID: 6586 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 669.812532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 669.813488] Call Trace: [ 669.813810] dump_stack+0x107/0x167 [ 669.814240] should_fail.cold+0x5/0xa [ 669.814689] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 669.815336] should_failslab+0x5/0x20 [ 669.815778] kmem_cache_alloc_trace+0x55/0x320 [ 669.816315] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 669.816935] io_uring_setup+0x14f6/0x2980 [ 669.817421] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 669.818010] ? wait_for_completion_io+0x270/0x270 [ 669.818576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 669.819180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 669.819781] do_syscall_64+0x33/0x40 [ 669.820215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 669.820802] RIP: 0033:0x7ff283a12b19 [ 669.821227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 669.823328] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 669.824215] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 669.825036] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 669.825859] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 669.826684] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 669.827509] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:03:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x1c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 23:03:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x0, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:03:54 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 23) 23:03:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x1c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 23:03:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:03:55 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x80, 0x0) [ 669.943978] FAULT_INJECTION: forcing a failure. [ 669.943978] name failslab, interval 1, probability 0, space 0, times 0 23:03:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 669.946264] CPU: 1 PID: 6601 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 669.947455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 669.948931] Call Trace: [ 669.949385] dump_stack+0x107/0x167 [ 669.950022] should_fail.cold+0x5/0xa [ 669.950685] ? prepare_creds+0x25/0x5e0 [ 669.951367] should_failslab+0x5/0x20 23:03:55 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 669.952016] kmem_cache_alloc+0x5b/0x310 [ 669.952866] prepare_creds+0x25/0x5e0 [ 669.953529] prepare_exec_creds+0xd/0x260 [ 669.954256] bprm_execve+0x118/0x1960 [ 669.954908] ? count.constprop.0+0x1b3/0x290 [ 669.955668] ? open_exec+0x70/0x70 [ 669.956308] ? copy_string_kernel+0x3b6/0x450 [ 669.957076] do_execveat_common+0x772/0x8d0 [ 669.957831] ? bprm_execve+0x1960/0x1960 [ 669.958548] __x64_sys_execveat+0xed/0x140 [ 669.959287] do_syscall_64+0x33/0x40 [ 669.959931] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 669.960831] RIP: 0033:0x7fc5ee6e0b19 [ 669.961470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 669.964618] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 669.965928] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 669.967156] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 669.968416] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 669.969655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.970884] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:04:09 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 15) 23:04:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x1c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 23:04:09 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000be2b2e2f6669ee3d4a83bc6c61dee6201508dadfbbbb3ffee791f1e2fd6340ed8ca696f8bdaff2d6c00d68d6982dbe944171830a33ccf02e1f4caf96ed3c1efd16a59e8541dc0ed7ddbe5ece53cbbf356e6bc49966ba2276617cf193b33cb1cc29ad3012ef5dcbcd97d8d850591250f28e0322d9f4feff9f06e5dffefbc7580f95dbbfbb1d62844c46c2456801ea0e74729d409de10c033f54800809a32f2a25a16d4a9f4d2c33bab3a5726a256dd69c169c3b17dc9f7602c5e13bba14a3b5b35501e6f23f75489212c3332ac473803a8ab8bed8e4ad9cc6becd29726fb5e682c33e08a801000000ffed8c69b07f42af1907e8f8a8cbedf1d2467ab6bcf557bfb0042bf4abdbaa27157ba87d19814f10ce30b86ec78edbf0fe4f80aa20f1d09089135b3773453c0b52f38edadaf424ef4f378bd9294a926939771e6ab7b54d93629f26f08f8a82663a2e86ded097b988d21580b836c07bc515d21da25365a40b9ddac965fdc7ff1890602e69c7c2a96a52794ee0f698fabfcd3d4ea063b3fc9ffc2433eeb7eb646a8680f5d5b0ff749b544cf8254986ede0f16a1532a459ee46a0f5b4270d1ebd2fa043533e04615d34c0dfaa045dc6a39bee067b5e07edb92c53ff2576b6864524e6e8106408edb9e013df3e09df0f22a83a9450e7105f0fa141fc9f60a293ed30402ee099d35c23bafe38fd32d19cb66dd3e2197e5920058404e8585c7999841dc09e8579101a23cf256ec283eb62f40eb8551a485124ac6ceb9d15a6453764d64a5f95a26aeceeb17f4b8bee216fdb45169af7619fd50c979b285060bee5d712dc7b69367af55d2bfd44cf62ad8411279d91bdf2a7c61c993c25989e62a82adaf7820f20e30a846cbb4bfa2a3f061c07c46285a45cf94487b6b78fc6b8540eafd2ab977fedce1bcdeef81b8457276b26935bf2dc8373310b576088c61ea82720f06ed42db6c216ac7b667284eff9f41a48269561db039ecb9bf6b5a155ebcce1a0ef2ffa6708a470c16bcfde3ddc148e2108a3cc951a76caf5e5de80e57a2f1924a5292378f7660deb9d7a6721a3270bf382e6779c1a66f2c35b2a51b6c4402df8c078cbed7bb1a1ce0708f263b2aa0a19e93db9698083f6c829accf4a6171c93dfaba76985eb1c27c103bfe0de7c677de489a57cef1ba95909627580697e37e32df870b85f7ca682eeaa26c03ee5e971037c4e0678a99e28ba785c377ab1098113333e4832ff7597514e04fe335180cc8e64e535f26f9dbb24e5a65cc4c671bd204f6e5143009ce404b2a7bd31eca2448dc66d37ebf"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:04:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 24) 23:04:09 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:04:09 executing program 4: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x374}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x7f, 0xa, 0x6, 0x6, 0x0, 0x7, 0x40000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x80000001}, 0x51041, 0x5, 0xa9d, 0x1, 0x6, 0xffff, 0x0, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/notes', 0x141800, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000000c0)=0x7f, &(0x7f0000000100)=0x1) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x4, @any, 0x6, 0x1}, 0xe) write$P9_RLOCK(r1, &(0x7f0000000200)={0x8, 0x35, 0x2}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) write$P9_RLOCK(r2, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x3}, 0x8) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10001, 0x50}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000885}, 0x4000800) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) 23:04:09 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:04:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x1c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) [ 684.673899] FAULT_INJECTION: forcing a failure. [ 684.673899] name failslab, interval 1, probability 0, space 0, times 0 [ 684.676408] CPU: 1 PID: 6631 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 684.677862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 684.679624] Call Trace: [ 684.680184] dump_stack+0x107/0x167 [ 684.680967] should_fail.cold+0x5/0xa [ 684.681778] ? create_object.isra.0+0x3a/0xa30 [ 684.682735] should_failslab+0x5/0x20 [ 684.683519] kmem_cache_alloc+0x5b/0x310 [ 684.684395] create_object.isra.0+0x3a/0xa30 [ 684.685319] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 684.686385] kmem_cache_alloc+0x159/0x310 [ 684.687267] prepare_creds+0x25/0x5e0 [ 684.688067] prepare_exec_creds+0xd/0x260 [ 684.688949] bprm_execve+0x118/0x1960 [ 684.689753] ? count.constprop.0+0x1b3/0x290 [ 684.690678] ? open_exec+0x70/0x70 [ 684.691438] ? copy_string_kernel+0x3b6/0x450 [ 684.692405] do_execveat_common+0x772/0x8d0 [ 684.693316] ? bprm_execve+0x1960/0x1960 [ 684.694190] __x64_sys_execveat+0xed/0x140 [ 684.695085] do_syscall_64+0x33/0x40 [ 684.695879] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 684.696966] RIP: 0033:0x7fc5ee6e0b19 [ 684.697755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 684.701651] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 684.703254] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 684.704810] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 684.706316] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 684.707841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 684.709361] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 684.720475] FAULT_INJECTION: forcing a failure. [ 684.720475] name failslab, interval 1, probability 0, space 0, times 0 [ 684.722889] CPU: 0 PID: 6635 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 684.724335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 684.726086] Call Trace: [ 684.726645] dump_stack+0x107/0x167 [ 684.727423] should_fail.cold+0x5/0xa [ 684.728242] ? create_object.isra.0+0x3a/0xa30 [ 684.729205] should_failslab+0x5/0x20 [ 684.730017] kmem_cache_alloc+0x5b/0x310 [ 684.730872] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 684.732134] create_object.isra.0+0x3a/0xa30 [ 684.733061] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 684.734133] kmem_cache_alloc_trace+0x151/0x320 [ 684.735124] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 684.736262] io_uring_setup+0x14f6/0x2980 [ 684.737166] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 684.738235] ? wait_for_completion_io+0x270/0x270 [ 684.739283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 684.740400] ? syscall_enter_from_user_mode+0x1d/0x50 [ 684.741502] do_syscall_64+0x33/0x40 [ 684.742292] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 684.743376] RIP: 0033:0x7ff283a12b19 [ 684.744153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 684.748057] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 684.749679] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 23:04:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x1c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) [ 684.751196] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 684.752840] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 684.754348] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 684.755856] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 684.758396] cgroup: fork rejected by pids controller in /syz2 23:04:09 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:04:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x1c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) 23:04:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}]}, 0x20}}, 0x0) 23:04:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x9d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000140)={0xa0, 0x19, 0x2, {0xc0, {0x20, 0x1, 0x6}, 0x1, 0xee00, 0xee00, 0x100, 0x1000, 0xa64, 0x8, 0x4, 0x708e, 0x4, 0x5, 0xfffffffffffffffd, 0x0, 0x7ff, 0x5d9d, 0xd586, 0x3, 0x7ff}}, 0xa0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000002c0)={0x0, 0x385f, 0x2}) write$9p(r1, &(0x7f00000000c0)="10da914da188c1820734906ff77ddd0cb799644a79a9f240e7f87bb9788b09f3a526b4c04cb3e7a5d1e968fcbf0dfaf512b7a1a013d3415dc711fd2ad56a20c37a0f4f249122c00c6ef72ba3d556fc4424f6542820c5700ef8889479b3b92755900de503b9f7db68dd8bea7c10798fbd8ac33ee7c0fbc6f1101b9c6b", 0x7c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000001fdffff17000000ea8a4a9391a0c8d3a650f5be798c22e15c24732d35c1a29d33be9cbeacd5c90fa287daaa3c68", @ANYRES32=r1, @ANYBLOB="07000000001900002e2f46696c653000c41e5817c7c5d9763d7fe9d5d6f5c4de324c58e7eaec9c0f99bb41bd46eca90000008047d6d826f7142d24e853ba8401b18623e8b1d6deb14500000000000000000000000000040000"]) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000380)="a367bd79d0d7c862fe71fdd276a6e9ddb83841dd9bd13218f143eaabcd4cc5b3c0e8de6c9645b8dcb523d973", 0x2c) splice(r7, 0x0, r6, 0x0, 0x80, 0x0) write$P9_RAUTH(r6, &(0x7f0000000200)={0x14, 0x67, 0x1, {0x40, 0x1, 0x1}}, 0x14) splice(r5, &(0x7f0000000240)=0x3f, 0xffffffffffffffff, &(0x7f0000000280), 0xf6, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r8, 0x0, r0, 0x0, 0x80, 0x0) 23:04:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:04:10 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:04:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:04:10 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 16) 23:04:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 25) 23:04:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}]}, 0x20}}, 0x0) [ 685.022823] FAULT_INJECTION: forcing a failure. [ 685.022823] name failslab, interval 1, probability 0, space 0, times 0 [ 685.025356] CPU: 1 PID: 6757 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 685.026795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 685.028559] Call Trace: [ 685.029119] dump_stack+0x107/0x167 [ 685.029887] should_fail.cold+0x5/0xa [ 685.030694] ? security_prepare_creds+0x112/0x190 [ 685.031716] should_failslab+0x5/0x20 [ 685.032527] __kmalloc+0x72/0x390 [ 685.033272] security_prepare_creds+0x112/0x190 [ 685.034256] prepare_creds+0x452/0x5e0 [ 685.035082] prepare_exec_creds+0xd/0x260 [ 685.035956] bprm_execve+0x118/0x1960 [ 685.036769] ? count.constprop.0+0x1b3/0x290 [ 685.037702] ? open_exec+0x70/0x70 [ 685.038457] ? copy_string_kernel+0x3b6/0x450 [ 685.039423] do_execveat_common+0x772/0x8d0 [ 685.040400] ? bprm_execve+0x1960/0x1960 [ 685.041277] __x64_sys_execveat+0xed/0x140 [ 685.042172] do_syscall_64+0x33/0x40 [ 685.042975] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 685.044058] RIP: 0033:0x7fc5ee6e0b19 [ 685.044847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 685.048737] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 685.050354] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 685.051858] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 685.053380] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 685.054887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 685.056415] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:04:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}]}, 0x20}}, 0x0) [ 685.102133] FAULT_INJECTION: forcing a failure. [ 685.102133] name failslab, interval 1, probability 0, space 0, times 0 [ 685.104660] CPU: 0 PID: 6828 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 685.106113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 685.107863] Call Trace: [ 685.108441] dump_stack+0x107/0x167 [ 685.109234] should_fail.cold+0x5/0xa [ 685.110041] ? create_object.isra.0+0x3a/0xa30 [ 685.111004] should_failslab+0x5/0x20 [ 685.111806] kmem_cache_alloc+0x5b/0x310 [ 685.112675] create_object.isra.0+0x3a/0xa30 [ 685.113612] kmemleak_alloc_percpu+0xa0/0x100 [ 685.114570] pcpu_alloc+0x4e2/0x1240 [ 685.115369] ? io_async_queue_proc+0x80/0x80 [ 685.116300] percpu_ref_init+0x31/0x3d0 [ 685.117161] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 685.118303] io_uring_setup+0x14f6/0x2980 [ 685.119189] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 685.120260] ? wait_for_completion_io+0x270/0x270 [ 685.121300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 685.122405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 685.123495] do_syscall_64+0x33/0x40 [ 685.124284] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 685.125384] RIP: 0033:0x7ff283a12b19 [ 685.126163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 685.130080] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 685.131684] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 685.133210] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 685.134708] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 685.136220] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 685.137744] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 699.817139] FAULT_INJECTION: forcing a failure. [ 699.817139] name failslab, interval 1, probability 0, space 0, times 0 [ 699.819622] CPU: 0 PID: 6878 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 699.821059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 699.822802] Call Trace: [ 699.823366] dump_stack+0x107/0x167 [ 699.824133] should_fail.cold+0x5/0xa [ 699.824943] ? create_object.isra.0+0x3a/0xa30 [ 699.825900] should_failslab+0x5/0x20 [ 699.826692] kmem_cache_alloc+0x5b/0x310 [ 699.827546] create_object.isra.0+0x3a/0xa30 [ 699.828471] kmemleak_alloc_percpu+0xa0/0x100 [ 699.829432] pcpu_alloc+0x4e2/0x1240 [ 699.830225] ? io_async_queue_proc+0x80/0x80 [ 699.831143] percpu_ref_init+0x31/0x3d0 [ 699.831979] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 699.833167] io_uring_setup+0x14f6/0x2980 [ 699.834042] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 699.835085] ? wait_for_completion_io+0x270/0x270 [ 699.836123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 699.837243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 699.838578] do_syscall_64+0x33/0x40 [ 699.839346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 699.840393] RIP: 0033:0x7ff283a12b19 [ 699.841174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 699.844998] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 699.846573] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 699.848057] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 699.848260] FAULT_INJECTION: forcing a failure. [ 699.848260] name failslab, interval 1, probability 0, space 0, times 0 23:04:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}]}, 0x20}}, 0x0) 23:04:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2200000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@fscache}, {@access_any}, {@debug={'debug', 0x3d, 0x10000}}], [{@dont_hash}]}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x80, 0x0) 23:04:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:04:24 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 17) 23:04:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}]}, 0x20}}, 0x0) 23:04:24 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 26) 23:04:24 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:04:24 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 699.849533] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 699.849543] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 699.849553] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 699.856960] CPU: 1 PID: 6886 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 699.858395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 699.860139] Call Trace: [ 699.860731] dump_stack+0x107/0x167 [ 699.861502] should_fail.cold+0x5/0xa [ 699.862302] ? create_object.isra.0+0x3a/0xa30 [ 699.863262] should_failslab+0x5/0x20 [ 699.864060] kmem_cache_alloc+0x5b/0x310 [ 699.864935] create_object.isra.0+0x3a/0xa30 [ 699.865855] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 699.866932] __kmalloc+0x16e/0x390 [ 699.867680] security_prepare_creds+0x112/0x190 [ 699.868665] prepare_creds+0x452/0x5e0 [ 699.869497] prepare_exec_creds+0xd/0x260 [ 699.870373] bprm_execve+0x118/0x1960 [ 699.871180] ? count.constprop.0+0x1b3/0x290 [ 699.872106] ? open_exec+0x70/0x70 [ 699.872861] ? copy_string_kernel+0x3b6/0x450 [ 699.873827] do_execveat_common+0x772/0x8d0 [ 699.874741] ? bprm_execve+0x1960/0x1960 [ 699.875611] __x64_sys_execveat+0xed/0x140 [ 699.876521] do_syscall_64+0x33/0x40 [ 699.877320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 699.878402] RIP: 0033:0x7fc5ee6e0b19 [ 699.879179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 699.883089] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 699.884774] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 699.886410] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 699.887918] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 699.889440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.890943] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:04:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:04:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:04:41 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 27) 23:04:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x40, 0x5, 0x101, 0x3, 0x22f4, 0x53a5b7da}) 23:04:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}]}, 0x20}}, 0x0) 23:04:41 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 18) 23:04:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:04:41 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 716.591516] FAULT_INJECTION: forcing a failure. 23:04:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 716.591516] name failslab, interval 1, probability 0, space 0, times 0 [ 716.594715] CPU: 0 PID: 7012 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 716.596177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 716.597932] Call Trace: [ 716.598492] dump_stack+0x107/0x167 [ 716.599240] should_fail.cold+0x5/0xa [ 716.600058] ? percpu_ref_init+0xd8/0x3d0 [ 716.600972] should_failslab+0x5/0x20 [ 716.601871] kmem_cache_alloc_trace+0x55/0x320 [ 716.603047] ? io_async_queue_proc+0x80/0x80 [ 716.604386] percpu_ref_init+0xd8/0x3d0 23:04:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) [ 716.605677] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 716.607438] io_uring_setup+0x14f6/0x2980 [ 716.608828] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 716.610489] ? wait_for_completion_io+0x270/0x270 [ 716.612125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 716.613866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 716.615567] do_syscall_64+0x33/0x40 [ 716.616815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 716.618500] RIP: 0033:0x7ff283a12b19 [ 716.619728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 716.625460] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 716.627503] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 716.629415] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 716.631337] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 716.633307] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 716.635166] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:04:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 716.639510] FAULT_INJECTION: forcing a failure. [ 716.639510] name failslab, interval 1, probability 0, space 0, times 0 [ 716.640925] CPU: 1 PID: 7013 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 716.641717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 716.642681] Call Trace: [ 716.642990] dump_stack+0x107/0x167 [ 716.643413] should_fail.cold+0x5/0xa [ 716.643860] ? __alloc_file+0x21/0x320 [ 716.644299] should_failslab+0x5/0x20 [ 716.644749] kmem_cache_alloc+0x5b/0x310 [ 716.645215] __alloc_file+0x21/0x320 [ 716.645644] alloc_empty_file+0x6d/0x170 [ 716.646115] path_openat+0xe6/0x2770 [ 716.646548] ? lock_chain_count+0x20/0x20 [ 716.647023] ? stack_trace_consume_entry+0x160/0x160 [ 716.647610] ? path_lookupat+0x860/0x860 [ 716.648078] ? kasan_save_stack+0x32/0x40 [ 716.648555] ? kasan_save_stack+0x1b/0x40 [ 716.649035] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 716.649620] ? security_prepare_creds+0x112/0x190 [ 716.650171] ? prepare_creds+0x452/0x5e0 [ 716.650632] ? prepare_exec_creds+0xd/0x260 [ 716.651134] do_filp_open+0x190/0x3e0 [ 716.651565] ? may_open_dev+0xf0/0xf0 [ 716.652010] ? perf_trace_lock+0xac/0x490 [ 716.652492] ? perf_trace_lock+0xac/0x490 [ 716.652981] ? __lockdep_reset_lock+0x180/0x180 [ 716.653521] ? find_held_lock+0x2c/0x110 [ 716.653992] do_open_execat+0x116/0x740 [ 716.654454] ? bprm_execve+0x49d/0x1960 [ 716.654910] ? __do_sys_uselib+0x6a0/0x6a0 [ 716.655394] ? do_raw_spin_lock+0x121/0x260 [ 716.655883] ? rwlock_bug.part.0+0x90/0x90 [ 716.656379] bprm_execve+0x4dc/0x1960 [ 716.656823] ? count.constprop.0+0x1b3/0x290 [ 716.657333] ? open_exec+0x70/0x70 [ 716.657743] ? copy_string_kernel+0x3b6/0x450 [ 716.658269] do_execveat_common+0x772/0x8d0 [ 716.658771] ? bprm_execve+0x1960/0x1960 [ 716.659249] __x64_sys_execveat+0xed/0x140 [ 716.659742] do_syscall_64+0x33/0x40 [ 716.660171] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 716.660832] RIP: 0033:0x7fc5ee6e0b19 [ 716.661252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 716.663333] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 716.664193] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 716.665005] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 716.665808] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.666611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 716.667415] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:04:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 23:04:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 716.716207] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:04:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 23:04:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:04:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:04:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) [ 716.778605] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:04:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:05:04 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 19) 23:05:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:04 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 28) 23:05:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:05:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 23:05:04 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/clocksource', 0x6f2c02, 0x30) 23:05:04 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:05:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 739.383964] FAULT_INJECTION: forcing a failure. [ 739.383964] name failslab, interval 1, probability 0, space 0, times 0 [ 739.385309] CPU: 1 PID: 7164 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 739.386102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 739.387065] Call Trace: [ 739.387383] dump_stack+0x107/0x167 [ 739.387806] should_fail.cold+0x5/0xa [ 739.388250] ? create_object.isra.0+0x3a/0xa30 [ 739.388780] should_failslab+0x5/0x20 [ 739.389229] kmem_cache_alloc+0x5b/0x310 [ 739.389705] create_object.isra.0+0x3a/0xa30 [ 739.390214] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 739.390800] kmem_cache_alloc_trace+0x151/0x320 [ 739.391251] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 739.391347] ? io_async_queue_proc+0x80/0x80 [ 739.393523] percpu_ref_init+0xd8/0x3d0 [ 739.393994] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 739.394628] io_uring_setup+0x14f6/0x2980 [ 739.395110] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 739.395697] ? wait_for_completion_io+0x270/0x270 [ 739.396114] FAULT_INJECTION: forcing a failure. [ 739.396114] name failslab, interval 1, probability 0, space 0, times 0 [ 739.396265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 739.399351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 739.399962] do_syscall_64+0x33/0x40 [ 739.400391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 739.400993] RIP: 0033:0x7ff283a12b19 [ 739.401423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 739.403554] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 739.404435] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 739.405263] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 739.406086] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 739.406907] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 739.407726] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 739.408570] CPU: 0 PID: 7168 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 739.410121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 739.412169] Call Trace: [ 739.412759] dump_stack+0x107/0x167 [ 739.413597] should_fail.cold+0x5/0xa [ 739.414467] ? create_object.isra.0+0x3a/0xa30 [ 739.415498] should_failslab+0x5/0x20 [ 739.416364] kmem_cache_alloc+0x5b/0x310 [ 739.417296] create_object.isra.0+0x3a/0xa30 [ 739.418288] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 739.419440] kmem_cache_alloc+0x159/0x310 [ 739.420382] __alloc_file+0x21/0x320 [ 739.421232] alloc_empty_file+0x6d/0x170 [ 739.422156] path_openat+0xe6/0x2770 [ 739.422999] ? lock_chain_count+0x20/0x20 [ 739.423938] ? stack_trace_consume_entry+0x160/0x160 [ 739.425145] ? path_lookupat+0x860/0x860 [ 739.426066] ? kasan_save_stack+0x32/0x40 [ 739.426996] ? kasan_save_stack+0x1b/0x40 [ 739.427939] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 739.429092] ? security_prepare_creds+0x112/0x190 [ 739.430180] ? prepare_creds+0x452/0x5e0 [ 739.431093] ? prepare_exec_creds+0xd/0x260 [ 739.432071] do_filp_open+0x190/0x3e0 [ 739.432928] ? may_open_dev+0xf0/0xf0 [ 739.433818] ? perf_trace_lock+0xac/0x490 [ 739.434754] ? perf_trace_lock+0xac/0x490 [ 739.435699] ? __lockdep_reset_lock+0x180/0x180 [ 739.436764] ? find_held_lock+0x2c/0x110 [ 739.437694] do_open_execat+0x116/0x740 [ 739.438591] ? bprm_execve+0x49d/0x1960 [ 739.439488] ? __do_sys_uselib+0x6a0/0x6a0 [ 739.440442] ? do_raw_spin_lock+0x121/0x260 [ 739.441423] ? rwlock_bug.part.0+0x90/0x90 [ 739.442394] bprm_execve+0x4dc/0x1960 [ 739.443262] ? count.constprop.0+0x1b3/0x290 [ 739.444265] ? open_exec+0x70/0x70 [ 739.445079] ? copy_string_kernel+0x3b6/0x450 [ 739.446110] do_execveat_common+0x772/0x8d0 [ 739.447086] ? bprm_execve+0x1960/0x1960 [ 739.448033] __x64_sys_execveat+0xed/0x140 [ 739.449002] do_syscall_64+0x33/0x40 [ 739.449848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 739.451005] RIP: 0033:0x7fc5ee6e0b19 [ 739.451839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 739.456014] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 739.457747] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 739.459356] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 739.460977] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 739.462594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 739.464215] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:05:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 23:05:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 739.582154] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:05:04 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7ff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) dup(r3) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) 23:05:04 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 29) 23:05:04 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 20) 23:05:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x20}}, 0x0) 23:05:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) [ 739.664477] FAULT_INJECTION: forcing a failure. [ 739.664477] name failslab, interval 1, probability 0, space 0, times 0 [ 739.667104] CPU: 1 PID: 7279 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 739.668650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 739.670682] Call Trace: [ 739.671279] dump_stack+0x107/0x167 [ 739.672097] should_fail.cold+0x5/0xa [ 739.672969] ? security_file_alloc+0x34/0x170 [ 739.673983] should_failslab+0x5/0x20 [ 739.674846] kmem_cache_alloc+0x5b/0x310 [ 739.675765] security_file_alloc+0x34/0x170 [ 739.676737] __alloc_file+0xb7/0x320 [ 739.677585] alloc_empty_file+0x6d/0x170 [ 739.678502] path_openat+0xe6/0x2770 [ 739.679351] ? lock_chain_count+0x20/0x20 [ 739.680294] ? stack_trace_consume_entry+0x160/0x160 [ 739.681442] ? path_lookupat+0x860/0x860 [ 739.682365] ? kasan_save_stack+0x32/0x40 [ 739.683295] ? kasan_save_stack+0x1b/0x40 [ 739.684226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 739.685374] ? security_prepare_creds+0x112/0x190 [ 739.686456] ? prepare_creds+0x452/0x5e0 [ 739.687369] ? prepare_exec_creds+0xd/0x260 [ 739.688356] do_filp_open+0x190/0x3e0 [ 739.689220] ? may_open_dev+0xf0/0xf0 [ 739.690096] ? perf_trace_lock+0xac/0x490 [ 739.691035] ? perf_trace_lock+0xac/0x490 [ 739.691983] ? __lockdep_reset_lock+0x180/0x180 [ 739.693070] ? find_held_lock+0x2c/0x110 [ 739.694018] do_open_execat+0x116/0x740 [ 739.694940] ? bprm_execve+0x49d/0x1960 [ 739.695863] ? __do_sys_uselib+0x6a0/0x6a0 [ 739.696825] ? do_raw_spin_lock+0x121/0x260 [ 739.697825] ? rwlock_bug.part.0+0x90/0x90 [ 739.698809] bprm_execve+0x4dc/0x1960 [ 739.699688] ? count.constprop.0+0x1b3/0x290 [ 739.700705] ? open_exec+0x70/0x70 [ 739.701552] ? copy_string_kernel+0x3b6/0x450 [ 739.702599] do_execveat_common+0x772/0x8d0 [ 739.703596] ? bprm_execve+0x1960/0x1960 [ 739.704564] __x64_sys_execveat+0xed/0x140 [ 739.705567] do_syscall_64+0x33/0x40 [ 739.706423] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 739.707590] RIP: 0033:0x7fc5ee6e0b19 [ 739.708432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 739.712622] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 739.714355] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 739.714981] FAULT_INJECTION: forcing a failure. [ 739.714981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.715971] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 739.715983] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 739.715994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 739.716015] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 739.724850] CPU: 0 PID: 7284 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 739.726323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 739.728087] Call Trace: [ 739.728649] dump_stack+0x107/0x167 [ 739.729442] should_fail.cold+0x5/0xa [ 739.730269] _copy_to_user+0x2e/0x180 [ 739.731089] io_uring_setup+0x11b5/0x2980 [ 739.731974] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 739.733061] ? wait_for_completion_io+0x270/0x270 [ 739.734113] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 739.735228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 739.736323] do_syscall_64+0x33/0x40 [ 739.737123] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 739.738224] RIP: 0033:0x7ff283a12b19 23:05:04 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 739.739008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 739.743043] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 739.744666] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 739.746190] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 739.747703] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 739.749226] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 739.750744] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 739.773267] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:05:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:05:18 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:05:18 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 30) 23:05:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:05:18 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 21) 23:05:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 23:05:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 753.626760] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 753.629782] FAULT_INJECTION: forcing a failure. [ 753.629782] name failslab, interval 1, probability 0, space 0, times 0 [ 753.631282] CPU: 1 PID: 7408 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 753.632179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 753.633280] Call Trace: [ 753.633630] dump_stack+0x107/0x167 [ 753.634107] should_fail.cold+0x5/0xa [ 753.634600] ? __d_alloc+0x2a/0x990 [ 753.635073] should_failslab+0x5/0x20 [ 753.635578] kmem_cache_alloc+0x5b/0x310 [ 753.636111] __d_alloc+0x2a/0x990 [ 753.636571] ? find_held_lock+0x2c/0x110 [ 753.637122] d_alloc_pseudo+0x19/0x70 [ 753.637637] alloc_file_pseudo+0xce/0x250 [ 753.638169] ? trace_hardirqs_on+0x5b/0x180 [ 753.638720] ? alloc_file+0x5a0/0x5a0 [ 753.639235] anon_inode_getfile+0xc8/0x1f0 [ 753.639783] io_uring_setup+0x138b/0x2980 [ 753.640320] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 753.640974] ? wait_for_completion_io+0x270/0x270 [ 753.641626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 753.642319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 753.642989] do_syscall_64+0x33/0x40 [ 753.643473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 753.644138] RIP: 0033:0x7ff283a12b19 [ 753.644609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.646998] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 753.647996] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 753.648916] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 753.649864] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 753.650784] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 753.651725] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 753.655180] FAULT_INJECTION: forcing a failure. [ 753.655180] name failslab, interval 1, probability 0, space 0, times 0 [ 753.657749] CPU: 0 PID: 7413 Comm: syz-executor.6 Not tainted 5.10.258 #1 23:05:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x20}}, 0x0) [ 753.659273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 753.661303] Call Trace: [ 753.661896] dump_stack+0x107/0x167 [ 753.662722] should_fail.cold+0x5/0xa [ 753.663582] ? security_file_alloc+0x34/0x170 [ 753.664591] should_failslab+0x5/0x20 [ 753.665482] kmem_cache_alloc+0x5b/0x310 [ 753.666405] security_file_alloc+0x34/0x170 [ 753.667382] __alloc_file+0xb7/0x320 [ 753.668229] alloc_empty_file+0x6d/0x170 [ 753.669169] path_openat+0xe6/0x2770 [ 753.670026] ? lock_chain_count+0x20/0x20 [ 753.670967] ? stack_trace_consume_entry+0x160/0x160 [ 753.672110] ? path_lookupat+0x860/0x860 [ 753.673032] ? kasan_save_stack+0x32/0x40 [ 753.673987] ? kasan_save_stack+0x1b/0x40 [ 753.674918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 753.676058] ? security_prepare_creds+0x112/0x190 [ 753.677163] ? prepare_creds+0x452/0x5e0 [ 753.678095] ? prepare_exec_creds+0xd/0x260 [ 753.679071] do_filp_open+0x190/0x3e0 [ 753.679928] ? may_open_dev+0xf0/0xf0 [ 753.680806] ? perf_trace_lock+0xac/0x490 [ 753.681764] ? perf_trace_lock+0xac/0x490 [ 753.682701] ? __lockdep_reset_lock+0x180/0x180 [ 753.683752] ? find_held_lock+0x2c/0x110 [ 753.684669] do_open_execat+0x116/0x740 [ 753.685586] ? bprm_execve+0x49d/0x1960 [ 753.686485] ? __do_sys_uselib+0x6a0/0x6a0 [ 753.687428] ? do_raw_spin_lock+0x121/0x260 [ 753.688391] ? rwlock_bug.part.0+0x90/0x90 [ 753.689382] bprm_execve+0x4dc/0x1960 [ 753.690242] ? count.constprop.0+0x1b3/0x290 [ 753.691230] ? open_exec+0x70/0x70 [ 753.692027] ? copy_string_kernel+0x3b6/0x450 [ 753.693042] do_execveat_common+0x772/0x8d0 [ 753.694033] ? bprm_execve+0x1960/0x1960 [ 753.694941] __x64_sys_execveat+0xed/0x140 [ 753.695882] do_syscall_64+0x33/0x40 [ 753.696692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 753.697832] RIP: 0033:0x7fc5ee6e0b19 [ 753.698643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.702689] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 753.704378] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 753.705964] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 753.707525] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.709091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 753.710663] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:05:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x20}}, 0x0) 23:05:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x20}}, 0x0) 23:05:18 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 22) 23:05:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x20}}, 0x0) 23:05:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) [ 753.847007] FAULT_INJECTION: forcing a failure. [ 753.847007] name failslab, interval 1, probability 0, space 0, times 0 [ 753.848452] CPU: 1 PID: 7525 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 753.849272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 753.850259] Call Trace: [ 753.850576] dump_stack+0x107/0x167 [ 753.851011] should_fail.cold+0x5/0xa [ 753.851465] ? create_object.isra.0+0x3a/0xa30 [ 753.852007] should_failslab+0x5/0x20 [ 753.852466] kmem_cache_alloc+0x5b/0x310 [ 753.852954] create_object.isra.0+0x3a/0xa30 [ 753.853484] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 753.854097] kmem_cache_alloc+0x159/0x310 [ 753.854590] __d_alloc+0x2a/0x990 [ 753.855015] ? find_held_lock+0x2c/0x110 [ 753.855491] d_alloc_pseudo+0x19/0x70 [ 753.855938] alloc_file_pseudo+0xce/0x250 [ 753.856419] ? trace_hardirqs_on+0x5b/0x180 [ 753.856925] ? alloc_file+0x5a0/0x5a0 [ 753.857394] anon_inode_getfile+0xc8/0x1f0 [ 753.857900] io_uring_setup+0x138b/0x2980 [ 753.858393] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 753.858998] ? wait_for_completion_io+0x270/0x270 [ 753.859576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 753.860199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 753.860814] do_syscall_64+0x33/0x40 [ 753.861265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 753.861866] RIP: 0033:0x7ff283a12b19 [ 753.862306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.864471] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 753.865377] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 753.866212] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 753.867055] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 753.867891] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 753.868730] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:05:18 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:05:31 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 31) 23:05:31 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000be2b2e2f6669ee3d4a83bc6c61dee6201508dadfbbbb3ffee791f1e2fd6340ed8ca696f8bdaff2d6c00d68d6982dbe944171830a33ccf02e1f4caf96ed3c1efd16a59e8541dc0ed7ddbe5ece53cbbf356e6bc49966ba2276617cf193b33cb1cc29ad3012ef5dcbcd97d8d850591250f28e0322d9f4feff9f06e5dffefbc7580f95dbbfbb1d62844c46c2456801ea0e74729d409de10c033f54800809a32f2a25a16d4a9f4d2c33bab3a5726a256dd69c169c3b17dc9f7602c5e13bba14a3b5b35501e6f23f75489212c3332ac473803a8ab8bed8e4ad9cc6becd29726fb5e682c33e08a801000000ffed8c69b07f42af1907e8f8a8cbedf1d2467ab6bcf557bfb0042bf4abdbaa27157ba87d19814f10ce30b86ec78edbf0fe4f80aa20f1d09089135b3773453c0b52f38edadaf424ef4f378bd9294a926939771e6ab7b54d93629f26f08f8a82663a2e86ded097b988d21580b836c07bc515d21da25365a40b9ddac965fdc7ff1890602e69c7c2a96a52794ee0f698fabfcd3d4ea063b3fc9ffc2433eeb7eb646a8680f5d5b0ff749b544cf8254986ede0f16a1532a459ee46a0f5b4270d1ebd2fa043533e04615d34c0dfaa045dc6a39bee067b5e07edb92c53ff2576b6864524e6e8106408edb9e013df3e09df0f22a83a9450e7105f0fa141fc9f60a293ed30402ee099d35c23bafe38fd32d19cb66dd3e2197e5920058404e8585c7999841dc09e8579101a23cf256ec283eb62f40eb8551a485124ac6ceb9d15a6453764d64a5f95a26aeceeb17f4b8bee216fdb45169af7619fd50c979b285060bee5d712dc7b69367af55d2bfd44cf62ad8411279d91bdf2a7c61c993c25989e62a82adaf7820f20e30a846cbb4bfa2a3f061c07c46285a45cf94487b6b78fc6b8540eafd2ab977fedce1bcdeef81b8457276b26935bf2dc8373310b576088c61ea82720f06ed42db6c216ac7b667284eff9f41a48269561db039ecb9bf6b5a155ebcce1a0ef2ffa6708a470c16bcfde3ddc148e2108a3cc951a76caf5e5de80e57a2f1924a5292378f7660deb9d7a6721a3270bf382e6779c1a66f2c35b2a51b6c4402df8c078cbed7bb1a1ce0708f263b2aa0a19e93db9698083f6c829accf4a6171c93dfaba76985eb1c27c103bfe0de7c677de489a57cef1ba95909627580697e37e32df870b85f7ca682eeaa26c03ee5e971037c4e0678a99e28ba785c377ab1098113333e4832ff7597514e04fe335180cc8e64e535f26f9dbb24e5a65cc4c671bd204f6e5143009ce404b2a7bd31eca2448dc66d37ebf"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:05:31 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 23) [ 766.598219] FAULT_INJECTION: forcing a failure. [ 766.598219] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 766.600889] CPU: 1 PID: 7545 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 766.602414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 766.604268] Call Trace: [ 766.604864] dump_stack+0x107/0x167 [ 766.605690] should_fail.cold+0x5/0xa [ 766.606558] __alloc_pages_nodemask+0x182/0x600 [ 766.607604] ? mark_held_locks+0x9e/0xe0 [ 766.608512] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 766.609876] ? kmem_cache_free+0xa7/0x2d0 [ 766.610806] alloc_pages_current+0x187/0x280 [ 766.611783] __get_free_pages+0xc/0xa0 [ 766.612653] ? kmem_cache_free+0x249/0x2d0 [ 766.613588] tlb_remove_table+0x3d5/0xcc0 [ 766.614515] ___pte_free_tlb+0x86/0xb0 [ 766.615385] free_pgd_range+0x747/0x1380 [ 766.616306] free_pgtables+0x230/0x2f0 [ 766.617174] exit_mmap+0x28e/0x4f0 [ 766.617975] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 766.619155] mmput+0xca/0x340 [ 766.619846] free_bprm+0x65/0x2e0 [ 766.620608] do_execveat_common+0x2e1/0x8d0 [ 766.621573] ? bprm_execve+0x1960/0x1960 [ 766.622486] __x64_sys_execveat+0xed/0x140 [ 766.623437] do_syscall_64+0x33/0x40 [ 766.624274] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 766.625429] RIP: 0033:0x7fc5ee6e0b19 [ 766.626256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 766.630397] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 766.632079] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 766.633656] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 766.635222] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.636783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 766.638347] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 [ 766.642315] FAULT_INJECTION: forcing a failure. [ 766.642315] name failslab, interval 1, probability 0, space 0, times 0 [ 766.644805] CPU: 1 PID: 7546 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 766.646309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 766.648383] Call Trace: [ 766.648969] dump_stack+0x107/0x167 [ 766.649777] should_fail.cold+0x5/0xa [ 766.650654] ? __alloc_file+0x21/0x320 [ 766.651512] should_failslab+0x5/0x20 [ 766.652345] kmem_cache_alloc+0x5b/0x310 [ 766.653235] __alloc_file+0x21/0x320 [ 766.654061] alloc_empty_file+0x6d/0x170 [ 766.654953] alloc_file+0x5e/0x5a0 [ 766.655731] alloc_file_pseudo+0x16a/0x250 [ 766.656656] ? alloc_file+0x5a0/0x5a0 23:05:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x20}}, 0x0) 23:05:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:05:31 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:31 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) fork() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 766.657510] anon_inode_getfile+0xc8/0x1f0 [ 766.658602] io_uring_setup+0x138b/0x2980 [ 766.659512] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 766.660610] ? wait_for_completion_io+0x270/0x270 [ 766.661706] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 766.662863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 766.663981] do_syscall_64+0x33/0x40 [ 766.664789] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 766.665911] RIP: 0033:0x7ff283a12b19 [ 766.666715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 766.670702] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 766.672354] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 766.673892] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 766.675453] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 766.677009] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 766.678582] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:05:31 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:31 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 24) 23:05:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000be2b2e2f6669ee3d4a83bc6c61dee6201508dadfbbbb3ffee791f1e2fd6340ed8ca696f8bdaff2d6c00d68d6982dbe944171830a33ccf02e1f4caf96ed3c1efd16a59e8541dc0ed7ddbe5ece53cbbf356e6bc49966ba2276617cf193b33cb1cc29ad3012ef5dcbcd97d8d850591250f28e0322d9f4feff9f06e5dffefbc7580f95dbbfbb1d62844c46c2456801ea0e74729d409de10c033f54800809a32f2a25a16d4a9f4d2c33bab3a5726a256dd69c169c3b17dc9f7602c5e13bba14a3b5b35501e6f23f75489212c3332ac473803a8ab8bed8e4ad9cc6becd29726fb5e682c33e08a801000000ffed8c69b07f42af1907e8f8a8cbedf1d2467ab6bcf557bfb0042bf4abdbaa27157ba87d19814f10ce30b86ec78edbf0fe4f80aa20f1d09089135b3773453c0b52f38edadaf424ef4f378bd9294a926939771e6ab7b54d93629f26f08f8a82663a2e86ded097b988d21580b836c07bc515d21da25365a40b9ddac965fdc7ff1890602e69c7c2a96a52794ee0f698fabfcd3d4ea063b3fc9ffc2433eeb7eb646a8680f5d5b0ff749b544cf8254986ede0f16a1532a459ee46a0f5b4270d1ebd2fa043533e04615d34c0dfaa045dc6a39bee067b5e07edb92c53ff2576b6864524e6e8106408edb9e013df3e09df0f22a83a9450e7105f0fa141fc9f60a293ed30402ee099d35c23bafe38fd32d19cb66dd3e2197e5920058404e8585c7999841dc09e8579101a23cf256ec283eb62f40eb8551a485124ac6ceb9d15a6453764d64a5f95a26aeceeb17f4b8bee216fdb45169af7619fd50c979b285060bee5d712dc7b69367af55d2bfd44cf62ad8411279d91bdf2a7c61c993c25989e62a82adaf7820f20e30a846cbb4bfa2a3f061c07c46285a45cf94487b6b78fc6b8540eafd2ab977fedce1bcdeef81b8457276b26935bf2dc8373310b576088c61ea82720f06ed42db6c216ac7b667284eff9f41a48269561db039ecb9bf6b5a155ebcce1a0ef2ffa6708a470c16bcfde3ddc148e2108a3cc951a76caf5e5de80e57a2f1924a5292378f7660deb9d7a6721a3270bf382e6779c1a66f2c35b2a51b6c4402df8c078cbed7bb1a1ce0708f263b2aa0a19e93db9698083f6c829accf4a6171c93dfaba76985eb1c27c103bfe0de7c677de489a57cef1ba95909627580697e37e32df870b85f7ca682eeaa26c03ee5e971037c4e0678a99e28ba785c377ab1098113333e4832ff7597514e04fe335180cc8e64e535f26f9dbb24e5a65cc4c671bd204f6e5143009ce404b2a7bd31eca2448dc66d37ebf"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:05:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:05:31 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 32) [ 766.957183] FAULT_INJECTION: forcing a failure. [ 766.957183] name failslab, interval 1, probability 0, space 0, times 0 [ 766.959783] CPU: 0 PID: 7672 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 766.961348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 766.963330] Call Trace: [ 766.963930] dump_stack+0x107/0x167 [ 766.964754] should_fail.cold+0x5/0xa [ 766.965617] ? create_object.isra.0+0x3a/0xa30 [ 766.966650] should_failslab+0x5/0x20 [ 766.967502] kmem_cache_alloc+0x5b/0x310 [ 766.968415] create_object.isra.0+0x3a/0xa30 [ 766.969413] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 766.970555] kmem_cache_alloc+0x159/0x310 [ 766.971492] __alloc_file+0x21/0x320 [ 766.972336] alloc_empty_file+0x6d/0x170 [ 766.973271] alloc_file+0x5e/0x5a0 [ 766.974086] alloc_file_pseudo+0x16a/0x250 [ 766.975047] ? alloc_file+0x5a0/0x5a0 [ 766.975928] anon_inode_getfile+0xc8/0x1f0 [ 766.976879] io_uring_setup+0x138b/0x2980 [ 766.977842] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 766.978989] ? wait_for_completion_io+0x270/0x270 [ 766.980106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 766.981304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 766.982462] do_syscall_64+0x33/0x40 [ 766.983305] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 766.984470] RIP: 0033:0x7ff283a12b19 [ 766.985319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 766.988153] FAULT_INJECTION: forcing a failure. [ 766.988153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 766.989480] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 766.989502] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 766.989522] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 766.996701] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 766.998324] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 766.999933] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 767.001559] CPU: 1 PID: 7675 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 767.003131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.005043] Call Trace: [ 767.005667] dump_stack+0x107/0x167 [ 767.006499] should_fail.cold+0x5/0xa [ 767.007379] __alloc_pages_nodemask+0x182/0x600 [ 767.008433] ? mark_held_locks+0x9e/0xe0 [ 767.009372] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 767.010758] ? kmem_cache_free+0xa7/0x2d0 [ 767.011721] alloc_pages_current+0x187/0x280 [ 767.012726] __get_free_pages+0xc/0xa0 [ 767.013611] ? kmem_cache_free+0x249/0x2d0 [ 767.014594] tlb_remove_table+0x3d5/0xcc0 [ 767.015545] ___pte_free_tlb+0x86/0xb0 [ 767.016432] free_pgd_range+0x747/0x1380 [ 767.017413] free_pgtables+0x230/0x2f0 [ 767.018299] exit_mmap+0x28e/0x4f0 [ 767.019130] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 767.020356] mmput+0xca/0x340 [ 767.021068] free_bprm+0x65/0x2e0 [ 767.021858] do_execveat_common+0x2e1/0x8d0 [ 767.022844] ? bprm_execve+0x1960/0x1960 [ 767.023802] __x64_sys_execveat+0xed/0x140 [ 767.024766] do_syscall_64+0x33/0x40 [ 767.025623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 767.026816] RIP: 0033:0x7fc5ee6e0b19 [ 767.027663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.031890] RSP: 002b:00007fc5ebc56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 767.033633] RAX: ffffffffffffffda RBX: 00007fc5ee7f3f60 RCX: 00007fc5ee6e0b19 [ 767.035257] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 767.036884] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.038509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 767.040150] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:05:32 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:05:32 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) fork() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:05:32 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:32 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:05:32 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 25) [ 767.316301] FAULT_INJECTION: forcing a failure. [ 767.316301] name failslab, interval 1, probability 0, space 0, times 0 [ 767.319217] CPU: 0 PID: 7797 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 767.320781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.322660] Call Trace: [ 767.323256] dump_stack+0x107/0x167 [ 767.324078] should_fail.cold+0x5/0xa [ 767.324934] ? security_file_alloc+0x34/0x170 [ 767.325937] should_failslab+0x5/0x20 [ 767.326785] kmem_cache_alloc+0x5b/0x310 [ 767.327700] security_file_alloc+0x34/0x170 [ 767.328687] __alloc_file+0xb7/0x320 [ 767.329534] alloc_empty_file+0x6d/0x170 [ 767.330449] alloc_file+0x5e/0x5a0 [ 767.331248] alloc_file_pseudo+0x16a/0x250 [ 767.332366] ? alloc_file+0x5a0/0x5a0 [ 767.333332] anon_inode_getfile+0xc8/0x1f0 [ 767.334301] io_uring_setup+0x138b/0x2980 [ 767.335250] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 767.336398] ? wait_for_completion_io+0x270/0x270 [ 767.337520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 767.338705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 767.339858] do_syscall_64+0x33/0x40 [ 767.340699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 767.341867] RIP: 0033:0x7ff283a12b19 [ 767.342701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.346858] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 767.348573] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 767.350183] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 767.351783] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 767.353392] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 767.355009] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 781.187397] FAULT_INJECTION: forcing a failure. [ 781.187397] name failslab, interval 1, probability 0, space 0, times 0 [ 781.189846] CPU: 0 PID: 7809 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 781.191263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 781.192969] Call Trace: [ 781.193523] dump_stack+0x107/0x167 [ 781.194275] should_fail.cold+0x5/0xa [ 781.195062] ? create_object.isra.0+0x3a/0xa30 [ 781.196003] should_failslab+0x5/0x20 [ 781.196788] kmem_cache_alloc+0x5b/0x310 [ 781.197633] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 781.198766] create_object.isra.0+0x3a/0xa30 [ 781.199664] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 781.200714] kmem_cache_alloc+0x159/0x310 [ 781.201579] security_file_alloc+0x34/0x170 [ 781.202468] __alloc_file+0xb7/0x320 [ 781.203234] alloc_empty_file+0x6d/0x170 [ 781.204069] alloc_file+0x5e/0x5a0 [ 781.204800] alloc_file_pseudo+0x16a/0x250 [ 781.205671] ? alloc_file+0x5a0/0x5a0 [ 781.206475] anon_inode_getfile+0xc8/0x1f0 [ 781.207354] io_uring_setup+0x138b/0x2980 [ 781.208215] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 781.209259] ? wait_for_completion_io+0x270/0x270 [ 781.210286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 781.211359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 781.212416] do_syscall_64+0x33/0x40 [ 781.213181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 781.214572] RIP: 0033:0x7ff283a12b19 [ 781.215329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 781.219103] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 781.220672] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 781.222146] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 781.223604] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 781.225064] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 781.226536] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:05:46 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) fork() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:05:46 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(r2, r0, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x0, 0x1, 0x6}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}]) 23:05:46 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 33) 23:05:46 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:05:46 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 26) 23:05:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000200)={0x8001, 0x0, 0x8, 0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="f87695f7bc79ec472fe804159a278993f500560468f2e17aca85044110190dc55c0200de5c4cd85a25109ff3826a8fb3d19cd049390a2f342268d06f903007e4913777a60a010f27d4454d81767e019b8e1fff333d54c2f94db8afea812136af937d8c146adeacbdad31e684f93b4d8cfdcbef66f9a93ad98cc8c3e9017e7d"], 0x3f8}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f00000007c0)={0x148, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 23:05:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 781.236247] FAULT_INJECTION: forcing a failure. [ 781.236247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.238887] CPU: 0 PID: 7810 Comm: syz-executor.6 Not tainted 5.10.258 #1 [ 781.240274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 781.241972] Call Trace: [ 781.242507] dump_stack+0x107/0x167 [ 781.243246] should_fail.cold+0x5/0xa [ 781.244024] _copy_from_user+0x2e/0x1b0 [ 781.244831] kstrtouint_from_user+0xbd/0x220 [ 781.245719] ? kstrtou8_from_user+0x210/0x210 [ 781.246614] ? lock_acquire+0x197/0x470 [ 781.247402] ? ksys_write+0x12d/0x260 [ 781.248197] proc_fail_nth_write+0x78/0x220 [ 781.249084] ? proc_task_getattr+0x1f0/0x1f0 [ 781.250013] ? proc_task_getattr+0x1f0/0x1f0 [ 781.250913] vfs_write+0x29a/0xb10 [ 781.251652] ksys_write+0x12d/0x260 [ 781.252397] ? __ia32_sys_read+0xb0/0xb0 [ 781.253236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 781.254316] ? syscall_enter_from_user_mode+0x1d/0x50 [ 781.255384] do_syscall_64+0x33/0x40 [ 781.256148] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 781.257199] RIP: 0033:0x7fc5ee6935ff [ 781.257967] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 781.261770] RSP: 002b:00007fc5ebc56170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 781.263321] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc5ee6935ff [ 781.264789] RDX: 0000000000000001 RSI: 00007fc5ebc561e0 RDI: 0000000000000004 [ 781.266253] RBP: 00007fc5ebc561d0 R08: 0000000000000000 R09: 0000000000000000 [ 781.267718] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 781.269134] R13: 00007ffd7965f9cf R14: 00007fc5ebc56300 R15: 0000000000022000 23:05:46 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:46 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 23:05:46 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 27) 23:05:46 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/notes', 0x0, 0x137) r3 = gettid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)) sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x9) r4 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x2, 0x80, 0x44, 0x3a, 0x0, 0xf1, 0x8, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x401, 0x8}, 0x200, 0x2, 0x2, 0x7, 0x800, 0x3, 0x8, 0x0, 0x20, 0x0, 0x100000001}, r3, 0x3, r0, 0xa) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) tkill(r3, 0x22) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000180)={{0x0, 0x6, 0x3, 0x80000001, 0xfffffffffffffffc, 0x1, 0x9, 0x6, 0x442c, 0x4, 0x5, 0x8001, 0x3, 0x6, 0x758}, 0x8, [0x0]}) [ 781.470322] FAULT_INJECTION: forcing a failure. [ 781.470322] name failslab, interval 1, probability 0, space 0, times 0 [ 781.472446] CPU: 0 PID: 7938 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 781.473761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 781.475321] Call Trace: [ 781.475826] dump_stack+0x107/0x167 [ 781.476526] should_fail.cold+0x5/0xa [ 781.477240] ? io_uring_alloc_task_context+0x99/0x6a0 [ 781.478218] should_failslab+0x5/0x20 [ 781.478939] kmem_cache_alloc_trace+0x55/0x320 [ 781.479809] io_uring_alloc_task_context+0x99/0x6a0 [ 781.480746] ? io_import_iovec+0x1120/0x1120 [ 781.481599] ? lock_downgrade+0x6d0/0x6d0 [ 781.482381] ? do_raw_spin_lock+0x121/0x260 [ 781.483179] ? rwlock_bug.part.0+0x90/0x90 [ 781.483975] __io_uring_add_tctx_node+0x2c6/0x520 [ 781.484871] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 781.485861] ? alloc_fd+0x2e7/0x670 [ 781.486560] io_uring_setup+0x1fbb/0x2980 [ 781.487344] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 781.488286] ? wait_for_completion_io+0x270/0x270 [ 781.489207] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 781.490216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 781.491181] do_syscall_64+0x33/0x40 [ 781.491865] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 781.492804] RIP: 0033:0x7ff283a12b19 [ 781.493488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 781.496854] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 781.498246] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 781.499549] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 781.500834] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 781.502127] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 781.503427] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:05:46 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:46 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:05:46 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2) 23:05:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x8) 23:05:59 executing program 4: ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) write$P9_RAUTH(r0, &(0x7f0000000140)={0x14, 0x67, 0x2, {0x8, 0x1, 0x6}}, 0x14) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r1, 0x264f1000) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, @out_args}, './file0\x00'}) 23:05:59 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:05:59 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(r2, r0, 0x2) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x0, 0x1, 0x6}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}]) 23:05:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 1) 23:05:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:59 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 28) 23:05:59 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 794.013565] FAULT_INJECTION: forcing a failure. [ 794.013565] name failslab, interval 1, probability 0, space 0, times 0 [ 794.014982] CPU: 1 PID: 8070 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 794.015800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 794.016747] Call Trace: [ 794.017064] dump_stack+0x107/0x167 [ 794.017482] should_fail.cold+0x5/0xa [ 794.017931] ? create_object.isra.0+0x3a/0xa30 [ 794.018451] should_failslab+0x5/0x20 [ 794.018883] kmem_cache_alloc+0x5b/0x310 [ 794.019348] create_object.isra.0+0x3a/0xa30 [ 794.019846] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 794.020445] kmem_cache_alloc_trace+0x151/0x320 [ 794.020981] io_uring_alloc_task_context+0x99/0x6a0 [ 794.021546] ? io_import_iovec+0x1120/0x1120 [ 794.022062] ? lock_downgrade+0x6d0/0x6d0 [ 794.022531] ? do_raw_spin_lock+0x121/0x260 [ 794.023021] ? rwlock_bug.part.0+0x90/0x90 [ 794.023502] __io_uring_add_tctx_node+0x2c6/0x520 [ 794.024051] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 794.024670] ? alloc_fd+0x2e7/0x670 [ 794.025091] io_uring_setup+0x1fbb/0x2980 [ 794.025588] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 794.026169] ? wait_for_completion_io+0x270/0x270 [ 794.026750] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 794.027344] ? syscall_enter_from_user_mode+0x1d/0x50 [ 794.027953] do_syscall_64+0x33/0x40 [ 794.028378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 794.028976] RIP: 0033:0x7ff283a12b19 [ 794.029401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.031581] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 794.032459] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 794.033270] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 794.034097] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 794.034923] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 794.035753] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:05:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) write$9p(r1, &(0x7f0000000100)="c0be975e1cdcfecc77aa502a30b4993872648eb45b4d378cf714a2c26133bb4768e85c11d2e454a2a8942c3b9703e931f3b3dd0f33bbbff3edd5008b60b48f4381e7491407b742513abfff2d6eb127ccbd0c3fa268a2f24eff4a6249b8c65a1d275842cb3e6040487f80663b8a5b932e0572acad2d1341b3ea3b04a4808145b4270a94ef78993bc176254a4380baf1abf3212c60713728f7c1af16c0eab0aa97fda2455f9d34ed4676f33b0934bb7bc89cd67a04b2d82709fbaa73ec756e32d4b699ce37c944a9f073859028a99816fabfb0a3e6ccaa5cca64d8a9f52b60c821b00c4d042d37d7aa4dc739582b28ce13d2c3805297d3bcf3223f2b9ef57588eb6527a5975d9aaeabd5ec87393eccd05d9f99a44e44350e02657eee39dbbcf7e6be57206062ad376d0c08ee172f3755a79a63fb27a2e2999692f2c834941910b112d9ce64f4bb96eaeef10a4a8acbdfb81ba700da833ddafebf40ac9436b2b14a6a3e7bf9bacb5d62705f6bc24403deb7e438b6d2b22bc02e83961a5650a7ef2e0fd6a85fa495112de4b7a4d285bdf23c34eda3beb7a4cc6220e8a25164d9dd889fc2b2dbc0745d9760f9baa25cc939bc7909f9021e2ca5af9d8130274b7fb979a48434862df10794fee73540eb2057bdc15b22695dcc15ead0f0015a0d922f3c3d9cbee3fd7c08c1741bfe0fa78c0b1b5a8acc4dc98772dcd480b0e4bc5c4e3987c40566ffefad8bd2951020bd77c27508659115f0d760a5745409e88e238856bae4d64c367561135e5cc41f61853c9cea3451b07fb3817a1490310e40790667c462783674b90fd8d0aa99b4a4c7a6dc47d43923b0971670d0c86bc6749eb6a076b2051cb7820951a80f6bdc49cfea23aff8f2d647f25755771322cdf5ff4a479f414988b706cd69c3b0d1b15a39d8e2e1ede5db1a6489fe03e5420586140074247e02aa76faf60722201511038ca59a94de641a7db3c25de2c2427269b7e66114bcd537625f74253004bcba83dfadbfec513262996ea4f2d0038bb6c231d47fc7564a9b03998d8b101b338215fe3e225e6afd2f1a2674c9708bdce8bf522308bea0e96982b6cee8cf0f8ae4a03724ea1001c8b83f26f8a9354581868eef4b780fd69d5a5999c8d32a057cb381a41e47065dcaa2f6933fc6eb0751f0802aa6eca837387fe7565ecf424ee95c360f8dd92a44b5100930ac3217fc498f292cb20c04ed6b96bd5f42ec5c5801aa9244fc563a1b014a52c5846ed09749479840b6a97ad05954847e5f645d652b51054ba6e4aa9b68ec6b519d605b8be566ca6aebeabcb052da97b14e77f00d2fcdd166cc1b1b255885e750f8b548ceb54bc3b4d60fd80fd81fe5db1633bd4d848675476eca99ca8e8763238df8bb4a5a0c61720dbd9594b0d7f8ab9c89a974d61073b56e096d6b15023fcffbae74b26c985bf287dde51045bea378bed4c22a2d38b2f90e9d12b7a2089628666c690037d56459b0c96f4588f5a946bbf7906b866da6e6ad0dd43240fb266f8499c42c5f8a45b0e15ce4c441c81fff54b4e2e916f87c8c4601777585020759333250f232a6b98549159d30abb5ffb6bc7ec7281c0607eca2ba7295035c6e1d04b74066408fcd1a9bb63a106738bfb3d8e3cb95b7aaccd5dca0ddcc80d80806f974f58f746bcb0bb26a4723d1dca57b296e0af53f892d714733bff5d30371ae211f3f5bd4a46b880643ce20410f08f1a2a1c5b3abfe1baed78608cbe61f113d308d46df1b7a85c08e0e0ce353468e308c50a88cfcb4463a55efaa7b70ca3b81aa9f6feb7a5d25732992876f158bfc35d61ece8ac37024018c1cbc4a2bc37166d5a096059d96f0985a2359e8ef04670a4e967026bbbbb511189c1aa1a721644e388bfb1c21499e7a6675641fcd4394b4fb94b4f8ae758883d33fc6e1f45bef93c9c43fbed2d64aa09505a160df08b8d5420342dbd7d2dddd6f591766e8eadbf760f2c449aeabf65365b19110f05df637f12fbcbd19c134ec62a11405b25ecbff7ac4ea1c8537d573c185d8164b672f66d63bc2deebab7a58e5dcaffd33db0d51ae416a548469b6df7e4b202b8c9162b49a7e77410667e968de405ecf6a93d58d5f72390efb443ed257525661206b9d71a28ef2713120c52ca539a974cfbf972c91e8dc8ef2c71f3125129ffc55087b8af89aad9eb94cc3f28e44b7e0f5fddcf4eb1eed83d68724fb11652b946a119e879993ed1b8b12de5f63f3eee8705228f50309e1ca321d2ec2cfae31ca789fcd01d7e200d12d94fe0c83d3e07a210d1390626f4721900a671061b8500c9f98d4ad678bef6df785cf593ea8bc446975301f42ab0379b03c2c8ea6de9f9f5b913097eff05d4bb65592a36039e3d10b17cc7ad0b65b1c475f721649476656ced15d1fb35dad011501c31b7539fb5d1852c16399272ef484a430c46d820d5ab23292c9d0766a875a8c565899f1e12387fbaf676bdbe4b8d0d482841e1951c6072a47ae702b07f0b9c8191b73351ed739297297e5971d67ddfd2b7797ed5c7b51753bc19a9cdd1b181f396665e50873ffc6b69da938f6814325d4ca355d65f9f0feee7e96b0d29881f135fb82193112b37c4ecf14e073099511d36d6d6fd6412ffe83b446ac96dd7f795883b27929a195b42177a046cd7a2e5208279f0a43f6051e43e9ae31fa0a91b50bf42c1d037bcf11feaa4dfd918c03e81d297c9790ac48d1807eb5b2d1bf34654e452bc18046c0c0df6922ea0d7f9454cff818c559b115a0cbc70e85ae0a91d0e345550f285ab1bd6426e4f21b80d760a258201799da65d1280366db0206c76282a01d84e8f5458e2af2bc95bf193251dfbb0a2a01d1817d32a1972898fe7a05c0e425331e0324d329c2725b478c288e3bdba14b4b6a3e699048d3a77509125855115446ea8f565ec6e90305f06285ceffb7b285109405627b501b2179fce82c8db30b942ccf8dc58b4ef0cfbfcddcc0c48c4ed87a517e51edf05d0752a4295a3d78a617e4a601c72a149d223a88a59fab7e9652767ea9103e1a114ee587c7f244976c56ea39f4e2132e089cb4d092b6b11c5958b16d8c6d98983d3b181c9fe247811d6a8000fe71c68388967d04dd62281df35c8bf9e68dc1b74b22bc3a14936153cbf93f7abe28302e3755a63f14f8e044fda61bc8f2866acbb2d45f1305a7b9e000dd5b035096f06aaf6a54b342f4f0297fbc234486752519e319e1756ec4f43ff5edfc0de84df80257f244e05eec1b092c8c89ecd582f2dc1f205c5d8eebaab1149ca964bc00cc2970019cfaae421cc39361a19dc2e927975f6d8c4aefdb2799a894a99790b5cae62b00d94ad06bb0accc5c5a34fad573fb7af8c07895f5db37c16cafb47bf0e8d3877b6e30a255d2d4650393351b3d88c5b07a3e52a8de0610639ec6764560aee75207cf28ac9bbc7af4d150da37e260a9deda3436c2c7b233368b6a65e9db3dad78b044ae2d724fb5f1f4acb0fe82250d2f1e74fc7e35e6db971dfe20ad080561fe199deb8c1cbb005e0eef45980112df60316038f51fed0d620121ebd9f130b7c9436163fb23d036789089a4d4d015a61c8129891990391beaff03e40466de4704f09976ca3ebc0d054e9f12adb414068706fcd5b04131711954e63ba939a9d7cf3ba034bd3144cbc8ae760f36e50433047208645c30e23a487c57e62becdbe42d1f86be9bce9731c4aa662a15c256610ec4ff534f9150d6e0ea607f072397e656c184e807d1d17c830dd6ee1e0b39bc7afd848088f766271b5093ea93e2268bcaa0ddc421a895b9967333cbd8c0b1ca08cc04b8543a4fc80f21a1dda0c23150789da711f68653000cb0dde9b6d7cc9ab4cb556d096beaf6cdd59aae772996c22f69a7199c29b37c2e0d9ba731eb2216afe4a064ddd1b427564948e327ab2f1a7b1501f2eea63c4665146eae5872896df2e260004542a4eea1f99188159a539d3d9a8606ec42ae2d7876f8ea72c61e296ac12aad092b91880645c95d3bdee34b5c2e4611ce91862f17351dd9c113055bac2f4ea6db771145a823b1c7a52750b39d59254b584d5a61f76cc1de5c5006befd0e94f483900e8c1fc0b74e780dc5ae5353a45d406a9a7c6269d73502faffb606b31f13d3b282e5192c7293eeea35a9bd17f832c3a5bbfa89bced56d3bb7a86f856ebcda048413e4d400bc380a2a7ddcae217d42305e61b256a559bb214beac4839163c07d2be156cbc6558d99faa541522fbf7c2db3f50f9600bb6ebffef473d6ebc50f7a33a171bf483e108dfd2751e7f0c4c009a4ca8f8a6237fc688550ef4b04bc4baa0da73d2d0795889951f021e36908e7394f795e24da9900a3ba783bbb196043cd31d454a7697a5f277271c4207acb7cac42bef97f58b615f4dbe447cbd663b31bb9ee8303820f7caf2cbcf9f0d924acaacad8ad532c88597bacd6d34c7e33edc92694561fb51c6443a980baf97845e33409e13dabed365038c144cb55029559e72dbb4d148a5806fabd1cff2a7e8dc44187d4b93903ba878f21d3a1bc67b5563a6e00376e0a31842ae9fa7a57f15879b377a05e8b36b2185d703b6a1ca36666573dbc60685e95cbe4afa156dcd211e0ed84e422243aa8364135b255199a384ef28035aa08d4a9f98128bb9e81b32ddf88d5cd08a4ec05ba2b9aadb41233861864f635bc99a84c442f8d8ceac9cc1424b0da0e624afb930305530d3cd74a49af95e8bc56b7dfc20b9a1fdd7ed62cb332ef0504c52e51ec890148ed701e36c89897eeb8238dfd9b20d8f683a597eb055e26e0203fc9fe779695360bdb2000dd88d6f9b4e8467badd20eb570a07bbced0808abfe1bb59e6c38c636402ccd9448e8ac4c9a459a31c0e44e7d8717bfb61f7e725a2f2e9ee22679475077dfe414dc354565d256f4457e1d0c9a6bb934111d4a2bd08d77038beff69496d9db63a749918a9c499c6a002e32f4a865709462776d100ef3e30ddbbec57be0100c88de0f5d090bd686f95d6996e9abc193d4acc6629aa228c178de31e5a13988410d4e8d22539cbaa11961141fe4a9674bd58f85b676d6b88c51f3537d800a42107c2d9c81409230da2890893d0dba946f6c86c667638ae84257634e720a8e93b45a9b3c2d668076b40d6c726a86389ad570e306c24d527e4295c5f9f3a629d5ceaa4426af5bce1d4d376f8710f88557ef4438e806d85057d9c2df7c518c76e13bc9ebf0aa39ecf095852ffd83bb480a70a79910e52b5b4609ae4057b5c022b542ee23793b3850ed22b09e5ec595f45a78b918b187002e0335837c9ee9c9d36db82777fed660c0369d2c1fe033a01551c343b99a7d9b6bd9e589a05067043973ba8329bc6e8adb4c087d55e2b98288df3a7b06a250d4ddc50f8aa3d4f8c8bd4d8e0b89f2f0c09ae996cbba626cdfaba3e03265c830aa03fb45d7cb897180200373ff3bf5dcf4334710eaf7cf481d31512ef28e0e7a1634b45504d0d6ca62b01fbe0994c5b8f79934e127015cdf9ab62d1577887ab50323992b900326adf523ecbd18f70b7bc8731f17eae21a197133149f9abe78d7896a305848da628c73f5c22f398dd87def84a70fb994eb067169f5c7687d1edfbf3ea22ef761b90edca8b818b76021b8d3e38ec407496130ac43c85d3df371901b6890a7213834f3fb91cf7a7986919870b51649a1314e9d9f4a83d965147007725edbec3b8858a669f0422f679c9236ca25b164274a84aee48b513370a2a82ec8aa09eafa93df3a19fa68b34f574be7b6b734b954f8c0e1833476819f18d42ed14e11fd12b", 0x1000) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001100), 0x129000) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0xffff}, 0xf) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r6, 0x0, r0, 0x0, 0x80, 0x0) [ 794.056931] FAULT_INJECTION: forcing a failure. [ 794.056931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.059672] CPU: 0 PID: 8073 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 794.061262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 794.063313] Call Trace: [ 794.064001] dump_stack+0x107/0x167 [ 794.064844] should_fail.cold+0x5/0xa [ 794.065742] _copy_from_user+0x2e/0x1b0 [ 794.066662] __copy_msghdr_from_user+0x91/0x4b0 [ 794.067732] ? __ia32_sys_shutdown+0x80/0x80 [ 794.068743] ? perf_trace_lock+0xac/0x490 [ 794.069711] ? __lock_acquire+0x1657/0x5b00 [ 794.070715] ? __lock_acquire+0xbb1/0x5b00 [ 794.071701] sendmsg_copy_msghdr+0xa1/0x160 [ 794.072688] ? do_recvmmsg+0x6d0/0x6d0 [ 794.073596] ? perf_trace_lock+0xac/0x490 [ 794.074552] ? lock_downgrade+0x6d0/0x6d0 [ 794.075511] ? __lockdep_reset_lock+0x180/0x180 [ 794.076581] ___sys_sendmsg+0xc6/0x170 [ 794.077477] ? sendmsg_copy_msghdr+0x160/0x160 [ 794.078552] ? __fget_files+0x2cf/0x520 [ 794.079466] ? lock_downgrade+0x6d0/0x6d0 [ 794.080424] ? find_held_lock+0x2c/0x110 [ 794.081368] ? __fget_files+0x2f8/0x520 [ 794.082301] ? __fget_light+0xea/0x290 [ 794.083237] __sys_sendmsg+0xe5/0x1b0 [ 794.084114] ? __sys_sendmsg_sock+0x40/0x40 [ 794.085105] ? rcu_read_lock_any_held+0x75/0xa0 [ 794.086181] ? fput_many+0x2f/0x1a0 [ 794.087021] ? ksys_write+0x1a9/0x260 [ 794.087897] ? __ia32_sys_read+0xb0/0xb0 [ 794.088835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 794.090054] ? syscall_enter_from_user_mode+0x1d/0x50 [ 794.091244] ? trace_hardirqs_on+0x5b/0x180 [ 794.092243] do_syscall_64+0x33/0x40 [ 794.093101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 794.094291] RIP: 0033:0x7fae9698cb19 [ 794.095148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.099402] RSP: 002b:00007fae93f02188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.101157] RAX: ffffffffffffffda RBX: 00007fae96a9ff60 RCX: 00007fae9698cb19 [ 794.102809] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 794.104454] RBP: 00007fae93f021d0 R08: 0000000000000000 R09: 0000000000000000 [ 794.106111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.107747] R13: 00007ffc3e44367f R14: 00007fae93f02300 R15: 0000000000022000 23:05:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:59 executing program 4: epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x8, 0x10, 0x1, 0x0, 0x29, 0x2002, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x919, 0x2, @perf_bp={&(0x7f0000000100)}, 0x800, 0x2, 0x3ff, 0x6, 0x80000001, 0x2, 0x4, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x9, 0x7f, 0x7, 0x400, 0xffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) splice(r1, 0x0, r3, 0x0, 0x80, 0x2) 23:05:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 1) 23:05:59 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 29) 23:05:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x10) 23:05:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 794.231427] FAULT_INJECTION: forcing a failure. [ 794.231427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.234246] CPU: 0 PID: 8194 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 794.235827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 794.237764] Call Trace: [ 794.238377] dump_stack+0x107/0x167 [ 794.239219] should_fail.cold+0x5/0xa [ 794.240105] _copy_from_user+0x2e/0x1b0 [ 794.241027] __copy_msghdr_from_user+0x91/0x4b0 [ 794.242113] ? __ia32_sys_shutdown+0x80/0x80 [ 794.243126] ? perf_trace_lock+0xac/0x490 [ 794.244079] ? __lock_acquire+0x1657/0x5b00 [ 794.245081] ? __lock_acquire+0xbb1/0x5b00 [ 794.246071] sendmsg_copy_msghdr+0xa1/0x160 [ 794.247063] ? do_recvmmsg+0x6d0/0x6d0 [ 794.247962] ? perf_trace_lock+0xac/0x490 [ 794.248916] ? lock_downgrade+0x6d0/0x6d0 [ 794.249882] ? __lockdep_reset_lock+0x180/0x180 [ 794.250959] ___sys_sendmsg+0xc6/0x170 [ 794.251857] ? sendmsg_copy_msghdr+0x160/0x160 [ 794.252915] ? __fget_files+0x2cf/0x520 [ 794.253843] ? lock_downgrade+0x6d0/0x6d0 [ 794.254799] ? find_held_lock+0x2c/0x110 [ 794.255747] ? __fget_files+0x2f8/0x520 [ 794.256675] ? __fget_light+0xea/0x290 [ 794.257588] __sys_sendmsg+0xe5/0x1b0 [ 794.258468] ? __sys_sendmsg_sock+0x40/0x40 23:05:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/i2c_i801', 0x181801, 0x136) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) write(r0, &(0x7f0000000180)="6dc4edf9f25455b94614b2fb", 0xc) write$9p(r4, &(0x7f00000000c0)="ea8fc483ef42f2af609b37b97578294ef88cbb89947430957e67a4f5e5410a35a69e5be3102d1954d3aea44094b251c4aac9cdb14e404d28efc273fce831d915f808bd717c8de8bf72414a92277958adbf1095f3bccba9ac71e736044d61c54a8d04c643e291dbde1b1f416a9d47efca1038f28d182c0146c75604e6ee9633", 0x7f) [ 794.259461] ? rcu_read_lock_any_held+0x75/0xa0 [ 794.260616] ? fput_many+0x2f/0x1a0 [ 794.261494] ? ksys_write+0x1a9/0x260 [ 794.262361] ? __ia32_sys_read+0xb0/0xb0 [ 794.263281] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 794.264455] ? syscall_enter_from_user_mode+0x1d/0x50 [ 794.265614] ? trace_hardirqs_on+0x5b/0x180 [ 794.266583] do_syscall_64+0x33/0x40 [ 794.267422] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 794.268566] RIP: 0033:0x7f1d02f8ab19 [ 794.269397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.273522] RSP: 002b:00007f1d00500188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.275237] RAX: ffffffffffffffda RBX: 00007f1d0309df60 RCX: 00007f1d02f8ab19 [ 794.276838] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 794.278451] RBP: 00007f1d005001d0 R08: 0000000000000000 R09: 0000000000000000 [ 794.280060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.281680] R13: 00007ffcadf72b9f R14: 00007f1d00500300 R15: 0000000000022000 23:05:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2000) 23:05:59 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 794.304378] FAULT_INJECTION: forcing a failure. [ 794.304378] name failslab, interval 1, probability 0, space 0, times 0 [ 794.306937] CPU: 0 PID: 8200 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 794.308477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 794.310361] Call Trace: [ 794.310962] dump_stack+0x107/0x167 [ 794.311784] should_fail.cold+0x5/0xa [ 794.312645] ? create_object.isra.0+0x3a/0xa30 [ 794.313685] should_failslab+0x5/0x20 [ 794.314544] kmem_cache_alloc+0x5b/0x310 [ 794.315466] create_object.isra.0+0x3a/0xa30 [ 794.316460] kmemleak_alloc_percpu+0xa0/0x100 [ 794.317477] pcpu_alloc+0x4e2/0x1240 [ 794.318341] __percpu_counter_init+0x10d/0x2d0 [ 794.319387] io_uring_alloc_task_context+0xcc/0x6a0 [ 794.320515] ? io_import_iovec+0x1120/0x1120 [ 794.321515] ? lock_downgrade+0x6d0/0x6d0 [ 794.322452] ? do_raw_spin_lock+0x121/0x260 [ 794.323424] ? rwlock_bug.part.0+0x90/0x90 [ 794.324385] __io_uring_add_tctx_node+0x2c6/0x520 [ 794.325483] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 794.326671] ? alloc_fd+0x2e7/0x670 [ 794.327505] io_uring_setup+0x1fbb/0x2980 [ 794.328456] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 794.329608] ? wait_for_completion_io+0x270/0x270 [ 794.330731] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 794.331917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 794.333084] do_syscall_64+0x33/0x40 [ 794.333935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 794.335092] RIP: 0033:0x7ff283a12b19 [ 794.335930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.340101] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 794.341832] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 794.343439] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 794.345048] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 794.346665] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 794.348274] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:05:59 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r1) write$P9_RSTATFS(r4, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x733a, 0x5, 0x6575, 0x8, 0x3, 0x100, 0xb8, 0x8, 0x1}}, 0x43) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) 23:05:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 2) 23:05:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x4000) [ 794.430647] FAULT_INJECTION: forcing a failure. [ 794.430647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.433329] CPU: 0 PID: 8219 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 794.434884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 794.436746] Call Trace: [ 794.437346] dump_stack+0x107/0x167 [ 794.438182] should_fail.cold+0x5/0xa [ 794.439046] _copy_from_user+0x2e/0x1b0 [ 794.439946] iovec_from_user+0x141/0x400 [ 794.440867] __import_iovec+0x67/0x590 [ 794.441777] ? __ia32_sys_shutdown+0x80/0x80 [ 794.442773] ? perf_trace_lock+0xac/0x490 [ 794.443737] import_iovec+0x83/0xb0 [ 794.444580] sendmsg_copy_msghdr+0x131/0x160 [ 794.445602] ? do_recvmmsg+0x6d0/0x6d0 [ 794.446508] ? lock_downgrade+0x6d0/0x6d0 [ 794.447465] ? __lockdep_reset_lock+0x180/0x180 [ 794.448543] ___sys_sendmsg+0xc6/0x170 [ 794.449441] ? sendmsg_copy_msghdr+0x160/0x160 [ 794.450504] ? __fget_files+0x2cf/0x520 [ 794.451421] ? lock_downgrade+0x6d0/0x6d0 [ 794.452385] ? find_held_lock+0x2c/0x110 [ 794.453334] ? __fget_files+0x2f8/0x520 [ 794.454254] ? __fget_light+0xea/0x290 [ 794.455157] __sys_sendmsg+0xe5/0x1b0 [ 794.456033] ? __sys_sendmsg_sock+0x40/0x40 [ 794.457026] ? rcu_read_lock_any_held+0x75/0xa0 [ 794.458110] ? fput_many+0x2f/0x1a0 [ 794.458946] ? ksys_write+0x1a9/0x260 [ 794.459833] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 794.461042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 794.462241] ? trace_hardirqs_on+0x5b/0x180 [ 794.463238] do_syscall_64+0x33/0x40 [ 794.464095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 794.465281] RIP: 0033:0x7fae9698cb19 [ 794.466144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.470409] RSP: 002b:00007fae93f02188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.472166] RAX: ffffffffffffffda RBX: 00007fae96a9ff60 RCX: 00007fae9698cb19 [ 794.473837] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 794.475491] RBP: 00007fae93f021d0 R08: 0000000000000000 R09: 0000000000000000 [ 794.477138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.478797] R13: 00007ffc3e44367f R14: 00007fae93f02300 R15: 0000000000022000 23:05:59 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:05:59 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:05:59 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x80000) 23:05:59 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:06:12 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 30) 23:06:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 3) 23:06:12 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000500)={{'\x00', 0x3}, {0x1}, 0x72, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="67dd89412a7fac362116943df8c00ab241d9164ce89641e6fc393ff6c6f8c5b8a0702f5269f951205de566a42263227a703bfc75ead74682f44b5e23176f3c2df42ad8155aee7d175558a2fc06740c7ce60195cc0ddb0cffc39ef06d10b895704e5441964063d3ce268fbb99492df1366cd3b2c7c108bea713b9a24a1edb0fbf70584b92e909804f1099d71a9342f2fd62df1daf60522918b633c7a5cf3aa53c88e3112355527718551e36a35f94e33d67435b78139a199e06d860593049be056522a153421b7e7ece92723c51fbe877da5679a228c17e7800d2576cbeb42c5a1a83602f52b66aa7b595d96f2fb96cc6aa1504f237362af81393fa551fca0bf8f75391cddf42e74e33e90dab2d76f07f8ad3aa0664199aaf3e80fe4e63b5dd3e419d261ea459ac08f7baee978e89884ed33d5096a9d605baaf68bd15959fa96856a8e16074c93829fb7e79f07d0d6532813107f7fb45828fe54f6ed12bd99ac550c94be41e29c70c4b2b4cbc318290ae9aba", 0x172, 0x0, &(0x7f0000000380)={0x2, 0x57, {0x1, 0xc, 0x23, "19b45071b537d6496c921b37829985a72394f38732a6d095a1acbdd8a8244456024dc7", 0x27, "34a391670c7e3a86be8386e50e8a8f1f1a619176ae8213c0c636c9def15827d113bdfddbafaaf0"}, 0xfb, "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"}, 0x15e}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r3 = gettid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)) sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x9) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x4, 0x0, 0x6, 0x1, 0x0, 0x8, 0x20040, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000580), 0xb}, 0x24, 0x8, 0x4, 0x6, 0x9, 0x3, 0x6, 0x0, 0x2, 0x0, 0x9}, r3, 0x10, r2, 0x9) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xfc, 0x2, 0x3, 0x5, 0x0, 0x8000000100000, 0x50004, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa36f834eaac67604, @perf_bp={&(0x7f00000000c0), 0x7}, 0x18, 0x7fb, 0x6, 0x1, 0x40, 0x101, 0x6, 0x0, 0x5, 0x0, 0xb0f}, 0x0, 0x7, 0xffffffffffffffff, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) 23:06:12 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:06:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 2) 23:06:12 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:06:12 executing program 2: ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:06:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x100000) [ 807.613521] FAULT_INJECTION: forcing a failure. [ 807.613521] name failslab, interval 1, probability 0, space 0, times 0 [ 807.616482] CPU: 1 PID: 8243 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 807.618254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 807.620386] Call Trace: 23:06:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x200000) [ 807.621064] dump_stack+0x107/0x167 [ 807.622136] should_fail.cold+0x5/0xa [ 807.623113] ? __alloc_skb+0x6d/0x5b0 [ 807.624087] should_failslab+0x5/0x20 [ 807.625065] kmem_cache_alloc_node+0x55/0x330 [ 807.626232] __alloc_skb+0x6d/0x5b0 [ 807.627184] netlink_sendmsg+0x998/0xe00 [ 807.628232] ? netlink_unicast+0xa00/0xa00 23:06:12 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 807.629332] ? netlink_unicast+0xa00/0xa00 [ 807.630508] __sock_sendmsg+0x154/0x190 [ 807.631538] ____sys_sendmsg+0x70d/0x870 [ 807.632583] ? sock_write_iter+0x3d0/0x3d0 [ 807.633671] ? do_recvmmsg+0x6d0/0x6d0 [ 807.634702] ? lock_downgrade+0x6d0/0x6d0 [ 807.635779] ? __lockdep_reset_lock+0x180/0x180 [ 807.636974] ___sys_sendmsg+0xf3/0x170 [ 807.637985] ? sendmsg_copy_msghdr+0x160/0x160 [ 807.639162] ? __fget_files+0x2cf/0x520 [ 807.640185] ? lock_downgrade+0x6d0/0x6d0 [ 807.641249] ? find_held_lock+0x2c/0x110 [ 807.642272] ? __fget_files+0x2f8/0x520 [ 807.643186] ? __fget_light+0xea/0x290 [ 807.644077] __sys_sendmsg+0xe5/0x1b0 [ 807.644936] ? __sys_sendmsg_sock+0x40/0x40 [ 807.645922] ? rcu_read_lock_any_held+0x75/0xa0 [ 807.646993] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 807.648189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 807.649348] ? trace_hardirqs_on+0x5b/0x180 [ 807.650332] do_syscall_64+0x33/0x40 [ 807.651181] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 807.652341] RIP: 0033:0x7fae9698cb19 [ 807.653187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.655020] FAULT_INJECTION: forcing a failure. [ 807.655020] name failslab, interval 1, probability 0, space 0, times 0 [ 807.657356] RSP: 002b:00007fae93f02188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.657384] RAX: ffffffffffffffda RBX: 00007fae96a9ff60 RCX: 00007fae9698cb19 [ 807.661968] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 807.663590] RBP: 00007fae93f021d0 R08: 0000000000000000 R09: 0000000000000000 [ 807.665213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.666846] R13: 00007ffc3e44367f R14: 00007fae93f02300 R15: 0000000000022000 [ 807.668497] CPU: 0 PID: 8241 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 807.669279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 807.670225] Call Trace: [ 807.670531] dump_stack+0x107/0x167 [ 807.670946] should_fail.cold+0x5/0xa [ 807.671380] ? create_object.isra.0+0x3a/0xa30 [ 807.671895] should_failslab+0x5/0x20 [ 807.672326] kmem_cache_alloc+0x5b/0x310 [ 807.672786] create_object.isra.0+0x3a/0xa30 [ 807.673289] kmemleak_alloc_percpu+0xa0/0x100 [ 807.673805] pcpu_alloc+0x4e2/0x1240 [ 807.674239] __percpu_counter_init+0x10d/0x2d0 [ 807.674759] io_uring_alloc_task_context+0xcc/0x6a0 [ 807.675335] ? io_import_iovec+0x1120/0x1120 [ 807.675841] ? lock_downgrade+0x6d0/0x6d0 [ 807.676318] ? do_raw_spin_lock+0x121/0x260 [ 807.676799] ? rwlock_bug.part.0+0x90/0x90 [ 807.677281] __io_uring_add_tctx_node+0x2c6/0x520 [ 807.677845] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 807.678434] ? alloc_fd+0x2e7/0x670 [ 807.678850] io_uring_setup+0x1fbb/0x2980 [ 807.679321] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 807.679890] ? wait_for_completion_io+0x270/0x270 [ 807.680441] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 807.681034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 807.681612] do_syscall_64+0x33/0x40 [ 807.682041] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 807.682615] RIP: 0033:0x7ff283a12b19 [ 807.683036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.685093] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 807.685953] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 807.686757] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 807.687557] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 807.688355] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 807.689159] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:06:12 executing program 2: ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 807.706520] FAULT_INJECTION: forcing a failure. [ 807.706520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.709236] CPU: 1 PID: 8255 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 807.710821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 807.712710] Call Trace: [ 807.713316] dump_stack+0x107/0x167 [ 807.714152] should_fail.cold+0x5/0xa [ 807.715026] _copy_from_user+0x2e/0x1b0 [ 807.715933] iovec_from_user+0x141/0x400 [ 807.716861] __import_iovec+0x67/0x590 23:06:12 executing program 2: ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 807.717747] ? __ia32_sys_shutdown+0x80/0x80 [ 807.718875] ? perf_trace_lock+0xac/0x490 [ 807.719829] import_iovec+0x83/0xb0 [ 807.720672] sendmsg_copy_msghdr+0x131/0x160 [ 807.721669] ? do_recvmmsg+0x6d0/0x6d0 [ 807.722595] ? lock_downgrade+0x6d0/0x6d0 [ 807.723541] ? __lockdep_reset_lock+0x180/0x180 [ 807.724627] ___sys_sendmsg+0xc6/0x170 [ 807.725526] ? sendmsg_copy_msghdr+0x160/0x160 [ 807.726589] ? __fget_files+0x2cf/0x520 [ 807.727493] ? lock_downgrade+0x6d0/0x6d0 [ 807.728447] ? find_held_lock+0x2c/0x110 [ 807.729394] ? __fget_files+0x2f8/0x520 [ 807.730351] ? __fget_light+0xea/0x290 [ 807.731260] __sys_sendmsg+0xe5/0x1b0 [ 807.732145] ? __sys_sendmsg_sock+0x40/0x40 [ 807.733160] ? rcu_read_lock_any_held+0x75/0xa0 [ 807.734237] ? fput_many+0x2f/0x1a0 [ 807.735085] ? ksys_write+0x1a9/0x260 [ 807.735968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 807.737189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 807.738372] ? trace_hardirqs_on+0x5b/0x180 23:06:12 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 807.739369] do_syscall_64+0x33/0x40 [ 807.740365] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 807.741565] RIP: 0033:0x7f1d02f8ab19 [ 807.742432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.746604] RSP: 002b:00007f1d00500188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.748356] RAX: ffffffffffffffda RBX: 00007f1d0309df60 RCX: 00007f1d02f8ab19 [ 807.750012] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 807.751640] RBP: 00007f1d005001d0 R08: 0000000000000000 R09: 0000000000000000 [ 807.753247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.754897] R13: 00007ffcadf72b9f R14: 00007f1d00500300 R15: 0000000000022000 [ 821.274540] FAULT_INJECTION: forcing a failure. [ 821.274540] name failslab, interval 1, probability 0, space 0, times 0 [ 821.277411] CPU: 1 PID: 8272 Comm: syz-executor.1 Not tainted 5.10.258 #1 23:06:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 4) 23:06:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 821.279203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 23:06:26 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 31) 23:06:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 3) 23:06:26 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000000) 23:06:26 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:06:26 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:06:26 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) fgetxattr(r2, &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/181, 0xb5) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x80, 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000200)={'batadv0\x00', 0xbe0}) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0x7) [ 821.281588] Call Trace: [ 821.282378] dump_stack+0x107/0x167 [ 821.283299] should_fail.cold+0x5/0xa [ 821.284266] ? create_object.isra.0+0x3a/0xa30 [ 821.285411] should_failslab+0x5/0x20 [ 821.286382] kmem_cache_alloc+0x5b/0x310 [ 821.287588] create_object.isra.0+0x3a/0xa30 [ 821.289013] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 821.290647] kmem_cache_alloc_node+0x169/0x330 [ 821.291930] __alloc_skb+0x6d/0x5b0 [ 821.292870] netlink_sendmsg+0x998/0xe00 [ 821.293951] ? netlink_unicast+0xa00/0xa00 [ 821.295147] ? netlink_unicast+0xa00/0xa00 [ 821.296205] __sock_sendmsg+0x154/0x190 [ 821.297208] ____sys_sendmsg+0x70d/0x870 [ 821.298247] ? sock_write_iter+0x3d0/0x3d0 [ 821.299304] ? do_recvmmsg+0x6d0/0x6d0 [ 821.300287] ? lock_downgrade+0x6d0/0x6d0 [ 821.301346] ? __lockdep_reset_lock+0x180/0x180 [ 821.302532] ___sys_sendmsg+0xf3/0x170 [ 821.303510] ? sendmsg_copy_msghdr+0x160/0x160 [ 821.304657] ? __fget_files+0x2cf/0x520 [ 821.305652] ? lock_downgrade+0x6d0/0x6d0 [ 821.306703] ? find_held_lock+0x2c/0x110 [ 821.307741] ? __fget_files+0x2f8/0x520 [ 821.308761] ? __fget_light+0xea/0x290 [ 821.309752] __sys_sendmsg+0xe5/0x1b0 [ 821.310764] ? __sys_sendmsg_sock+0x40/0x40 [ 821.311889] ? rcu_read_lock_any_held+0x75/0xa0 [ 821.313128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 821.314539] ? syscall_enter_from_user_mode+0x1d/0x50 [ 821.315674] ? trace_hardirqs_on+0x5b/0x180 [ 821.316609] do_syscall_64+0x33/0x40 [ 821.317416] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 821.318549] RIP: 0033:0x7fae9698cb19 [ 821.319333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 821.323243] RSP: 002b:00007fae93f02188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.324847] RAX: ffffffffffffffda RBX: 00007fae96a9ff60 RCX: 00007fae9698cb19 [ 821.326356] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 821.327874] RBP: 00007fae93f021d0 R08: 0000000000000000 R09: 0000000000000000 [ 821.329383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.330900] R13: 00007ffc3e44367f R14: 00007fae93f02300 R15: 0000000000022000 [ 821.336557] FAULT_INJECTION: forcing a failure. [ 821.336557] name failslab, interval 1, probability 0, space 0, times 0 [ 821.338940] CPU: 1 PID: 8280 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 821.340395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 821.342170] Call Trace: [ 821.342728] dump_stack+0x107/0x167 [ 821.343503] should_fail.cold+0x5/0xa [ 821.344323] ? create_object.isra.0+0x3a/0xa30 [ 821.345285] should_failslab+0x5/0x20 [ 821.346104] kmem_cache_alloc+0x5b/0x310 [ 821.346967] create_object.isra.0+0x3a/0xa30 [ 821.347913] kmemleak_alloc_percpu+0xa0/0x100 [ 821.348867] pcpu_alloc+0x4e2/0x1240 [ 821.349676] __percpu_counter_init+0x10d/0x2d0 [ 821.350655] io_uring_alloc_task_context+0xcc/0x6a0 [ 821.351710] ? io_import_iovec+0x1120/0x1120 [ 821.352640] ? lock_downgrade+0x6d0/0x6d0 [ 821.353517] ? do_raw_spin_lock+0x121/0x260 [ 821.354443] ? rwlock_bug.part.0+0x90/0x90 [ 821.355342] __io_uring_add_tctx_node+0x2c6/0x520 [ 821.356365] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 821.357468] ? alloc_fd+0x2e7/0x670 [ 821.358253] io_uring_setup+0x1fbb/0x2980 [ 821.359128] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 821.360196] ? wait_for_completion_io+0x270/0x270 [ 821.361238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 821.362599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 821.363988] do_syscall_64+0x33/0x40 [ 821.365004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 821.366389] RIP: 0033:0x7ff283a12b19 [ 821.367390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 821.372314] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 821.374371] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 821.376266] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 821.378188] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 821.380098] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 821.382013] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 821.402615] FAULT_INJECTION: forcing a failure. [ 821.402615] name failslab, interval 1, probability 0, space 0, times 0 [ 821.405049] CPU: 1 PID: 8285 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 821.406518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 821.408275] Call Trace: [ 821.408837] dump_stack+0x107/0x167 [ 821.409609] should_fail.cold+0x5/0xa [ 821.410435] ? __alloc_skb+0x6d/0x5b0 [ 821.411238] should_failslab+0x5/0x20 [ 821.412044] kmem_cache_alloc_node+0x55/0x330 [ 821.412995] __alloc_skb+0x6d/0x5b0 [ 821.413779] netlink_sendmsg+0x998/0xe00 [ 821.414664] ? netlink_unicast+0xa00/0xa00 [ 821.415573] ? netlink_unicast+0xa00/0xa00 [ 821.416466] __sock_sendmsg+0x154/0x190 [ 821.417311] ____sys_sendmsg+0x70d/0x870 [ 821.418179] ? sock_write_iter+0x3d0/0x3d0 [ 821.419070] ? do_recvmmsg+0x6d0/0x6d0 [ 821.419905] ? lock_downgrade+0x6d0/0x6d0 [ 821.420785] ? __lockdep_reset_lock+0x180/0x180 [ 821.421770] ___sys_sendmsg+0xf3/0x170 [ 821.422605] ? sendmsg_copy_msghdr+0x160/0x160 [ 821.423574] ? __fget_files+0x2cf/0x520 [ 821.424416] ? lock_downgrade+0x6d0/0x6d0 [ 821.425295] ? find_held_lock+0x2c/0x110 [ 821.426180] ? __fget_files+0x2f8/0x520 [ 821.427029] ? __fget_light+0xea/0x290 [ 821.427854] __sys_sendmsg+0xe5/0x1b0 [ 821.428655] ? __sys_sendmsg_sock+0x40/0x40 [ 821.429556] ? rcu_read_lock_any_held+0x75/0xa0 [ 821.430573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 821.431683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 821.432774] ? trace_hardirqs_on+0x5b/0x180 [ 821.433690] do_syscall_64+0x33/0x40 [ 821.434485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 821.435565] RIP: 0033:0x7f1d02f8ab19 [ 821.436356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 821.440242] RSP: 002b:00007f1d00500188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.441849] RAX: ffffffffffffffda RBX: 00007f1d0309df60 RCX: 00007f1d02f8ab19 [ 821.443366] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 821.444863] RBP: 00007f1d005001d0 R08: 0000000000000000 R09: 0000000000000000 [ 821.446374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.447875] R13: 00007ffcadf72b9f R14: 00007f1d00500300 R15: 0000000000022000 [ 821.460594] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:06:41 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 836.035210] FAULT_INJECTION: forcing a failure. 23:06:41 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2000000) 23:06:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000be2b2e2f6669ee3d4a83bc6c61dee6201508dadfbbbb3ffee791f1e2fd6340ed8ca696f8bdaff2d6c00d68d6982dbe944171830a33ccf02e1f4caf96ed3c1efd16a59e8541dc0ed7ddbe5ece53cbbf356e6bc49966ba2276617cf193b33cb1cc29ad3012ef5dcbcd97d8d850591250f28e0322d9f4feff9f06e5dffefbc7580f95dbbfbb1d62844c46c2456801ea0e74729d409de10c033f54800809a32f2a25a16d4a9f4d2c33bab3a5726a256dd69c169c3b17dc9f7602c5e13bba14a3b5b35501e6f23f75489212c3332ac473803a8ab8bed8e4ad9cc6becd29726fb5e682c33e08a801000000ffed8c69b07f42af1907e8f8a8cbedf1d2467ab6bcf557bfb0042bf4abdbaa27157ba87d19814f10ce30b86ec78edbf0fe4f80aa20f1d09089135b3773453c0b52f38edadaf424ef4f378bd9294a926939771e6ab7b54d93629f26f08f8a82663a2e86ded097b988d21580b836c07bc515d21da25365a40b9ddac965fdc7ff1890602e69c7c2a96a52794ee0f698fabfcd3d4ea063b3fc9ffc2433eeb7eb646a8680f5d5b0ff749b544cf8254986ede0f16a1532a459ee46a0f5b4270d1ebd2fa043533e04615d34c0dfaa045dc6a39bee067b5e07edb92c53ff2576b6864524e6e8106408edb9e013df3e09df0f22a83a9450e7105f0fa141fc9f60a293ed30402ee099d35c23bafe38fd32d19cb66dd3e2197e5920058404e8585c7999841dc09e8579101a23cf256ec283eb62f40eb8551a485124ac6ceb9d15a6453764d64a5f95a26aeceeb17f4b8bee216fdb45169af7619fd50c979b285060bee5d712dc7b69367af55d2bfd44cf62ad8411279d91bdf2a7c61c993c25989e62a82adaf7820f20e30a846cbb4bfa2a3f061c07c46285a45cf94487b6b78fc6b8540eafd2ab977fedce1bcdeef81b8457276b26935bf2dc8373310b576088c61ea82720f06ed42db6c216ac7b667284eff9f41a48269561db039ecb9bf6b5a155ebcce1a0ef2ffa6708a470c16bcfde3ddc148e2108a3cc951a76caf5e5de80e57a2f1924a5292378f7660deb9d7a6721a3270bf382e6779c1a66f2c35b2a51b6c4402df8c078cbed7bb1a1ce0708f263b2aa0a19e93db9698083f6c829accf4a6171c93dfaba76985eb1c27c103bfe0de7c677de489a57cef1ba95909627580697e37e32df870b85f7ca682eeaa26c03ee5e971037c4e0678a99e28ba785c377ab1098113333e4832ff7597514e04fe335180cc8e64e535f26f9dbb24e5a65cc4c671bd204f6e5143009ce404b2a7bd31eca2448dc66d37ebf"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:06:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x7fffffff, 0xfffffffe, 0x3ff, 0x7, 0x8, 0x1a2}, {0x2, 0x350, 0x8000, 0x6, 0x8, 0xaf}], ['\x00', '\x00', '\x00']}) 23:06:41 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 32) 23:06:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 5) 23:06:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 4) 23:06:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 836.035210] name failslab, interval 1, probability 0, space 0, times 0 [ 836.037746] CPU: 1 PID: 8305 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 836.039179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.040823] Call Trace: [ 836.041348] dump_stack+0x107/0x167 [ 836.042086] should_fail.cold+0x5/0xa [ 836.042842] should_failslab+0x5/0x20 [ 836.043595] __kmalloc_node_track_caller+0x74/0x3b0 [ 836.044582] ? netlink_sendmsg+0x998/0xe00 [ 836.045435] __alloc_skb+0xb1/0x5b0 [ 836.046167] netlink_sendmsg+0x998/0xe00 [ 836.046980] ? netlink_unicast+0xa00/0xa00 [ 836.047828] ? netlink_unicast+0xa00/0xa00 [ 836.048665] __sock_sendmsg+0x154/0x190 [ 836.049448] ____sys_sendmsg+0x70d/0x870 [ 836.050266] ? sock_write_iter+0x3d0/0x3d0 [ 836.051092] ? do_recvmmsg+0x6d0/0x6d0 [ 836.051871] ? lock_downgrade+0x6d0/0x6d0 [ 836.052688] ? __lockdep_reset_lock+0x180/0x180 [ 836.053604] ___sys_sendmsg+0xf3/0x170 [ 836.054382] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.055288] ? __fget_files+0x2cf/0x520 [ 836.056071] ? lock_downgrade+0x6d0/0x6d0 [ 836.056888] ? find_held_lock+0x2c/0x110 [ 836.057702] ? __fget_files+0x2f8/0x520 [ 836.058104] FAULT_INJECTION: forcing a failure. [ 836.058104] name failslab, interval 1, probability 0, space 0, times 0 [ 836.058502] ? __fget_light+0xea/0x290 [ 836.058534] __sys_sendmsg+0xe5/0x1b0 [ 836.058549] ? __sys_sendmsg_sock+0x40/0x40 [ 836.063666] ? rcu_read_lock_any_held+0x75/0xa0 [ 836.064608] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 836.065650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.066675] ? trace_hardirqs_on+0x5b/0x180 [ 836.067534] do_syscall_64+0x33/0x40 [ 836.068279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 836.069288] RIP: 0033:0x7fae9698cb19 [ 836.069998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.073544] RSP: 002b:00007fae93f02188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.075063] RAX: ffffffffffffffda RBX: 00007fae96a9ff60 RCX: 00007fae9698cb19 [ 836.076468] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 836.077892] RBP: 00007fae93f021d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.079307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.080713] R13: 00007ffc3e44367f R14: 00007fae93f02300 R15: 0000000000022000 [ 836.082167] CPU: 0 PID: 8307 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 836.083810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.085777] Call Trace: [ 836.086425] dump_stack+0x107/0x167 [ 836.087301] should_fail.cold+0x5/0xa [ 836.088217] ? create_object.isra.0+0x3a/0xa30 [ 836.089315] should_failslab+0x5/0x20 [ 836.090248] kmem_cache_alloc+0x5b/0x310 [ 836.091242] create_object.isra.0+0x3a/0xa30 [ 836.092299] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 836.093512] kmem_cache_alloc_trace+0x151/0x320 [ 836.094641] io_uring_alloc_task_context+0x4a3/0x6a0 [ 836.095873] ? io_import_iovec+0x1120/0x1120 [ 836.096930] ? lock_downgrade+0x6d0/0x6d0 [ 836.097917] ? do_raw_spin_lock+0x121/0x260 [ 836.098957] ? rwlock_bug.part.0+0x90/0x90 [ 836.099971] __io_uring_add_tctx_node+0x2c6/0x520 [ 836.101130] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 836.102391] ? alloc_fd+0x2e7/0x670 [ 836.103272] io_uring_setup+0x1fbb/0x2980 [ 836.104277] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 836.105496] ? wait_for_completion_io+0x270/0x270 [ 836.106679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 836.107944] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.109188] do_syscall_64+0x33/0x40 [ 836.110099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 836.111347] RIP: 0033:0x7ff283a12b19 [ 836.112250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.116718] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 836.118571] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 836.120274] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 836.122001] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 836.123727] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 836.125438] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:06:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00') [ 836.139816] FAULT_INJECTION: forcing a failure. [ 836.139816] name failslab, interval 1, probability 0, space 0, times 0 [ 836.141787] CPU: 1 PID: 8312 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 836.142936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.144342] Call Trace: [ 836.144793] dump_stack+0x107/0x167 [ 836.145404] should_fail.cold+0x5/0xa [ 836.146042] ? create_object.isra.0+0x3a/0xa30 [ 836.146809] should_failslab+0x5/0x20 [ 836.147445] kmem_cache_alloc+0x5b/0x310 [ 836.148117] create_object.isra.0+0x3a/0xa30 [ 836.148843] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 836.149689] kmem_cache_alloc_node+0x169/0x330 [ 836.150464] __alloc_skb+0x6d/0x5b0 [ 836.151083] netlink_sendmsg+0x998/0xe00 [ 836.151762] ? netlink_unicast+0xa00/0xa00 [ 836.152473] ? netlink_unicast+0xa00/0xa00 [ 836.153186] __sock_sendmsg+0x154/0x190 [ 836.153853] ____sys_sendmsg+0x70d/0x870 [ 836.154532] ? sock_write_iter+0x3d0/0x3d0 [ 836.155222] ? do_recvmmsg+0x6d0/0x6d0 [ 836.155874] ? lock_downgrade+0x6d0/0x6d0 [ 836.156560] ? __lockdep_reset_lock+0x180/0x180 [ 836.157328] ___sys_sendmsg+0xf3/0x170 [ 836.157967] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.158728] ? __fget_files+0x2cf/0x520 [ 836.159378] ? lock_downgrade+0x6d0/0x6d0 [ 836.160063] ? find_held_lock+0x2c/0x110 [ 836.160736] ? __fget_files+0x2f8/0x520 [ 836.161401] ? __fget_light+0xea/0x290 [ 836.162047] __sys_sendmsg+0xe5/0x1b0 [ 836.162680] ? __sys_sendmsg_sock+0x40/0x40 [ 836.163387] ? rcu_read_lock_any_held+0x75/0xa0 [ 836.164165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 836.165034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.165891] ? trace_hardirqs_on+0x5b/0x180 [ 836.166612] do_syscall_64+0x33/0x40 [ 836.167223] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 836.168068] RIP: 0033:0x7f1d02f8ab19 [ 836.168683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.171722] RSP: 002b:00007f1d00500188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.172943] RAX: ffffffffffffffda RBX: 00007f1d0309df60 RCX: 00007f1d02f8ab19 [ 836.173735] perf: interrupt took too long (16364 > 16353), lowering kernel.perf_event_max_sample_rate to 12000 [ 836.174095] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 836.174114] RBP: 00007f1d005001d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.178837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.179982] R13: 00007ffcadf72b9f R14: 00007f1d00500300 R15: 0000000000022000 23:06:41 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x40000000) 23:06:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:06:41 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x807f0000) 23:06:41 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:06:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 6) 23:06:41 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 33) 23:06:41 executing program 2: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 836.334023] FAULT_INJECTION: forcing a failure. [ 836.334023] name failslab, interval 1, probability 0, space 0, times 0 [ 836.336483] CPU: 0 PID: 8431 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 836.337999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.339834] Call Trace: [ 836.340396] dump_stack+0x107/0x167 [ 836.341169] should_fail.cold+0x5/0xa [ 836.341995] ? create_object.isra.0+0x3a/0xa30 [ 836.343070] should_failslab+0x5/0x20 [ 836.343911] kmem_cache_alloc+0x5b/0x310 [ 836.344809] create_object.isra.0+0x3a/0xa30 [ 836.345742] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 23:06:41 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0xf6ffffff) [ 836.346861] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 836.348210] ? netlink_sendmsg+0x998/0xe00 [ 836.349139] __alloc_skb+0xb1/0x5b0 [ 836.349947] netlink_sendmsg+0x998/0xe00 [ 836.350830] ? netlink_unicast+0xa00/0xa00 [ 836.351733] ? netlink_unicast+0xa00/0xa00 [ 836.352648] __sock_sendmsg+0x154/0x190 [ 836.353527] ____sys_sendmsg+0x70d/0x870 [ 836.354407] ? sock_write_iter+0x3d0/0x3d0 [ 836.355304] ? do_recvmmsg+0x6d0/0x6d0 [ 836.356140] ? lock_downgrade+0x6d0/0x6d0 [ 836.357027] ? __lockdep_reset_lock+0x180/0x180 [ 836.358007] ___sys_sendmsg+0xf3/0x170 [ 836.358845] ? sendmsg_copy_msghdr+0x160/0x160 [ 836.359819] ? __fget_files+0x2cf/0x520 [ 836.360662] ? lock_downgrade+0x6d0/0x6d0 [ 836.361542] ? find_held_lock+0x2c/0x110 [ 836.362424] ? __fget_files+0x2f8/0x520 [ 836.363277] ? __fget_light+0xea/0x290 [ 836.364112] __sys_sendmsg+0xe5/0x1b0 [ 836.364920] ? __sys_sendmsg_sock+0x40/0x40 [ 836.365843] ? rcu_read_lock_any_held+0x75/0xa0 [ 836.366854] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 836.367977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.369073] ? trace_hardirqs_on+0x5b/0x180 [ 836.369984] do_syscall_64+0x33/0x40 [ 836.370783] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 836.371881] RIP: 0033:0x7fae9698cb19 [ 836.372671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.376606] RSP: 002b:00007fae93f02188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.378239] RAX: ffffffffffffffda RBX: 00007fae96a9ff60 RCX: 00007fae9698cb19 [ 836.379762] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 836.381288] RBP: 00007fae93f021d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.382811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.384332] R13: 00007ffc3e44367f R14: 00007fae93f02300 R15: 0000000000022000 23:06:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 836.431979] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 836.463009] FAULT_INJECTION: forcing a failure. [ 836.463009] name failslab, interval 1, probability 0, space 0, times 0 [ 836.464553] CPU: 1 PID: 8439 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 836.465455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.466572] Call Trace: [ 836.466929] dump_stack+0x107/0x167 [ 836.467411] should_fail.cold+0x5/0xa [ 836.467918] ? io_wq_create+0xeb/0xc00 [ 836.468436] should_failslab+0x5/0x20 [ 836.468935] __kmalloc+0x72/0x390 [ 836.469399] io_wq_create+0xeb/0xc00 [ 836.469900] io_uring_alloc_task_context+0x1f1/0x6a0 [ 836.470584] ? io_import_iovec+0x1120/0x1120 [ 836.471169] ? io_apoll_task_func+0x2d0/0x2d0 [ 836.471767] ? __io_req_find_next+0x300/0x300 [ 836.472354] ? do_raw_spin_lock+0x121/0x260 [ 836.472919] ? rwlock_bug.part.0+0x90/0x90 [ 836.473482] __io_uring_add_tctx_node+0x2c6/0x520 [ 836.474125] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 836.474815] ? alloc_fd+0x2e7/0x670 [ 836.475303] io_uring_setup+0x1fbb/0x2980 [ 836.475852] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 836.476518] ? wait_for_completion_io+0x270/0x270 [ 836.477168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 836.477862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 836.478549] do_syscall_64+0x33/0x40 [ 836.479036] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 836.479685] RIP: 0033:0x7ff283a12b19 [ 836.480163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.482567] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 836.483585] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 836.484519] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 836.485450] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 836.486395] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 836.487324] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 836.499268] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:06:54 executing program 2: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:06:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 7) 23:06:54 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0xfffffff6) [ 849.628582] FAULT_INJECTION: forcing a failure. [ 849.628582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.631507] CPU: 0 PID: 8448 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 849.633154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 849.635162] Call Trace: [ 849.635818] dump_stack+0x107/0x167 [ 849.636706] should_fail.cold+0x5/0xa [ 849.637635] _copy_from_iter_full+0x201/0xa60 [ 849.638746] ? __virt_addr_valid+0x170/0x5d0 [ 849.639818] ? __check_object_size+0x319/0x440 [ 849.640920] netlink_sendmsg+0x879/0xe00 [ 849.641911] ? netlink_unicast+0xa00/0xa00 [ 849.642943] ? netlink_unicast+0xa00/0xa00 [ 849.643966] __sock_sendmsg+0x154/0x190 [ 849.644921] ____sys_sendmsg+0x70d/0x870 [ 849.645907] ? sock_write_iter+0x3d0/0x3d0 [ 849.646926] ? do_recvmmsg+0x6d0/0x6d0 [ 849.647867] ? lock_downgrade+0x6d0/0x6d0 [ 849.648869] ? __lockdep_reset_lock+0x180/0x180 [ 849.649984] ___sys_sendmsg+0xf3/0x170 [ 849.650918] ? sendmsg_copy_msghdr+0x160/0x160 [ 849.652020] ? __fget_files+0x2cf/0x520 [ 849.652981] ? lock_downgrade+0x6d0/0x6d0 [ 849.653978] ? find_held_lock+0x2c/0x110 [ 849.654999] ? __fget_files+0x2f8/0x520 [ 849.655968] ? __fget_light+0xea/0x290 [ 849.656918] __sys_sendmsg+0xe5/0x1b0 [ 849.657826] ? __sys_sendmsg_sock+0x40/0x40 [ 849.658875] ? rcu_read_lock_any_held+0x75/0xa0 [ 849.660022] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 849.661283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 849.662563] ? trace_hardirqs_on+0x5b/0x180 [ 849.663620] do_syscall_64+0x33/0x40 [ 849.664533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 849.665768] RIP: 0033:0x7fae9698cb19 [ 849.666679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 849.671047] RSP: 002b:00007fae93f02188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.672842] RAX: ffffffffffffffda RBX: 00007fae96a9ff60 RCX: 00007fae9698cb19 [ 849.674537] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 849.676235] RBP: 00007fae93f021d0 R08: 0000000000000000 R09: 0000000000000000 [ 849.677947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.679647] R13: 00007ffc3e44367f R14: 00007fae93f02300 R15: 0000000000022000 23:06:54 executing program 5: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:06:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:06:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x72, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18080, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) 23:06:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 5) 23:06:54 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 34) [ 849.714196] FAULT_INJECTION: forcing a failure. [ 849.714196] name failslab, interval 1, probability 0, space 0, times 0 [ 849.716813] CPU: 1 PID: 8497 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 849.718268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 849.720043] Call Trace: [ 849.720611] dump_stack+0x107/0x167 [ 849.721388] should_fail.cold+0x5/0xa [ 849.722197] ? create_object.isra.0+0x3a/0xa30 [ 849.723185] should_failslab+0x5/0x20 [ 849.723531] FAULT_INJECTION: forcing a failure. [ 849.723531] name failslab, interval 1, probability 0, space 0, times 0 [ 849.723996] kmem_cache_alloc+0x5b/0x310 [ 849.724022] create_object.isra.0+0x3a/0xa30 [ 849.724047] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 849.729778] __kmalloc+0x16e/0x390 [ 849.730553] io_wq_create+0xeb/0xc00 [ 849.731351] io_uring_alloc_task_context+0x1f1/0x6a0 [ 849.732433] ? io_import_iovec+0x1120/0x1120 [ 849.733365] ? io_apoll_task_func+0x2d0/0x2d0 [ 849.734321] ? __io_req_find_next+0x300/0x300 [ 849.735278] ? do_raw_spin_lock+0x121/0x260 [ 849.736196] ? rwlock_bug.part.0+0x90/0x90 [ 849.737093] __io_uring_add_tctx_node+0x2c6/0x520 [ 849.738115] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 849.739224] ? alloc_fd+0x2e7/0x670 [ 849.740007] io_uring_setup+0x1fbb/0x2980 [ 849.740895] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 849.741965] ? wait_for_completion_io+0x270/0x270 [ 849.743018] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 849.744122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 849.745222] do_syscall_64+0x33/0x40 [ 849.746018] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 849.747120] RIP: 0033:0x7ff283a12b19 [ 849.747910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 849.751803] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 849.753421] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 849.754937] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 849.756440] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 849.757962] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 849.759478] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 849.761030] CPU: 0 PID: 8501 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 849.762669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 849.764636] Call Trace: [ 849.765270] dump_stack+0x107/0x167 [ 849.766154] should_fail.cold+0x5/0xa [ 849.767085] should_failslab+0x5/0x20 [ 849.767996] __kmalloc_node_track_caller+0x74/0x3b0 23:06:54 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0xc0ff7f0000) [ 849.769186] ? netlink_sendmsg+0x998/0xe00 [ 849.770427] __alloc_skb+0xb1/0x5b0 [ 849.771310] netlink_sendmsg+0x998/0xe00 [ 849.772300] ? netlink_unicast+0xa00/0xa00 [ 849.773347] ? netlink_unicast+0xa00/0xa00 [ 849.774377] __sock_sendmsg+0x154/0x190 [ 849.775332] ____sys_sendmsg+0x70d/0x870 [ 849.776319] ? sock_write_iter+0x3d0/0x3d0 [ 849.777316] ? do_recvmmsg+0x6d0/0x6d0 [ 849.778263] ? lock_downgrade+0x6d0/0x6d0 [ 849.779261] ? __lockdep_reset_lock+0x180/0x180 [ 849.780383] ___sys_sendmsg+0xf3/0x170 [ 849.781324] ? sendmsg_copy_msghdr+0x160/0x160 [ 849.782438] ? __fget_files+0x2cf/0x520 [ 849.783405] ? lock_downgrade+0x6d0/0x6d0 [ 849.784419] ? find_held_lock+0x2c/0x110 [ 849.785436] ? __fget_files+0x2f8/0x520 [ 849.786413] ? __fget_light+0xea/0x290 [ 849.787370] __sys_sendmsg+0xe5/0x1b0 [ 849.788286] ? __sys_sendmsg_sock+0x40/0x40 [ 849.789312] ? rcu_read_lock_any_held+0x75/0xa0 [ 849.790464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 849.791727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 849.792966] ? trace_hardirqs_on+0x5b/0x180 [ 849.794011] do_syscall_64+0x33/0x40 [ 849.794917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 849.796142] RIP: 0033:0x7f1d02f8ab19 [ 849.797037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 849.801419] RSP: 002b:00007f1d00500188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.803235] RAX: ffffffffffffffda RBX: 00007f1d0309df60 RCX: 00007f1d02f8ab19 [ 849.804932] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 849.806623] RBP: 00007f1d005001d0 R08: 0000000000000000 R09: 0000000000000000 [ 849.808319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.810025] R13: 00007ffcadf72b9f R14: 00007f1d00500300 R15: 0000000000022000 23:06:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:06:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:06:54 executing program 2: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:06:55 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)=""/147, 0x93}], 0x1, &(0x7f0000000280)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x40012061) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000300)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) 23:06:55 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 35) 23:06:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 8) 23:06:55 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x7f8000000000) [ 850.005227] FAULT_INJECTION: forcing a failure. [ 850.005227] name failslab, interval 1, probability 0, space 0, times 0 [ 850.008253] CPU: 0 PID: 8576 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 850.010180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 850.012193] Call Trace: [ 850.012844] dump_stack+0x107/0x167 23:06:55 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 850.013914] should_fail.cold+0x5/0xa [ 850.014852] ? io_wq_create+0x6ef/0xc00 [ 850.015819] should_failslab+0x5/0x20 [ 850.016742] kmem_cache_alloc_node_trace+0x59/0x340 [ 850.017961] io_wq_create+0x6ef/0xc00 [ 850.018906] io_uring_alloc_task_context+0x1f1/0x6a0 [ 850.020142] ? io_import_iovec+0x1120/0x1120 [ 850.021214] ? io_apoll_task_func+0x2d0/0x2d0 [ 850.022308] ? __io_req_find_next+0x300/0x300 [ 850.023386] ? do_raw_spin_lock+0x121/0x260 [ 850.024433] ? rwlock_bug.part.0+0x90/0x90 [ 850.025468] __io_uring_add_tctx_node+0x2c6/0x520 [ 850.026649] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 850.027917] ? alloc_fd+0x2e7/0x670 [ 850.028816] io_uring_setup+0x1fbb/0x2980 [ 850.029824] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 850.031051] ? wait_for_completion_io+0x270/0x270 [ 850.032240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 850.033502] ? syscall_enter_from_user_mode+0x1d/0x50 [ 850.034770] do_syscall_64+0x33/0x40 [ 850.035679] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 850.036917] RIP: 0033:0x7ff283a12b19 [ 850.037818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 850.042240] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 850.044093] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 850.045594] FAULT_INJECTION: forcing a failure. [ 850.045594] name failslab, interval 1, probability 0, space 0, times 0 [ 850.045825] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 850.045840] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 850.045851] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 850.045872] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 850.055173] CPU: 1 PID: 8579 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 850.056714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 850.058644] Call Trace: [ 850.059225] dump_stack+0x107/0x167 [ 850.060020] should_fail.cold+0x5/0xa [ 850.060851] ? rtnl_newlink+0x46/0xa0 [ 850.061679] should_failslab+0x5/0x20 [ 850.062513] kmem_cache_alloc_trace+0x55/0x320 [ 850.063509] rtnl_newlink+0x46/0xa0 [ 850.064312] ? __rtnl_newlink+0x1700/0x1700 [ 850.065264] rtnetlink_rcv_msg+0x442/0xd70 [ 850.066185] ? rtnl_getlink+0xaa0/0xaa0 [ 850.067066] ? perf_trace_lock+0xac/0x490 [ 850.067971] ? __lockdep_reset_lock+0x180/0x180 [ 850.068988] netlink_rcv_skb+0x14b/0x430 [ 850.069869] ? rtnl_getlink+0xaa0/0xaa0 [ 850.070743] ? netlink_ack+0xab0/0xab0 [ 850.071585] ? netlink_deliver_tap+0x1ae/0xcc0 [ 850.072585] ? netlink_deliver_tap+0x1c4/0xcc0 [ 850.073578] ? is_vmalloc_addr+0x7b/0xb0 [ 850.074476] netlink_unicast+0x6ce/0xa00 [ 850.075370] ? netlink_attachskb+0xab0/0xab0 [ 850.076342] netlink_sendmsg+0x90f/0xe00 [ 850.077234] ? netlink_unicast+0xa00/0xa00 [ 850.078165] ? netlink_unicast+0xa00/0xa00 [ 850.079093] __sock_sendmsg+0x154/0x190 [ 850.079959] ____sys_sendmsg+0x70d/0x870 [ 850.080850] ? sock_write_iter+0x3d0/0x3d0 [ 850.081761] ? do_recvmmsg+0x6d0/0x6d0 [ 850.082624] ? lock_downgrade+0x6d0/0x6d0 [ 850.083526] ? __lockdep_reset_lock+0x180/0x180 [ 850.084540] ___sys_sendmsg+0xf3/0x170 [ 850.085386] ? sendmsg_copy_msghdr+0x160/0x160 [ 850.086396] ? __fget_files+0x2cf/0x520 [ 850.087287] ? lock_downgrade+0x6d0/0x6d0 [ 850.088227] ? find_held_lock+0x2c/0x110 [ 850.089275] ? __fget_files+0x2f8/0x520 [ 850.090306] ? __fget_light+0xea/0x290 [ 850.091304] __sys_sendmsg+0xe5/0x1b0 [ 850.092275] ? __sys_sendmsg_sock+0x40/0x40 [ 850.093370] ? rcu_read_lock_any_held+0x75/0xa0 [ 850.094584] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 850.095923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 850.097231] ? trace_hardirqs_on+0x5b/0x180 [ 850.098343] do_syscall_64+0x33/0x40 [ 850.099293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 850.100597] RIP: 0033:0x7fae9698cb19 [ 850.101551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 850.106262] RSP: 002b:00007fae93f02188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.108202] RAX: ffffffffffffffda RBX: 00007fae96a9ff60 RCX: 00007fae9698cb19 [ 850.110040] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 850.111864] RBP: 00007fae93f021d0 R08: 0000000000000000 R09: 0000000000000000 [ 850.113681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.115553] R13: 00007ffc3e44367f R14: 00007fae93f02300 R15: 0000000000022000 23:07:09 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 863.961487] FAULT_INJECTION: forcing a failure. [ 863.961487] name failslab, interval 1, probability 0, space 0, times 0 [ 863.963205] CPU: 0 PID: 8596 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 863.964159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.965356] Call Trace: [ 863.965729] dump_stack+0x107/0x167 [ 863.966257] should_fail.cold+0x5/0xa [ 863.966821] ? create_object.isra.0+0x3a/0xa30 [ 863.967477] should_failslab+0x5/0x20 [ 863.968025] kmem_cache_alloc+0x5b/0x310 [ 863.968593] ? io_wq_create+0x114/0xc00 [ 863.969170] create_object.isra.0+0x3a/0xa30 [ 863.969787] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 863.970533] kmem_cache_alloc_node_trace+0x16d/0x340 [ 863.971246] io_wq_create+0x6ef/0xc00 [ 863.971804] io_uring_alloc_task_context+0x1f1/0x6a0 [ 863.972512] ? io_import_iovec+0x1120/0x1120 [ 863.973147] ? io_apoll_task_func+0x2d0/0x2d0 [ 863.973776] ? __io_req_find_next+0x300/0x300 [ 863.974433] ? do_raw_spin_lock+0x121/0x260 [ 863.975033] ? rwlock_bug.part.0+0x90/0x90 [ 863.975647] __io_uring_add_tctx_node+0x2c6/0x520 [ 863.976318] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 863.977074] ? alloc_fd+0x2e7/0x670 [ 863.977588] io_uring_setup+0x1fbb/0x2980 [ 863.978192] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 863.978923] ? wait_for_completion_io+0x270/0x270 [ 863.980002] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 863.981349] ? syscall_enter_from_user_mode+0x1d/0x50 [ 863.982682] do_syscall_64+0x33/0x40 [ 863.983643] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 863.984948] RIP: 0033:0x7ff283a12b19 [ 863.985912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.990639] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 863.992579] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 863.993478] FAULT_INJECTION: forcing a failure. [ 863.993478] name failslab, interval 1, probability 0, space 0, times 0 [ 863.994413] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 863.994426] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 863.994438] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 863.994450] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 864.003686] CPU: 1 PID: 8603 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 864.005256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.007165] Call Trace: [ 864.007774] dump_stack+0x107/0x167 [ 864.008609] should_fail.cold+0x5/0xa [ 864.009727] ? create_object.isra.0+0x3a/0xa30 23:07:09 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:07:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 9) 23:07:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x7fffc0000000) 23:07:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 6) 23:07:09 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x7, 0x7a, 0x0, 0xf8, 0x0, 0x8, 0x40000, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x800, 0x1, 0xcd79, 0x3, 0x31, 0x9, 0x800, 0x0, 0x20, 0x0, 0x8001}, 0x0, 0x3, 0xffffffffffffffff, 0x8) splice(r2, 0x0, r0, 0x0, 0x6, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r1}}, '.\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x60c1, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000100)) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x9d) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, @in_args={0x4}}, './file0\x00'}) 23:07:09 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:07:09 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 36) [ 864.010917] should_failslab+0x5/0x20 [ 864.011689] kmem_cache_alloc+0x5b/0x310 [ 864.012446] create_object.isra.0+0x3a/0xa30 [ 864.013261] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 864.014218] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 864.015185] ? netlink_sendmsg+0x998/0xe00 [ 864.015981] __alloc_skb+0xb1/0x5b0 [ 864.016663] netlink_sendmsg+0x998/0xe00 [ 864.017387] ? netlink_unicast+0xa00/0xa00 [ 864.018095] ? netlink_unicast+0xa00/0xa00 [ 864.018840] __sock_sendmsg+0x154/0x190 [ 864.019493] ____sys_sendmsg+0x70d/0x870 [ 864.020198] ? sock_write_iter+0x3d0/0x3d0 [ 864.020893] ? do_recvmmsg+0x6d0/0x6d0 [ 864.021571] ? lock_downgrade+0x6d0/0x6d0 [ 864.022257] ? __lockdep_reset_lock+0x180/0x180 [ 864.023074] ___sys_sendmsg+0xf3/0x170 [ 864.023710] ? sendmsg_copy_msghdr+0x160/0x160 [ 864.024516] ? __fget_files+0x2cf/0x520 [ 864.025205] ? lock_downgrade+0x6d0/0x6d0 [ 864.025940] ? find_held_lock+0x2c/0x110 [ 864.026656] ? __fget_files+0x2f8/0x520 [ 864.027348] ? __fget_light+0xea/0x290 [ 864.028032] __sys_sendmsg+0xe5/0x1b0 [ 864.028685] ? __sys_sendmsg_sock+0x40/0x40 [ 864.029432] ? rcu_read_lock_any_held+0x75/0xa0 [ 864.030260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 864.031187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.032075] ? trace_hardirqs_on+0x5b/0x180 [ 864.032822] do_syscall_64+0x33/0x40 [ 864.033473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 864.034371] RIP: 0033:0x7f1d02f8ab19 [ 864.035379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.040015] RSP: 002b:00007f1d00500188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.041736] RAX: ffffffffffffffda RBX: 00007f1d0309df60 RCX: 00007f1d02f8ab19 [ 864.043352] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 864.044953] RBP: 00007f1d005001d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.046666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.047684] R13: 00007ffcadf72b9f R14: 00007f1d00500300 R15: 0000000000022000 [ 864.059597] FAULT_INJECTION: forcing a failure. [ 864.059597] name failslab, interval 1, probability 0, space 0, times 0 [ 864.061385] CPU: 1 PID: 8609 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 864.062324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.063494] Call Trace: [ 864.063893] dump_stack+0x107/0x167 [ 864.064413] should_fail.cold+0x5/0xa [ 864.064960] ? create_object.isra.0+0x3a/0xa30 [ 864.065611] should_failslab+0x5/0x20 [ 864.066145] kmem_cache_alloc+0x5b/0x310 [ 864.066728] ? mutex_lock_io_nested+0xf30/0xf30 [ 864.067399] create_object.isra.0+0x3a/0xa30 23:07:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x7fffffe00000) [ 864.068035] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 864.068984] kmem_cache_alloc_trace+0x151/0x320 [ 864.069653] rtnl_newlink+0x46/0xa0 [ 864.070177] ? __rtnl_newlink+0x1700/0x1700 [ 864.070807] rtnetlink_rcv_msg+0x442/0xd70 [ 864.071414] ? rtnl_getlink+0xaa0/0xaa0 [ 864.071987] ? perf_trace_lock+0xac/0x490 [ 864.072586] ? __lockdep_reset_lock+0x180/0x180 [ 864.073270] netlink_rcv_skb+0x14b/0x430 [ 864.073849] ? rtnl_getlink+0xaa0/0xaa0 [ 864.074427] ? netlink_ack+0xab0/0xab0 [ 864.075476] ? netlink_deliver_tap+0x1ae/0xcc0 [ 864.076637] ? netlink_deliver_tap+0x1c4/0xcc0 [ 864.077803] ? is_vmalloc_addr+0x7b/0xb0 [ 864.078854] netlink_unicast+0x6ce/0xa00 [ 864.079824] ? netlink_attachskb+0xab0/0xab0 [ 864.080815] netlink_sendmsg+0x90f/0xe00 [ 864.081729] ? netlink_unicast+0xa00/0xa00 [ 864.082695] ? netlink_unicast+0xa00/0xa00 [ 864.083679] __sock_sendmsg+0x154/0x190 [ 864.084603] ____sys_sendmsg+0x70d/0x870 [ 864.085540] ? sock_write_iter+0x3d0/0x3d0 [ 864.086500] ? do_recvmmsg+0x6d0/0x6d0 [ 864.087380] ? lock_downgrade+0x6d0/0x6d0 [ 864.088308] ? __lockdep_reset_lock+0x180/0x180 [ 864.089357] ___sys_sendmsg+0xf3/0x170 [ 864.090228] ? sendmsg_copy_msghdr+0x160/0x160 [ 864.091264] ? __fget_files+0x2cf/0x520 [ 864.092154] ? lock_downgrade+0x6d0/0x6d0 [ 864.093083] ? find_held_lock+0x2c/0x110 [ 864.094020] ? __fget_files+0x2f8/0x520 [ 864.094960] ? __fget_light+0xea/0x290 [ 864.095843] __sys_sendmsg+0xe5/0x1b0 23:07:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x7fffffefe000) [ 864.096820] ? __sys_sendmsg_sock+0x40/0x40 [ 864.097837] ? rcu_read_lock_any_held+0x75/0xa0 [ 864.098915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 864.100130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.101288] ? trace_hardirqs_on+0x5b/0x180 [ 864.102273] do_syscall_64+0x33/0x40 [ 864.103136] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 864.104288] RIP: 0033:0x7fae9698cb19 [ 864.105124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.109316] RSP: 002b:00007fae93ee1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.111055] RAX: ffffffffffffffda RBX: 00007fae96aa0020 RCX: 00007fae9698cb19 [ 864.112663] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 864.114300] RBP: 00007fae93ee11d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.115950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.117549] R13: 00007ffc3e44367f R14: 00007fae93ee1300 R15: 0000000000022000 [ 864.119361] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 864.122695] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:07:09 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:07:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 7) 23:07:09 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 37) 23:07:09 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 864.207518] FAULT_INJECTION: forcing a failure. [ 864.207518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.208908] CPU: 0 PID: 8620 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 864.209686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.210627] Call Trace: [ 864.210930] dump_stack+0x107/0x167 [ 864.211340] should_fail.cold+0x5/0xa [ 864.211770] _copy_from_iter_full+0x201/0xa60 [ 864.212277] ? __virt_addr_valid+0x170/0x5d0 [ 864.212776] ? __check_object_size+0x319/0x440 [ 864.213300] netlink_sendmsg+0x879/0xe00 [ 864.213759] ? netlink_unicast+0xa00/0xa00 [ 864.214241] ? netlink_unicast+0xa00/0xa00 [ 864.214727] __sock_sendmsg+0x154/0x190 [ 864.215177] ____sys_sendmsg+0x70d/0x870 [ 864.215634] ? sock_write_iter+0x3d0/0x3d0 [ 864.216107] ? do_recvmmsg+0x6d0/0x6d0 [ 864.216550] ? lock_downgrade+0x6d0/0x6d0 [ 864.217016] ? __lockdep_reset_lock+0x180/0x180 [ 864.217539] ___sys_sendmsg+0xf3/0x170 [ 864.217986] ? sendmsg_copy_msghdr+0x160/0x160 [ 864.218512] ? __fget_files+0x2cf/0x520 [ 864.218959] ? lock_downgrade+0x6d0/0x6d0 [ 864.219424] ? find_held_lock+0x2c/0x110 [ 864.219890] ? __fget_files+0x2f8/0x520 [ 864.220340] ? __fget_light+0xea/0x290 [ 864.220778] __sys_sendmsg+0xe5/0x1b0 [ 864.221206] ? __sys_sendmsg_sock+0x40/0x40 [ 864.221693] ? rcu_read_lock_any_held+0x75/0xa0 [ 864.222228] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 864.222848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.223429] ? trace_hardirqs_on+0x5b/0x180 [ 864.223924] do_syscall_64+0x33/0x40 [ 864.224348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 864.224944] RIP: 0033:0x7f1d02f8ab19 [ 864.225362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.227441] RSP: 002b:00007f1d00500188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.228299] RAX: ffffffffffffffda RBX: 00007f1d0309df60 RCX: 00007f1d02f8ab19 [ 864.229106] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 864.229916] RBP: 00007f1d005001d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.230732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.231535] R13: 00007ffcadf72b9f R14: 00007f1d00500300 R15: 0000000000022000 23:07:09 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r3, &(0x7f0000000140)={0xa0, 0x19, 0x2, {0x1060, {0x10, 0x3, 0x7}, 0x1c0, 0xffffffffffffffff, r5, 0x8, 0x6, 0x0, 0x2, 0x1, 0x100000001, 0x2, 0x4, 0x9, 0xff, 0x6, 0x6, 0x1, 0x55, 0x4}}, 0xa0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) [ 864.245917] FAULT_INJECTION: forcing a failure. [ 864.245917] name failslab, interval 1, probability 0, space 0, times 0 [ 864.247270] CPU: 0 PID: 8625 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 864.248063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 864.248996] Call Trace: [ 864.249299] dump_stack+0x107/0x167 [ 864.249723] should_fail.cold+0x5/0xa [ 864.250169] ? __io_uring_add_tctx_node+0x15c/0x520 [ 864.250751] should_failslab+0x5/0x20 [ 864.251197] kmem_cache_alloc_trace+0x55/0x320 [ 864.251723] __io_uring_add_tctx_node+0x15c/0x520 [ 864.252278] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 864.252879] ? alloc_fd+0x2e7/0x670 [ 864.253295] io_uring_setup+0x1fbb/0x2980 [ 864.253774] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 864.254359] ? wait_for_completion_io+0x270/0x270 [ 864.254927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 864.255521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 864.256111] do_syscall_64+0x33/0x40 [ 864.256533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 864.257128] RIP: 0033:0x7ff283a12b19 [ 864.257550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.259667] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 864.260543] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 864.261367] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 864.262172] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 864.262980] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 864.263779] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:07:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 10) 23:07:23 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0xe0ffff7f0000) 23:07:23 executing program 4: r0 = add_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="554522e159aae8462af7dc8fb93ffe01c91fe5980cd3a7a746cd4ac61fc3a89113aef7d3a47544cc71405ca23765435bf11bff188b2b4271d73e89e434ac2ce65a6a2783ad0237b4aa08405acfc0b4ed43965f65c28dc9162dbc098a9e673608ea7643517dae9ee69b5e6e9d29b43c8b721643c79fcafa21b45fce82d2883af3d839346a1a64367539a5178f72b2a4202523f1324bc843e4f9a352c63c0716f661e450e5c9492ad8c75e78d1b2d480213f54fdb3c50b80e88fc8d20746824ebe97a836fc5d184bff2fd21012d0d8eb5c1fb5a7d58666442fe203d0174b65d28862", 0xe1, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "bd26a65d4cfb395aa0c5414b57b1915a1c8f1aaaa2a2cf1b250262539e1f5ae40a3599b16ca62ebf20b76056778497e0a29f5e6582178bd10b223eb2ed0a25ea", 0x24}, 0x48, r1) [ 878.011807] FAULT_INJECTION: forcing a failure. [ 878.011807] name failslab, interval 1, probability 0, space 0, times 0 [ 878.014572] CPU: 1 PID: 8647 Comm: syz-executor.0 Not tainted 5.10.258 #1 23:07:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 8) 23:07:23 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:07:23 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:07:23 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 38) 23:07:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 878.016409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.018586] Call Trace: [ 878.019201] dump_stack+0x107/0x167 [ 878.020036] should_fail.cold+0x5/0xa [ 878.020906] ? create_object.isra.0+0x3a/0xa30 [ 878.021947] should_failslab+0x5/0x20 [ 878.022823] kmem_cache_alloc+0x5b/0x310 [ 878.023791] create_object.isra.0+0x3a/0xa30 [ 878.024792] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 878.025960] kmem_cache_alloc_trace+0x151/0x320 [ 878.027041] __io_uring_add_tctx_node+0x15c/0x520 [ 878.028145] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 878.029338] ? alloc_fd+0x2e7/0x670 [ 878.030180] io_uring_setup+0x1fbb/0x2980 [ 878.031142] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 878.032299] ? wait_for_completion_io+0x270/0x270 [ 878.033424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.034630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.035811] do_syscall_64+0x33/0x40 [ 878.036661] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.037833] RIP: 0033:0x7ff283a12b19 [ 878.038689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.042921] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 878.044660] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 878.046290] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 878.047930] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 878.049560] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 878.051210] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 878.053627] FAULT_INJECTION: forcing a failure. [ 878.053627] name failslab, interval 1, probability 0, space 0, times 0 [ 878.055372] CPU: 0 PID: 8641 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 878.056336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.057511] Call Trace: [ 878.057885] dump_stack+0x107/0x167 [ 878.058388] should_fail.cold+0x5/0xa [ 878.058930] ? rtnl_newlink+0x46/0xa0 [ 878.059460] should_failslab+0x5/0x20 [ 878.059993] kmem_cache_alloc_trace+0x55/0x320 [ 878.060639] rtnl_newlink+0x46/0xa0 [ 878.061150] ? __rtnl_newlink+0x1700/0x1700 [ 878.061763] rtnetlink_rcv_msg+0x442/0xd70 [ 878.062359] ? rtnl_getlink+0xaa0/0xaa0 [ 878.062927] ? perf_trace_lock+0xac/0x490 [ 878.063512] ? __lockdep_reset_lock+0x180/0x180 [ 878.064168] netlink_rcv_skb+0x14b/0x430 [ 878.064736] ? rtnl_getlink+0xaa0/0xaa0 [ 878.065298] ? netlink_ack+0xab0/0xab0 [ 878.065847] ? netlink_deliver_tap+0x1ae/0xcc0 [ 878.066480] ? netlink_deliver_tap+0x1c4/0xcc0 [ 878.067123] ? is_vmalloc_addr+0x7b/0xb0 [ 878.067686] netlink_unicast+0x6ce/0xa00 [ 878.068265] ? netlink_attachskb+0xab0/0xab0 [ 878.068888] netlink_sendmsg+0x90f/0xe00 [ 878.069456] ? netlink_unicast+0xa00/0xa00 [ 878.070047] ? netlink_unicast+0xa00/0xa00 [ 878.070653] __sock_sendmsg+0x154/0x190 [ 878.071214] ____sys_sendmsg+0x70d/0x870 [ 878.071783] ? sock_write_iter+0x3d0/0x3d0 [ 878.072375] ? do_recvmmsg+0x6d0/0x6d0 [ 878.072924] ? lock_downgrade+0x6d0/0x6d0 [ 878.073509] ? __lockdep_reset_lock+0x180/0x180 [ 878.074174] ___sys_sendmsg+0xf3/0x170 [ 878.074724] ? sendmsg_copy_msghdr+0x160/0x160 [ 878.075382] ? __fget_files+0x2cf/0x520 [ 878.075944] ? lock_downgrade+0x6d0/0x6d0 [ 878.076530] ? find_held_lock+0x2c/0x110 [ 878.077119] ? __fget_files+0x2f8/0x520 [ 878.077687] ? __fget_light+0xea/0x290 [ 878.078246] __sys_sendmsg+0xe5/0x1b0 [ 878.078787] ? __sys_sendmsg_sock+0x40/0x40 [ 878.079419] ? rcu_read_lock_any_held+0x75/0xa0 [ 878.080102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.080848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.081581] ? trace_hardirqs_on+0x5b/0x180 [ 878.082194] do_syscall_64+0x33/0x40 [ 878.082734] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.083458] RIP: 0033:0x7f1d02f8ab19 [ 878.083996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.086621] RSP: 002b:00007f1d00500188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.087689] RAX: ffffffffffffffda RBX: 00007f1d0309df60 RCX: 00007f1d02f8ab19 [ 878.088706] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 878.089716] RBP: 00007f1d005001d0 R08: 0000000000000000 R09: 0000000000000000 [ 878.090743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.091752] R13: 00007ffcadf72b9f R14: 00007f1d00500300 R15: 0000000000022000 [ 878.092942] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 878.094947] FAULT_INJECTION: forcing a failure. [ 878.094947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 878.097716] CPU: 1 PID: 8650 Comm: syz-executor.1 Not tainted 5.10.258 #1 [ 878.099293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.101198] Call Trace: [ 878.101808] dump_stack+0x107/0x167 [ 878.102654] should_fail.cold+0x5/0xa [ 878.103556] _copy_to_user+0x2e/0x180 [ 878.104437] simple_read_from_buffer+0xcc/0x160 [ 878.105508] proc_fail_nth_read+0x198/0x230 [ 878.106504] ? proc_sessionid_read+0x230/0x230 [ 878.107558] ? security_file_permission+0xb1/0xe0 [ 878.108670] ? proc_sessionid_read+0x230/0x230 [ 878.109714] vfs_read+0x228/0x620 [ 878.110514] ksys_read+0x12d/0x260 [ 878.111334] ? vfs_write+0xb10/0xb10 [ 878.112193] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.113394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.114583] do_syscall_64+0x33/0x40 [ 878.115439] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.116613] RIP: 0033:0x7fae9693f69c [ 878.117466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 878.121736] RSP: 002b:00007fae93f02170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 878.123486] RAX: ffffffffffffffda RBX: 0000000000000028 RCX: 00007fae9693f69c [ 878.125135] RDX: 000000000000000f RSI: 00007fae93f021e0 RDI: 0000000000000005 [ 878.126774] RBP: 00007fae93f021d0 R08: 0000000000000000 R09: 0000000000000000 [ 878.128405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 878.130038] R13: 00007ffc3e44367f R14: 00007fae93f02300 R15: 0000000000022000 23:07:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 9) 23:07:23 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x8000000000000) 23:07:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) sendfile(r1, r2, &(0x7f00000000c0)=0x9, 0x3c1) 23:07:23 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:07:23 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 39) 23:07:23 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 878.191554] FAULT_INJECTION: forcing a failure. [ 878.191554] name failslab, interval 1, probability 0, space 0, times 0 [ 878.193094] CPU: 0 PID: 8656 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 878.193980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.195053] Call Trace: [ 878.195396] dump_stack+0x107/0x167 [ 878.195864] should_fail.cold+0x5/0xa [ 878.196361] ? create_object.isra.0+0x3a/0xa30 [ 878.196947] should_failslab+0x5/0x20 [ 878.197434] kmem_cache_alloc+0x5b/0x310 [ 878.197962] create_object.isra.0+0x3a/0xa30 [ 878.198526] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 878.199199] kmem_cache_alloc_trace+0x151/0x320 [ 878.199804] rtnl_newlink+0x46/0xa0 [ 878.200271] ? __rtnl_newlink+0x1700/0x1700 [ 878.200823] rtnetlink_rcv_msg+0x442/0xd70 [ 878.201371] ? rtnl_getlink+0xaa0/0xaa0 [ 878.201886] ? perf_trace_lock+0xac/0x490 [ 878.202422] ? __lockdep_reset_lock+0x180/0x180 [ 878.203036] netlink_rcv_skb+0x14b/0x430 [ 878.203559] ? rtnl_getlink+0xaa0/0xaa0 [ 878.204080] ? netlink_ack+0xab0/0xab0 [ 878.204579] ? netlink_deliver_tap+0x1ae/0xcc0 [ 878.205172] ? netlink_deliver_tap+0x1c4/0xcc0 [ 878.205756] ? is_vmalloc_addr+0x7b/0xb0 [ 878.206281] netlink_unicast+0x6ce/0xa00 [ 878.206809] ? netlink_attachskb+0xab0/0xab0 [ 878.207384] netlink_sendmsg+0x90f/0xe00 [ 878.207912] ? netlink_unicast+0xa00/0xa00 [ 878.208464] ? netlink_unicast+0xa00/0xa00 [ 878.209006] __sock_sendmsg+0x154/0x190 [ 878.209516] ____sys_sendmsg+0x70d/0x870 [ 878.210038] ? sock_write_iter+0x3d0/0x3d0 [ 878.210587] ? do_recvmmsg+0x6d0/0x6d0 [ 878.211087] ? lock_downgrade+0x6d0/0x6d0 [ 878.211620] ? __lockdep_reset_lock+0x180/0x180 [ 878.212220] ___sys_sendmsg+0xf3/0x170 [ 878.212715] ? sendmsg_copy_msghdr+0x160/0x160 [ 878.213310] ? __fget_files+0x2cf/0x520 [ 878.213817] ? lock_downgrade+0x6d0/0x6d0 [ 878.214361] ? find_held_lock+0x2c/0x110 [ 878.214897] ? __fget_files+0x2f8/0x520 [ 878.215408] ? __fget_light+0xea/0x290 [ 878.215913] __sys_sendmsg+0xe5/0x1b0 [ 878.216399] ? __sys_sendmsg_sock+0x40/0x40 [ 878.216952] ? rcu_read_lock_any_held+0x75/0xa0 [ 878.217557] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.218240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.218910] ? trace_hardirqs_on+0x5b/0x180 [ 878.219465] do_syscall_64+0x33/0x40 [ 878.219944] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.220607] RIP: 0033:0x7f1d02f8ab19 [ 878.221092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.223452] RSP: 002b:00007f1d00500188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.224422] RAX: ffffffffffffffda RBX: 00007f1d0309df60 RCX: 00007f1d02f8ab19 [ 878.225329] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 878.226240] RBP: 00007f1d005001d0 R08: 0000000000000000 R09: 0000000000000000 [ 878.227180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.228092] R13: 00007ffcadf72b9f R14: 00007f1d00500300 R15: 0000000000022000 [ 878.229086] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:07:23 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x10000000000000) 23:07:23 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 878.379751] FAULT_INJECTION: forcing a failure. [ 878.379751] name failslab, interval 1, probability 0, space 0, times 0 [ 878.382680] CPU: 1 PID: 8671 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 878.384252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 878.386167] Call Trace: [ 878.386794] dump_stack+0x107/0x167 [ 878.387635] should_fail.cold+0x5/0xa [ 878.388514] ? xas_alloc+0x336/0x440 [ 878.389368] should_failslab+0x5/0x20 [ 878.390241] kmem_cache_alloc+0x5b/0x310 [ 878.391188] ? stack_trace_consume_entry+0x160/0x160 [ 878.392358] xas_alloc+0x336/0x440 [ 878.393181] xas_create+0x34a/0x10d0 [ 878.394044] ? kernel_text_address+0xf2/0x120 [ 878.395085] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 878.396297] xas_store+0x8c/0x1c40 [ 878.397131] __xa_store+0x164/0x2d0 [ 878.397957] ? xa_delete_node+0x280/0x280 [ 878.398892] ? trace_hardirqs_on+0x5b/0x180 [ 878.399876] xa_store+0x31/0x50 [ 878.400622] __io_uring_add_tctx_node+0x1cf/0x520 [ 878.401696] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 878.402891] ? alloc_fd+0x2e7/0x670 [ 878.403734] io_uring_setup+0x1fbb/0x2980 [ 878.404670] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 878.405808] ? wait_for_completion_io+0x270/0x270 [ 878.406924] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 878.408106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 878.409264] do_syscall_64+0x33/0x40 [ 878.410096] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 878.411267] RIP: 0033:0x7ff283a12b19 [ 878.412099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.416242] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 878.417959] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 878.419567] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 878.421177] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 878.422793] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 878.424387] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:07:37 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 40) [ 891.941322] FAULT_INJECTION: forcing a failure. [ 891.941322] name failslab, interval 1, probability 0, space 0, times 0 23:07:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:07:37 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x20000000000000) 23:07:37 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:07:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:07:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:07:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) (fail_nth: 10) [ 891.945729] CPU: 0 PID: 8677 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 891.947430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 891.949580] Call Trace: [ 891.950269] dump_stack+0x107/0x167 [ 891.951215] should_fail.cold+0x5/0xa [ 891.952210] ? create_object.isra.0+0x3a/0xa30 [ 891.953401] should_failslab+0x5/0x20 [ 891.954391] kmem_cache_alloc+0x5b/0x310 [ 891.955470] create_object.isra.0+0x3a/0xa30 [ 891.956633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 891.957960] kmem_cache_alloc+0x159/0x310 [ 891.959055] xas_alloc+0x336/0x440 [ 891.959984] xas_create+0x34a/0x10d0 [ 891.960963] ? kernel_text_address+0xf2/0x120 [ 891.962135] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 891.963512] xas_store+0x8c/0x1c40 [ 891.964456] __xa_store+0x164/0x2d0 [ 891.965403] ? xa_delete_node+0x280/0x280 [ 891.966490] ? trace_hardirqs_on+0x5b/0x180 [ 891.967626] xa_store+0x31/0x50 [ 891.968487] __io_uring_add_tctx_node+0x1cf/0x520 [ 891.969741] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 891.971088] ? alloc_fd+0x2e7/0x670 [ 891.972032] io_uring_setup+0x1fbb/0x2980 [ 891.973096] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 891.974405] ? wait_for_completion_io+0x270/0x270 [ 891.975676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 891.977023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 891.978362] do_syscall_64+0x33/0x40 [ 891.979333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 891.980641] RIP: 0033:0x7ff283a12b19 [ 891.981603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.986336] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 891.988280] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 891.990117] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 891.991955] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 891.993790] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 891.995615] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:07:37 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)) sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x9) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x78, 0xff, 0x9, 0x7, 0x0, 0x2, 0x408ca, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000140), 0xa}, 0xc84, 0x8, 0x1, 0x1236e73227152467, 0x100000001, 0x5, 0x3, 0x0, 0x160, 0x0, 0x31}, r2, 0xb, r0, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) finit_module(r0, &(0x7f0000000100)='+!!.\x00', 0x1) io_setup(0x5, &(0x7f00000006c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0}]) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) bind$inet6(r6, &(0x7f00000004c0)={0xa, 0x4e22, 0x3, @remote, 0x9}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0xff, 0x7f, 0xa0, 0x2, 0x0, 0xe6e, 0x40000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x5, @perf_config_ext={0x80000001, 0x4}, 0x140c1, 0x1, 0xeac, 0xe, 0x3f, 0x20000, 0x9, 0x0, 0x34, 0x0, 0x3f}, 0x0, 0x0, r0, 0xa) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r9, 0x0, r8, 0x0, 0x80, 0x0) io_submit(r4, 0x2, &(0x7f0000000440)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x401, r7, &(0x7f0000000200)="025237f4381ce11a6ff989b3e367dc6d5e93b52fa2441eae57567003933628ca4935a8713a9d79a760c36aba7f1dd2321a56370a2c4f094f8aef49a571676832205bb8ee44d41cf0e3e74eb57581135545b7980ca899717d4ff4f5c82d101e05131f6effcbe5ea7770b491b7bbfdbcfbf2047e4a5c8987f7b8186c46dd2496311314b12276b6e19827e3a646f6db69b1959b4da72954049ba13e7ea7dd0e9f8b319e32ac4e0a770f260ac548dbc15dbac8d7a984e0f8c67e134664", 0xbb, 0x8000, 0x0, 0x1, r9}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000000340)="3d99a294484abbfdf862d41ab7597f491c494c843b24336ce7caf1c9a43cac7ec9244ea2afc27b2c6a4ce6671f775a99f48fdc805dcafd2575ece5b7870a6af8b680afbcabb9507ba03f958dc4112a61310ca2dbdb17553b1020e54641be1837dd1fa587ac0044d34ac37e8d1ba3a02121a1d39757293113b4e6359321c6cc659a809fa2f2c0ec98123811420f33eac3fbd3ddb660e007924e2428cbc91453d269", 0xa1, 0x8}]) splice(r3, 0x0, r1, 0x0, 0x80, 0x0) [ 892.007693] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 892.009372] FAULT_INJECTION: forcing a failure. [ 892.009372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.010944] CPU: 1 PID: 8690 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 892.011459] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 892.011827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 892.011831] Call Trace: [ 892.011847] dump_stack+0x107/0x167 [ 892.011867] should_fail.cold+0x5/0xa [ 892.015906] _copy_to_user+0x2e/0x180 [ 892.016412] simple_read_from_buffer+0xcc/0x160 [ 892.017030] proc_fail_nth_read+0x198/0x230 [ 892.017590] ? proc_sessionid_read+0x230/0x230 [ 892.018186] ? security_file_permission+0xb1/0xe0 [ 892.018826] ? proc_sessionid_read+0x230/0x230 [ 892.019420] vfs_read+0x228/0x620 [ 892.019889] ksys_read+0x12d/0x260 [ 892.020366] ? vfs_write+0xb10/0xb10 [ 892.020842] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 892.021501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 892.022161] do_syscall_64+0x33/0x40 [ 892.022631] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 892.023300] RIP: 0033:0x7f1d02f3d69c [ 892.023780] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 892.026108] RSP: 002b:00007f1d00500170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 892.027079] RAX: ffffffffffffffda RBX: 0000000000000028 RCX: 00007f1d02f3d69c [ 892.027987] RDX: 000000000000000f RSI: 00007f1d005001e0 RDI: 0000000000000005 [ 892.028884] RBP: 00007f1d005001d0 R08: 0000000000000000 R09: 0000000000000000 [ 892.029778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 892.030671] R13: 00007ffcadf72b9f R14: 00007f1d00500300 R15: 0000000000022000 23:07:37 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:07:37 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:07:37 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0xe0efffff7f0000) 23:07:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:07:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:07:37 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x9) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x49, 0x0, 0x7, 0x25, 0x0, 0x2, 0x128, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfdf4, 0x2, @perf_config_ext={0x1, 0x2}, 0x80, 0xfb0, 0x80000001, 0x4, 0xea, 0xffff, 0x3, 0x0, 0x3, 0x0, 0x100000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x7, 0x80, 0x5, 0x1f, 0x5, 0x0, 0x0, 0x8, 0x40, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1a, 0x0, @perf_config_ext={0x43b, 0xffffffffffffffff}, 0x100, 0x6, 0x9, 0x0, 0x2, 0xdb2, 0x4, 0x0, 0xc28f, 0x0, 0x3}, r0, 0xb, r1, 0xa) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) 23:07:37 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 892.145186] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:07:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 892.165811] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 892.196357] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 905.157391] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 905.160324] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:07:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x100000000000000) 23:07:50 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x72, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8002}, 0x0, 0x4, 0xffffffffffffffff, 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) tee(r0, r2, 0x100, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x80, 0x0) 23:07:50 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 41) 23:07:50 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:07:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:07:50 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:07:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:07:50 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:07:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 905.190390] FAULT_INJECTION: forcing a failure. [ 905.190390] name failslab, interval 1, probability 0, space 0, times 0 [ 905.192051] CPU: 0 PID: 8734 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 905.192993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 905.194131] Call Trace: [ 905.194497] dump_stack+0x107/0x167 [ 905.195002] should_fail.cold+0x5/0xa [ 905.195526] ? xas_alloc+0x336/0x440 [ 905.196035] should_failslab+0x5/0x20 [ 905.196553] kmem_cache_alloc+0x5b/0x310 [ 905.197112] xas_alloc+0x336/0x440 [ 905.197601] xas_create+0x34a/0x10d0 [ 905.198120] ? kernel_text_address+0xf2/0x120 [ 905.198730] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 905.199449] xas_store+0x8c/0x1c40 [ 905.199935] __xa_store+0x164/0x2d0 [ 905.200425] ? xa_delete_node+0x280/0x280 [ 905.200997] ? trace_hardirqs_on+0x5b/0x180 [ 905.201580] xa_store+0x31/0x50 [ 905.202031] __io_uring_add_tctx_node+0x1cf/0x520 [ 905.202681] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 905.203399] ? alloc_fd+0x2e7/0x670 [ 905.203899] io_uring_setup+0x1fbb/0x2980 [ 905.204471] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 905.205157] ? wait_for_completion_io+0x270/0x270 [ 905.205819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 905.206527] ? syscall_enter_from_user_mode+0x1d/0x50 [ 905.207233] do_syscall_64+0x33/0x40 [ 905.207737] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 905.208425] RIP: 0033:0x7ff283a12b19 [ 905.208910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.210231] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 905.211413] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 905.211457] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 905.215138] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 905.216076] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 905.217018] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 905.217958] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 905.226667] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:07:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x200000000000000) 23:07:50 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 905.268655] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 905.274962] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:07:50 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:07:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 905.333975] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 905.336743] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:08:04 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) lseek(r1, 0x21, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0xffffffffffff0609]}, 0x8) r2 = accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000140)) fcntl$setstatus(r2, 0x4, 0x40000) 23:08:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) 23:08:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:08:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x72, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8002}, 0x0, 0x4, 0xffffffffffffffff, 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) tee(r0, r2, 0x100, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x80, 0x0) 23:08:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:04 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 42) 23:08:04 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x4000000000000000) [ 919.045138] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 919.049661] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 919.052248] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 919.057069] FAULT_INJECTION: forcing a failure. [ 919.057069] name failslab, interval 1, probability 0, space 0, times 0 [ 919.058569] CPU: 0 PID: 8780 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 919.059482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 919.060569] Call Trace: [ 919.060918] dump_stack+0x107/0x167 [ 919.061399] should_fail.cold+0x5/0xa [ 919.061905] ? create_object.isra.0+0x3a/0xa30 [ 919.062505] should_failslab+0x5/0x20 [ 919.063004] kmem_cache_alloc+0x5b/0x310 [ 919.063554] ? mark_held_locks+0x9e/0xe0 [ 919.064089] create_object.isra.0+0x3a/0xa30 [ 919.064662] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 919.065326] kmem_cache_alloc+0x159/0x310 [ 919.065853] xas_alloc+0x336/0x440 [ 919.066322] xas_create+0x34a/0x10d0 [ 919.066815] ? kernel_text_address+0xf2/0x120 [ 919.067408] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 919.068094] xas_store+0x8c/0x1c40 [ 919.068567] __xa_store+0x164/0x2d0 [ 919.069046] ? xa_delete_node+0x280/0x280 [ 919.069590] ? trace_hardirqs_on+0x5b/0x180 [ 919.070156] xa_store+0x31/0x50 [ 919.070590] __io_uring_add_tctx_node+0x1cf/0x520 [ 919.071230] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 919.071910] ? alloc_fd+0x2e7/0x670 [ 919.072392] io_uring_setup+0x1fbb/0x2980 [ 919.072940] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 919.073602] ? wait_for_completion_io+0x270/0x270 [ 919.074249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 919.074932] ? syscall_enter_from_user_mode+0x1d/0x50 [ 919.075619] do_syscall_64+0x33/0x40 23:08:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8) [ 919.076107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 919.076942] RIP: 0033:0x7ff283a12b19 [ 919.077430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 919.079823] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 919.080772] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 919.081664] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 919.082549] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 919.083445] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 919.084345] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 919.095386] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:08:04 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0xf6ffffff00000000) 23:08:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:04 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) r4 = syz_io_uring_complete(0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x3, 0x20442) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x80, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000140)={0x800, 0x0, &(0x7f0000000100)=[r3, r5, r0, r1, r2, r7]}, 0x6) [ 919.204537] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 919.210534] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:08:04 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 43) 23:08:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 919.248059] FAULT_INJECTION: forcing a failure. [ 919.248059] name failslab, interval 1, probability 0, space 0, times 0 [ 919.249549] CPU: 0 PID: 8897 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 919.250386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 919.251409] Call Trace: [ 919.251734] dump_stack+0x107/0x167 [ 919.252177] should_fail.cold+0x5/0xa [ 919.252644] ? xas_alloc+0x336/0x440 [ 919.253096] should_failslab+0x5/0x20 [ 919.253559] kmem_cache_alloc+0x5b/0x310 [ 919.254052] xas_alloc+0x336/0x440 [ 919.254486] xas_create+0x34a/0x10d0 [ 919.254944] ? kernel_text_address+0xf2/0x120 [ 919.255499] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 919.256132] xas_store+0x8c/0x1c40 [ 919.256571] __xa_store+0x164/0x2d0 [ 919.257015] ? xa_delete_node+0x280/0x280 [ 919.257517] ? trace_hardirqs_on+0x5b/0x180 [ 919.258053] xa_store+0x31/0x50 [ 919.258468] __io_uring_add_tctx_node+0x1cf/0x520 [ 919.259056] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 919.259698] ? alloc_fd+0x2e7/0x670 [ 919.260148] io_uring_setup+0x1fbb/0x2980 [ 919.260655] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 919.261268] ? wait_for_completion_io+0x270/0x270 [ 919.261870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 919.262500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 919.263154] do_syscall_64+0x33/0x40 [ 919.263602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 919.264223] RIP: 0033:0x7ff283a12b19 [ 919.264668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 919.266883] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 919.267811] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 919.268668] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 919.269533] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 919.270409] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 919.271285] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 919.276036] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:08:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x72, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8002}, 0x0, 0x4, 0xffffffffffffffff, 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) tee(r0, r2, 0x100, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x80, 0x0) 23:08:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 23:08:04 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0xffffffff00000000) [ 919.305176] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 919.308040] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 919.310044] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:08:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:20 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 44) 23:08:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x72, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8002}, 0x0, 0x4, 0xffffffffffffffff, 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) tee(r0, r2, 0x100, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x80, 0x0) 23:08:20 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:08:20 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20c1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x0, 0x800000000004, 0x0, 0x1, 0x5, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x38000, 0x108) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x6, 0x2, 0x7f, 0x0, 0x4, 0x84062, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb64, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x11000, 0x1, 0xd6, 0x0, 0x1ff800, 0x400, 0x2, 0x0, 0x4a3d, 0x0, 0x8}, 0x0, 0xe, r1, 0x3) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x9, 0x3f4, 0xb9a, 0x10001, 0x3, 0x5}) 23:08:20 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0xffffffffffffffff) 23:08:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 934.979938] validate_nla: 2 callbacks suppressed [ 934.979964] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:08:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) [ 934.993512] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 935.016407] FAULT_INJECTION: forcing a failure. [ 935.016407] name failslab, interval 1, probability 0, space 0, times 0 [ 935.016750] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 935.018238] CPU: 1 PID: 9037 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 935.018246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 935.018254] Call Trace: [ 935.018280] dump_stack+0x107/0x167 [ 935.023468] should_fail.cold+0x5/0xa [ 935.024072] ? xas_alloc+0x336/0x440 [ 935.024661] should_failslab+0x5/0x20 [ 935.025263] kmem_cache_alloc+0x5b/0x310 [ 935.025911] xas_alloc+0x336/0x440 [ 935.026474] xas_create+0x34a/0x10d0 [ 935.027071] ? kernel_text_address+0xf2/0x120 [ 935.027788] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 935.027918] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 935.028615] xas_store+0x8c/0x1c40 [ 935.028641] __xa_store+0x164/0x2d0 [ 935.028661] ? xa_delete_node+0x280/0x280 [ 935.032148] ? trace_hardirqs_on+0x5b/0x180 [ 935.032834] xa_store+0x31/0x50 [ 935.033357] __io_uring_add_tctx_node+0x1cf/0x520 [ 935.034119] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 935.034945] ? alloc_fd+0x2e7/0x670 [ 935.035536] io_uring_setup+0x1fbb/0x2980 [ 935.036197] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 935.036995] ? wait_for_completion_io+0x270/0x270 [ 935.037774] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 935.038601] ? syscall_enter_from_user_mode+0x1d/0x50 [ 935.039424] do_syscall_64+0x33/0x40 [ 935.040014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 935.040822] RIP: 0033:0x7ff283a12b19 [ 935.041407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 935.044311] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 935.045518] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 935.046645] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 935.047781] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 935.048909] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 935.050031] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:08:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x810, 0xffffffffffffffff, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd_index=0x2, 0xffffffff, 0x0, 0x0, 0x7, 0x0, {0x0, r2}}, 0x400) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 23:08:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 23:08:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 935.099511] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 935.102381] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:08:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) write$P9_RGETATTR(r3, &(0x7f0000000140)={0xa0, 0x19, 0x2, {0x0, {0x2, 0x0, 0x4}, 0x16, 0xee00, 0x0, 0x4, 0x3, 0x8, 0x9, 0x45a7, 0xb3e, 0x8, 0x40, 0x1, 0x8, 0x5, 0x3, 0x20, 0x80000000, 0x7}}, 0xa0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x351a49c5, 0x100000000, 0x1}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000200)=""/61, 0x3d, 0x61, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}, 0x412}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r9, 0x80, &(0x7f00000002c0)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x0, 0x0, 0x1, {0x0, r10}}, 0x4f4) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r11, 0x0, r4, 0x0, 0x80, 0x0) getpeername$packet(r2, &(0x7f0000002840)={0x11, 0x0, 0x0}, &(0x7f0000002880)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r11, &(0x7f00000029c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002980)={&(0x7f00000028c0)={0xa4, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x41}, 0xc804) 23:08:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 935.174143] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 935.181993] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 935.210307] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 935.213578] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 949.353254] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 949.357147] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:08:34 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:08:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x2200001, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x8) 23:08:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:08:34 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 45) 23:08:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:34 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000be2b2e2f6669ee3d4a83bc6c61dee6201508dadfbbbb3ffee791f1e2fd6340ed8ca696f8bdaff2d6c00d68d6982dbe944171830a33ccf02e1f4caf96ed3c1efd16a59e8541dc0ed7ddbe5ece53cbbf356e6bc49966ba2276617cf193b33cb1cc29ad3012ef5dcbcd97d8d850591250f28e0322d9f4feff9f06e5dffefbc7580f95dbbfbb1d62844c46c2456801ea0e74729d409de10c033f54800809a32f2a25a16d4a9f4d2c33bab3a5726a256dd69c169c3b17dc9f7602c5e13bba14a3b5b35501e6f23f75489212c3332ac473803a8ab8bed8e4ad9cc6becd29726fb5e682c33e08a801000000ffed8c69b07f42af1907e8f8a8cbedf1d2467ab6bcf557bfb0042bf4abdbaa27157ba87d19814f10ce30b86ec78edbf0fe4f80aa20f1d09089135b3773453c0b52f38edadaf424ef4f378bd9294a926939771e6ab7b54d93629f26f08f8a82663a2e86ded097b988d21580b836c07bc515d21da25365a40b9ddac965fdc7ff1890602e69c7c2a96a52794ee0f698fabfcd3d4ea063b3fc9ffc2433eeb7eb646a8680f5d5b0ff749b544cf8254986ede0f16a1532a459ee46a0f5b4270d1ebd2fa043533e04615d34c0dfaa045dc6a39bee067b5e07edb92c53ff2576b6864524e6e8106408edb9e013df3e09df0f22a83a9450e7105f0fa141fc9f60a293ed30402ee099d35c23bafe38fd32d19cb66dd3e2197e5920058404e8585c7999841dc09e8579101a23cf256ec283eb62f40eb8551a485124ac6ceb9d15a6453764d64a5f95a26aeceeb17f4b8bee216fdb45169af7619fd50c979b285060bee5d712dc7b69367af55d2bfd44cf62ad8411279d91bdf2a7c61c993c25989e62a82adaf7820f20e30a846cbb4bfa2a3f061c07c46285a45cf94487b6b78fc6b8540eafd2ab977fedce1bcdeef81b8457276b26935bf2dc8373310b576088c61ea82720f06ed42db6c216ac7b667284eff9f41a48269561db039ecb9bf6b5a155ebcce1a0ef2ffa6708a470c16bcfde3ddc148e2108a3cc951a76caf5e5de80e57a2f1924a5292378f7660deb9d7a6721a3270bf382e6779c1a66f2c35b2a51b6c4402df8c078cbed7bb1a1ce0708f263b2aa0a19e93db9698083f6c829accf4a6171c93dfaba76985eb1c27c103bfe0de7c677de489a57cef1ba95909627580697e37e32df870b85f7ca682eeaa26c03ee5e971037c4e0678a99e28ba785c377ab1098113333e4832ff7597514e04fe335180cc8e64e535f26f9dbb24e5a65cc4c671bd204f6e5143009ce404b2a7bd31eca2448dc66d37ebf"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:08:34 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x0, 0x2}, 0x8) 23:08:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 949.391349] FAULT_INJECTION: forcing a failure. [ 949.391349] name failslab, interval 1, probability 0, space 0, times 0 [ 949.393934] CPU: 1 PID: 9175 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 949.395397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 949.397159] Call Trace: [ 949.397723] dump_stack+0x107/0x167 [ 949.398492] should_fail.cold+0x5/0xa [ 949.399299] ? xas_alloc+0x336/0x440 [ 949.400098] should_failslab+0x5/0x20 [ 949.400898] kmem_cache_alloc+0x5b/0x310 [ 949.401757] xas_alloc+0x336/0x440 [ 949.402511] xas_create+0x34a/0x10d0 [ 949.403304] ? kernel_text_address+0xf2/0x120 [ 949.404257] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 949.405368] xas_store+0x8c/0x1c40 23:08:34 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0x8) [ 949.406137] __xa_store+0x164/0x2d0 [ 949.407023] ? xa_delete_node+0x280/0x280 [ 949.407921] ? trace_hardirqs_on+0x5b/0x180 [ 949.408845] xa_store+0x31/0x50 [ 949.409541] __io_uring_add_tctx_node+0x1cf/0x520 [ 949.410553] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 949.411668] ? alloc_fd+0x2e7/0x670 [ 949.412449] io_uring_setup+0x1fbb/0x2980 [ 949.413331] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 949.414394] ? wait_for_completion_io+0x270/0x270 [ 949.415445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 949.416552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 949.417542] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 949.417641] do_syscall_64+0x33/0x40 [ 949.419623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 949.420702] RIP: 0033:0x7ff283a12b19 [ 949.421491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 949.425405] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 949.427007] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 949.428521] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 949.428990] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 949.430023] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 949.430034] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 949.430045] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 949.437191] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 949.440584] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:08:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x68, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:34 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000100)={0x10000, 0x40, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x101200, 0x0) write$binfmt_aout(r4, &(0x7f00000005c0)={{0x10b, 0x1f, 0xff, 0x201, 0x16a, 0x7, 0xdb, 0x6}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x61e) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000500)={{}, {0xffffffff}, 0xa, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="0b136968ebac69af144276237dd374ee51c33cac91b1f022e2c96b845dbab7da099ae16336751048a0ed1961a2c1cd48e0383e23d05c44b75a9cd67ca64febd03a28418853025e861d845b992dfeb2013280ef5b5ecf9167bc07998c8a5e750d173e806b7515fe59888251e98bf0df2762c3cf5b8d3bf55ffa517dc00d97dcfd9c767c70c1f139bb5ad325cec055b7d56a22442b9ab011fdcaafdae01edd7461d7d43fc6c7c649458e0f56160a7262390b2ca2884db92c9f517e655a64a4711319a4a30a784d0cd720a90e9a9ca4dd1807dc861f124e359c979b27a88e341cb85f2fa6b8ead4b8", 0xe7, 0x0, &(0x7f0000000300)={0x2, 0x11d, {0x1, 0xc, 0xf7, "19833507f2f5fbb250906b24a99613cf309612b9471035f6d8df4be1b106889c6adb7ac4d68c44f4b864d817d9cd93da3a14272475b0a7dbbe57d84e64ae9f8eec62fd1e03c5eb2e4e9e25f1c84001d59e443e68e30c632bcc7fa075da0fe78ba71bf402dd9e7a5a212cfab25ed0132184bcd41b1eaaaceca6910253fae58204b8739a86511fad37a737a99db7ec270073a3b0f8c02e0f2fe7718e10db8b17c0710888cef8b4453e5f232dd32fd77cf6efa1a1acee39045533d7876e0469e90d772a2f1b6a745feac0d29ec5aea1978a0330c2c93dacb9a259962771359103510250b0b4bec87b43dc380e034c9089b2b5dd96cc478cc8", 0x19, "0e8c1e66dbb8ae6e46853a8375d4f8c2aad7c82fa4f742b7f7"}, 0xd7, "24a98afac74a705e37a10cb4dc7acc91ef94f1fc1e12c755c8193322051adcf88bef8c3e379679c7bb67cfea5c8b53183fb11d4d4b94bf4aa45e354d520e913e74b65f214549add9e38c8b5678988d40779c33d9327ebe9f3bff9813dfb22e5d6ac84ae40a356e71d6dca3870fd57f10c8af5b9c0e895a6ed7589f39dec10e7bea8795bd804725c2fe5aaef44853dcef1b908a54e7410d648c81da0390ac31ca574bb6a4c57ca8886c5cd62ff7212190084c0996bcf0df20fa8fc75f1b8e69af87df895e434955f0af399177b165f49225cae8af0154e8"}, 0x200}) [ 949.546086] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:08:34 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 46) [ 949.580224] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 949.585105] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:08:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x601, 0x41) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x3, 0x2, 0x9a, 0x1, 0x0, 0x3, 0x21211, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x8438a6d5fd4b8c34, @perf_config_ext={0x6, 0x8}, 0x10008, 0x9, 0x401, 0x1a, 0x9, 0x4009c5, 0xfff, 0x0, 0x20008, 0x0, 0x400004}, r0, 0x800000000000b, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) openat(r1, &(0x7f0000000080)='./file0\x00', 0x4801, 0xc) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 949.596560] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:08:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 949.625779] FAULT_INJECTION: forcing a failure. [ 949.625779] name failslab, interval 1, probability 0, space 0, times 0 [ 949.627186] CPU: 0 PID: 9301 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 949.627982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 949.628927] Call Trace: [ 949.629234] dump_stack+0x107/0x167 [ 949.629656] should_fail.cold+0x5/0xa [ 949.630094] ? ___slab_alloc+0x155/0x700 [ 949.630561] ? create_object.isra.0+0x3a/0xa30 [ 949.631086] should_failslab+0x5/0x20 [ 949.631531] kmem_cache_alloc+0x5b/0x310 [ 949.632003] create_object.isra.0+0x3a/0xa30 [ 949.632501] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 949.633083] kmem_cache_alloc+0x159/0x310 [ 949.633561] xas_alloc+0x336/0x440 [ 949.633975] xas_create+0x34a/0x10d0 [ 949.634401] ? kernel_text_address+0xf2/0x120 [ 949.634919] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 949.635528] xas_store+0x8c/0x1c40 [ 949.635946] __xa_store+0x164/0x2d0 [ 949.636360] ? xa_delete_node+0x280/0x280 [ 949.636841] ? trace_hardirqs_on+0x5b/0x180 [ 949.637338] xa_store+0x31/0x50 [ 949.637718] __io_uring_add_tctx_node+0x1cf/0x520 [ 949.638271] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 949.638869] ? alloc_fd+0x2e7/0x670 [ 949.639290] io_uring_setup+0x1fbb/0x2980 [ 949.639775] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 949.640356] ? wait_for_completion_io+0x270/0x270 [ 949.640921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 949.641522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 949.642111] do_syscall_64+0x33/0x40 [ 949.642538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 949.643122] RIP: 0033:0x7ff283a12b19 [ 949.643552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 949.645647] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 949.646513] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 949.647333] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 949.648149] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 949.648970] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 949.649790] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:08:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:08:47 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 47) 23:08:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0x8) (fail_nth: 1) 23:08:47 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x10, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000050a010400000000000000000000000008000540ffffffff0c000240000000000000000120000000120a05000000000000000000000000070900010073797a30000000001c0000000b0a010200000000000000000a00000408000440000000bd6c000000000a01040000000000000000070000020c00044000000000000000020c00044000000000010000040900010073797a30000000000c00044000000000000000010c000440000000000000000308000240000000000900010073797a31000000000800024000000000140000001100010000000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4004440) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000440)) 23:08:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6c, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:47 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (fail_nth: 1) 23:08:47 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x2d}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) write$cgroup_devices(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="63202a3a2a206d0020e0f34fad2e7cd30c056e1d3b9b150db557f390baa761d5036e892f446617ec704813308da685a2f46ba89bdf6e24f2ffdcacd1efe22d66fcd39af8335dcdefc4464d5c1f898a8ea1f6d148991c3fd801e09405410282879c20968b3598e90a7c56855514daf46d3878152ca782d3b2c8"], 0x8) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000240)) r4 = accept$inet(r1, 0x0, &(0x7f0000000180)) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x305400, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x3, 0x545d, 0xe, @local, @empty, 0x8, 0x7808, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r6, 0x4, 0x3f, 0x7f, 0x8, 0x20, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7, 0x7, 0x7, 0x1}}) recvfrom$inet(r4, &(0x7f00000001c0)=""/7, 0x7, 0x2000, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r3}}, './file1\x00'}) ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f0000000440)) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000080)=""/124, 0x7c}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 962.485646] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 962.489195] FAULT_INJECTION: forcing a failure. [ 962.489195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 962.492299] CPU: 1 PID: 9326 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 962.494063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.496197] Call Trace: [ 962.496892] dump_stack+0x107/0x167 [ 962.497836] should_fail.cold+0x5/0xa [ 962.498824] __alloc_pages_nodemask+0x182/0x600 [ 962.500052] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 962.500154] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 962.501604] ? avc_has_extended_perms+0xf40/0xf40 [ 962.501659] alloc_pages_current+0x187/0x280 [ 962.504816] pipe_write+0xac0/0x1b20 [ 962.505824] ? generic_pipe_buf_release+0x150/0x150 [ 962.507128] ? inode_has_perm+0x171/0x1d0 [ 962.508247] new_sync_write+0x42c/0x660 [ 962.509279] ? new_sync_read+0x6f0/0x6f0 [ 962.510367] ? selinux_file_permission+0x92/0x520 [ 962.511635] ? security_file_permission+0xb1/0xe0 [ 962.512114] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 962.512896] vfs_write+0x7c0/0xb10 [ 962.514644] ksys_write+0x1f6/0x260 [ 962.515587] ? __ia32_sys_read+0xb0/0xb0 [ 962.516661] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.518026] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.519366] do_syscall_64+0x33/0x40 [ 962.520333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 962.521651] RIP: 0033:0x7f821e458b19 [ 962.522618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.525423] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 962.527369] RSP: 002b:00007f821b9ce188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 962.527398] RAX: ffffffffffffffda RBX: 00007f821e56bf60 RCX: 00007f821e458b19 [ 962.527416] RDX: 0000000000000008 RSI: 0000000020000100 RDI: 0000000000000005 [ 962.533222] RBP: 00007f821b9ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.534842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.536467] R13: 00007fff5333bc6f R14: 00007f821b9ce300 R15: 0000000000022000 [ 962.541734] FAULT_INJECTION: forcing a failure. [ 962.541734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.543109] CPU: 0 PID: 9336 Comm: syz-executor.2 Not tainted 5.10.258 #1 [ 962.543900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.544839] Call Trace: [ 962.545147] dump_stack+0x107/0x167 [ 962.545566] should_fail.cold+0x5/0xa [ 962.546013] _copy_to_user+0x2e/0x180 [ 962.546460] simple_read_from_buffer+0xcc/0x160 [ 962.547006] proc_fail_nth_read+0x198/0x230 [ 962.547503] ? proc_sessionid_read+0x230/0x230 [ 962.548040] ? security_file_permission+0xb1/0xe0 [ 962.548599] ? proc_sessionid_read+0x230/0x230 [ 962.549123] vfs_read+0x228/0x620 [ 962.549524] ksys_read+0x12d/0x260 [ 962.549933] ? vfs_write+0xb10/0xb10 [ 962.550380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.550979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.551578] do_syscall_64+0x33/0x40 [ 962.552009] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 962.552602] RIP: 0033:0x7eff7a12069c [ 962.553031] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 962.555125] RSP: 002b:00007eff776e3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 962.556005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007eff7a12069c [ 962.556819] RDX: 000000000000000f RSI: 00007eff776e31e0 RDI: 0000000000000004 [ 962.557629] RBP: 00007eff776e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.558439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.559249] R13: 00007ffe393db9af R14: 00007eff776e3300 R15: 0000000000022000 23:08:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x74, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 962.570346] FAULT_INJECTION: forcing a failure. [ 962.570346] name failslab, interval 1, probability 0, space 0, times 0 [ 962.573016] CPU: 1 PID: 9339 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 962.574570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.576478] Call Trace: [ 962.577082] dump_stack+0x107/0x167 [ 962.577911] should_fail.cold+0x5/0xa [ 962.578788] ? xas_alloc+0x336/0x440 [ 962.579640] should_failslab+0x5/0x20 [ 962.580506] kmem_cache_alloc+0x5b/0x310 [ 962.581430] xas_alloc+0x336/0x440 [ 962.582234] xas_create+0x34a/0x10d0 [ 962.583088] ? kernel_text_address+0xf2/0x120 [ 962.584111] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 962.585306] xas_store+0x8c/0x1c40 [ 962.586133] __xa_store+0x164/0x2d0 [ 962.586974] ? xa_delete_node+0x280/0x280 [ 962.587923] ? trace_hardirqs_on+0x5b/0x180 [ 962.588904] xa_store+0x31/0x50 [ 962.589658] __io_uring_add_tctx_node+0x1cf/0x520 [ 962.590746] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 962.591129] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 962.591936] ? alloc_fd+0x2e7/0x670 [ 962.591974] io_uring_setup+0x1fbb/0x2980 [ 962.594550] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 962.595713] ? wait_for_completion_io+0x270/0x270 [ 962.596663] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 962.596826] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.598811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.599984] do_syscall_64+0x33/0x40 [ 962.600816] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 962.601969] RIP: 0033:0x7ff283a12b19 [ 962.602812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.606953] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 962.608675] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 962.610275] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 962.611906] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 962.613497] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 962.615109] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:08:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:08:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0x8) (fail_nth: 2) 23:08:47 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:08:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 962.678203] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 962.683298] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 962.687447] FAULT_INJECTION: forcing a failure. [ 962.687447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.688878] CPU: 0 PID: 9355 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 962.689657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 962.690603] Call Trace: [ 962.690919] dump_stack+0x107/0x167 [ 962.691339] should_fail.cold+0x5/0xa [ 962.691789] copy_page_from_iter+0x40a/0x900 [ 962.692307] pipe_write+0x908/0x1b20 [ 962.692751] ? generic_pipe_buf_release+0x150/0x150 [ 962.693331] ? inode_has_perm+0x171/0x1d0 [ 962.693814] new_sync_write+0x42c/0x660 [ 962.694273] ? new_sync_read+0x6f0/0x6f0 [ 962.694754] ? selinux_file_permission+0x92/0x520 [ 962.695315] ? security_file_permission+0xb1/0xe0 [ 962.695891] vfs_write+0x7c0/0xb10 [ 962.696310] ksys_write+0x1f6/0x260 [ 962.696723] ? __ia32_sys_read+0xb0/0xb0 [ 962.697194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 962.697795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 962.698387] do_syscall_64+0x33/0x40 [ 962.698814] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 962.699396] RIP: 0033:0x7f821e458b19 [ 962.699828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 962.701925] RSP: 002b:00007f821b9ce188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 962.702789] RAX: ffffffffffffffda RBX: 00007f821e56bf60 RCX: 00007f821e458b19 [ 962.703606] RDX: 0000000000000008 RSI: 0000000020000100 RDI: 0000000000000005 [ 962.704419] RBP: 00007f821b9ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 962.705237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.705678] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 962.706050] R13: 00007fff5333bc6f R14: 00007f821b9ce300 R15: 0000000000022000 23:08:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000001280)={'#! ', './file1', [{0x20, '+.'}, {0x20, 'permit_directio'}, {0x20, ':-('}], 0xa, "1f1fa74142f69f51ab2019f7416e3b54ba52becdd5cd0f0e9503f1391847fdd6fb2949624ad837fa396784"}, 0x4d) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r1 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x20, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="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", 0x1000, 0xfffffffffffff001}], 0x84000, &(0x7f0000001140)={[{')\x8d'}, {':\x91'}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '*'}}, {@subj_type={'subj_type', 0x3d, '+.'}}]}) getdents(r1, &(0x7f00000011c0)=""/144, 0x90) [ 962.728642] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 962.766232] loop6: detected capacity change from 0 to 8380416 23:09:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:03 executing program 2: perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x4000, 0x0, 0x0, 0xc, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:09:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x80, 0x100) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) dup2(r3, r2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x50, r1, 0xb6146000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x50}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4020000}, 0x40000) splice(r5, 0x0, r4, 0x0, 0x80, 0x0) sendfile(r2, r5, &(0x7f00000000c0)=0x2, 0x3) 23:09:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000be2b2e2f6669ee3d4a83bc6c61dee6201508dadfbbbb3ffee791f1e2fd6340ed8ca696f8bdaff2d6c00d68d6982dbe944171830a33ccf02e1f4caf96ed3c1efd16a59e8541dc0ed7ddbe5ece53cbbf356e6bc49966ba2276617cf193b33cb1cc29ad3012ef5dcbcd97d8d850591250f28e0322d9f4feff9f06e5dffefbc7580f95dbbfbb1d62844c46c2456801ea0e74729d409de10c033f54800809a32f2a25a16d4a9f4d2c33bab3a5726a256dd69c169c3b17dc9f7602c5e13bba14a3b5b35501e6f23f75489212c3332ac473803a8ab8bed8e4ad9cc6becd29726fb5e682c33e08a801000000ffed8c69b07f42af1907e8f8a8cbedf1d2467ab6bcf557bfb0042bf4abdbaa27157ba87d19814f10ce30b86ec78edbf0fe4f80aa20f1d09089135b3773453c0b52f38edadaf424ef4f378bd9294a926939771e6ab7b54d93629f26f08f8a82663a2e86ded097b988d21580b836c07bc515d21da25365a40b9ddac965fdc7ff1890602e69c7c2a96a52794ee0f698fabfcd3d4ea063b3fc9ffc2433eeb7eb646a8680f5d5b0ff749b544cf8254986ede0f16a1532a459ee46a0f5b4270d1ebd2fa043533e04615d34c0dfaa045dc6a39bee067b5e07edb92c53ff2576b6864524e6e8106408edb9e013df3e09df0f22a83a9450e7105f0fa141fc9f60a293ed30402ee099d35c23bafe38fd32d19cb66dd3e2197e5920058404e8585c7999841dc09e8579101a23cf256ec283eb62f40eb8551a485124ac6ceb9d15a6453764d64a5f95a26aeceeb17f4b8bee216fdb45169af7619fd50c979b285060bee5d712dc7b69367af55d2bfd44cf62ad8411279d91bdf2a7c61c993c25989e62a82adaf7820f20e30a846cbb4bfa2a3f061c07c46285a45cf94487b6b78fc6b8540eafd2ab977fedce1bcdeef81b8457276b26935bf2dc8373310b576088c61ea82720f06ed42db6c216ac7b667284eff9f41a48269561db039ecb9bf6b5a155ebcce1a0ef2ffa6708a470c16bcfde3ddc148e2108a3cc951a76caf5e5de80e57a2f1924a5292378f7660deb9d7a6721a3270bf382e6779c1a66f2c35b2a51b6c4402df8c078cbed7bb1a1ce0708f263b2aa0a19e93db9698083f6c829accf4a6171c93dfaba76985eb1c27c103bfe0de7c677de489a57cef1ba95909627580697e37e32df870b85f7ca682eeaa26c03ee5e971037c4e0678a99e28ba785c377ab1098113333e4832ff7597514e04fe335180cc8e64e535f26f9dbb24e5a65cc4c671bd204f6e5143009ce404b2a7bd31eca2448dc66d37ebf"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:09:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:03 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 48) 23:09:03 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0x8) (fail_nth: 3) 23:09:03 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) r3 = clone3(&(0x7f0000000380)={0x40000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x6}, &(0x7f0000000240)=""/192, 0xc0, &(0x7f0000000300)=""/16, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r2}}, 0x58) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x8, 0x9, 0x2, 0x0, 0x0, 0x2, 0x80008, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x39bd, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x8010, 0xffffffffffffff7f, 0x8, 0x0, 0x1, 0x50, 0x400, 0x0, 0x100, 0x0, 0xffffffffffffff4a}, r3, 0xe, r0, 0x2) [ 978.237259] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 978.244804] FAULT_INJECTION: forcing a failure. [ 978.244804] name failslab, interval 1, probability 0, space 0, times 0 [ 978.247043] CPU: 1 PID: 9383 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 978.248280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 978.249773] Call Trace: [ 978.250250] dump_stack+0x107/0x167 [ 978.250905] should_fail.cold+0x5/0xa [ 978.251603] ? ___slab_alloc+0x155/0x700 [ 978.252354] ? create_object.isra.0+0x3a/0xa30 [ 978.253183] should_failslab+0x5/0x20 [ 978.253866] kmem_cache_alloc+0x5b/0x310 [ 978.254601] create_object.isra.0+0x3a/0xa30 [ 978.255372] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 978.256288] kmem_cache_alloc+0x159/0x310 [ 978.257037] xas_alloc+0x336/0x440 [ 978.257667] xas_create+0x34a/0x10d0 [ 978.258342] ? kernel_text_address+0xf2/0x120 [ 978.259136] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 978.260099] xas_store+0x8c/0x1c40 [ 978.260739] __xa_store+0x164/0x2d0 [ 978.261394] ? xa_delete_node+0x280/0x280 [ 978.262147] ? trace_hardirqs_on+0x5b/0x180 [ 978.262927] xa_store+0x31/0x50 [ 978.263524] __io_uring_add_tctx_node+0x1cf/0x520 [ 978.264395] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 978.265329] ? alloc_fd+0x2e7/0x670 [ 978.265987] io_uring_setup+0x1fbb/0x2980 [ 978.266736] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 978.267636] ? wait_for_completion_io+0x270/0x270 [ 978.268534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 978.269471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 978.270404] do_syscall_64+0x33/0x40 [ 978.271074] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 978.271996] RIP: 0033:0x7ff283a12b19 [ 978.272657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 978.275504] FAULT_INJECTION: forcing a failure. [ 978.275504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.275948] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 978.275967] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 978.275987] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 978.282221] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 978.283481] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 978.284736] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 978.286031] CPU: 0 PID: 9388 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 978.287483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 978.289255] Call Trace: [ 978.289823] dump_stack+0x107/0x167 [ 978.290609] should_fail.cold+0x5/0xa [ 978.291452] _copy_to_user+0x2e/0x180 [ 978.292284] simple_read_from_buffer+0xcc/0x160 [ 978.293280] proc_fail_nth_read+0x198/0x230 [ 978.294205] ? proc_sessionid_read+0x230/0x230 [ 978.295165] ? security_file_permission+0xb1/0xe0 [ 978.296213] ? proc_sessionid_read+0x230/0x230 [ 978.297175] vfs_read+0x228/0x620 [ 978.297927] ksys_read+0x12d/0x260 [ 978.298675] ? vfs_write+0xb10/0xb10 [ 978.299473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 978.300588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 978.301700] do_syscall_64+0x33/0x40 [ 978.302490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 978.303579] RIP: 0033:0x7f821e40b69c [ 978.304374] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 978.308246] RSP: 002b:00007f821b9ce170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 978.309854] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f821e40b69c [ 978.311362] RDX: 000000000000000f RSI: 00007f821b9ce1e0 RDI: 0000000000000007 [ 978.312882] RBP: 00007f821b9ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 978.314400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.315932] R13: 00007fff5333bc6f R14: 00007f821b9ce300 R15: 0000000000022000 [ 978.318395] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 978.320176] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 978.334063] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:09:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:03 executing program 6: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ef) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4000, @fd=r2, 0x1, 0xd20, 0x5, 0x12, 0x1, {0x3}}, 0x0) syz_io_uring_setup(0x6c3e, &(0x7f0000000080)={0x0, 0xfb17, 0x1, 0x3, 0x393}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x5) [ 978.401480] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:09:03 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0x8) [ 978.408629] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:09:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x68, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x117, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:03 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0xfdef}, 0x8) [ 978.512643] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:09:03 executing program 2: splice(0xffffffffffffffff, &(0x7f0000000000)=0x4, 0xffffffffffffffff, &(0x7f0000000040)=0x9, 0x0, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 978.519216] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 978.523064] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:09:03 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 49) [ 978.537336] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:09:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6c, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 978.596052] FAULT_INJECTION: forcing a failure. [ 978.596052] name failslab, interval 1, probability 0, space 0, times 0 [ 978.597767] CPU: 1 PID: 9519 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 978.598760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 978.599961] Call Trace: [ 978.600357] dump_stack+0x107/0x167 [ 978.600878] should_fail.cold+0x5/0xa [ 978.601417] ? xas_alloc+0x336/0x440 [ 978.601947] should_failslab+0x5/0x20 [ 978.602483] kmem_cache_alloc+0x5b/0x310 [ 978.603065] xas_alloc+0x336/0x440 [ 978.603569] xas_create+0x34a/0x10d0 [ 978.604116] ? kernel_text_address+0xf2/0x120 [ 978.604762] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 978.605521] xas_store+0x8c/0x1c40 [ 978.606038] __xa_store+0x164/0x2d0 [ 978.606571] ? xa_delete_node+0x280/0x280 [ 978.607169] ? trace_hardirqs_on+0x5b/0x180 [ 978.607794] xa_store+0x31/0x50 [ 978.608271] __io_uring_add_tctx_node+0x1cf/0x520 [ 978.608955] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 978.609706] ? alloc_fd+0x2e7/0x670 [ 978.610243] io_uring_setup+0x1fbb/0x2980 [ 978.610837] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 978.611582] ? wait_for_completion_io+0x270/0x270 [ 978.612302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 978.613051] ? syscall_enter_from_user_mode+0x1d/0x50 [ 978.613778] do_syscall_64+0x33/0x40 [ 978.614308] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 978.615027] RIP: 0033:0x7ff283a12b19 [ 978.615553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 978.618172] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 978.619252] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 978.620279] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 978.621290] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 978.622298] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 978.623304] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:09:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:03 executing program 6: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x80000) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x4, 0xc5, [0x7, 0xff, 0x8, 0xffffffff, 0x6, 0xc300], 0x1, &(0x7f0000000180)=[{}], &(0x7f00000001c0)=""/197}, &(0x7f0000000340)=0x78) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 23:09:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:09:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:09:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x20000108}, 0x8) 23:09:17 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 50) 23:09:17 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x2, r1, r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:09:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x401, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x80, 0x0) 23:09:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x74, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60000, 0x120) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x8001, 0x1}}, './file1\x00'}) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0xd) mount$cgroup(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x5, &(0x7f00000001c0)={[{@none}, {@name={'name', 0x3d, '}d'}}, {}, {@noprefix}, {@none}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 992.658298] validate_nla: 4 callbacks suppressed [ 992.658311] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 992.665032] cgroup: Invalid name [ 992.668309] FAULT_INJECTION: forcing a failure. [ 992.668309] name failslab, interval 1, probability 0, space 0, times 0 [ 992.670824] CPU: 1 PID: 9653 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 992.671943] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 992.672310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.672324] Call Trace: [ 992.676214] dump_stack+0x107/0x167 [ 992.676234] cgroup: Invalid name [ 992.677003] should_fail.cold+0x5/0xa [ 992.677025] ? create_object.isra.0+0x3a/0xa30 [ 992.677043] should_failslab+0x5/0x20 [ 992.677069] kmem_cache_alloc+0x5b/0x310 [ 992.681196] ? mark_held_locks+0x9e/0xe0 [ 992.682080] create_object.isra.0+0x3a/0xa30 [ 992.683025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 992.684132] kmem_cache_alloc+0x159/0x310 [ 992.685032] xas_alloc+0x336/0x440 [ 992.685800] xas_create+0x34a/0x10d0 [ 992.686608] ? kernel_text_address+0xf2/0x120 [ 992.687575] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 992.688717] xas_store+0x8c/0x1c40 [ 992.689499] __xa_store+0x164/0x2d0 [ 992.690286] ? xa_delete_node+0x280/0x280 [ 992.691188] ? trace_hardirqs_on+0x5b/0x180 [ 992.692133] xa_store+0x31/0x50 [ 992.692853] __io_uring_add_tctx_node+0x1cf/0x520 [ 992.693891] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 992.695016] ? alloc_fd+0x2e7/0x670 [ 992.695812] io_uring_setup+0x1fbb/0x2980 [ 992.696721] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 992.697816] ? wait_for_completion_io+0x270/0x270 [ 992.698876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.700014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 992.701133] do_syscall_64+0x33/0x40 [ 992.701936] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 992.703039] RIP: 0033:0x7ff283a12b19 [ 992.703847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.707821] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 992.709467] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 992.711020] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 992.712565] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 992.714111] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 992.715647] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:09:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'bond_slave_0\x00', &(0x7f0000000200)=@ethtool_stats={0x1d, 0x1, [0x10000]}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80008, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@subj_user={'subj_user', 0x3d, '@.-.\xc5:'}}, {@smackfsroot={'smackfsroot', 0x3d, '('}}, {@audit}, {@audit}]}}) splice(r2, 0x0, r0, 0x0, 0x80, 0x0) [ 992.735456] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 992.747473] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:09:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0xfffffdef}, 0x8) 23:09:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 992.841379] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 992.861458] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:09:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r1 = gettid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x9) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0xff, 0x5, 0x78, 0x7f, 0x0, 0x9, 0x84016, 0x9036b91186e52dbf, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x68, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x4075, 0x2, 0x1, 0x6, 0x1000, 0x3, 0x0, 0x0, 0x100, 0x0, 0x5}, r1, 0x3, r0, 0x0) mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200008, 0x0) mount(&(0x7f0000000180)=@sr0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000200)='debugfs\x00', 0x1009000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x440, 0x0) 23:09:18 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 51) [ 992.947537] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 992.960714] FAULT_INJECTION: forcing a failure. [ 992.960714] name failslab, interval 1, probability 0, space 0, times 0 [ 992.963221] CPU: 1 PID: 9781 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 992.964677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.966432] Call Trace: [ 992.966996] dump_stack+0x107/0x167 [ 992.967772] should_fail.cold+0x5/0xa 23:09:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:09:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x81, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4000, 0x8, 0x0, 0x3, 0x7fff, 0x4, 0x5, 0x0, 0x6d, 0x0, 0x9}, r1, 0x2, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) [ 992.968802] ? xas_alloc+0x336/0x440 [ 992.969743] should_failslab+0x5/0x20 [ 992.970564] kmem_cache_alloc+0x5b/0x310 [ 992.971427] xas_alloc+0x336/0x440 [ 992.972196] xas_create+0x34a/0x10d0 [ 992.972994] ? kernel_text_address+0xf2/0x120 [ 992.973947] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 992.975071] xas_store+0x8c/0x1c40 [ 992.975843] __xa_store+0x164/0x2d0 [ 992.976630] ? xa_delete_node+0x280/0x280 [ 992.977524] ? trace_hardirqs_on+0x5b/0x180 [ 992.978452] xa_store+0x31/0x50 [ 992.979157] __io_uring_add_tctx_node+0x1cf/0x520 [ 992.980183] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 992.981287] ? alloc_fd+0x2e7/0x670 [ 992.982073] io_uring_setup+0x1fbb/0x2980 [ 992.982958] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 992.984039] ? wait_for_completion_io+0x270/0x270 [ 992.985092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.986199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 992.987305] do_syscall_64+0x33/0x40 [ 992.988105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 992.989188] RIP: 0033:0x7ff283a12b19 [ 992.989975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.993881] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 992.995489] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 992.997004] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 992.998509] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 993.000025] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 993.001533] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 993.003474] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1005.735180] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:09:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:09:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:30 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 52) 23:09:30 executing program 6: flistxattr(0xffffffffffffffff, &(0x7f0000000000)=""/159, 0x9f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) fsmount(r1, 0x0, 0x1) 23:09:30 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) signalfd(r0, &(0x7f0000000000)={[0x7ff]}, 0x8) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:09:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0x8) 23:09:30 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x4) syz_io_uring_setup(0x3155, &(0x7f0000000100)={0x0, 0xa145, 0x0, 0x3, 0x1b0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40201) fcntl$setstatus(r3, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000200)) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) 23:09:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1005.764658] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1005.776220] FAULT_INJECTION: forcing a failure. [ 1005.776220] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.779192] CPU: 1 PID: 9808 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1005.780945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1005.783063] Call Trace: [ 1005.783745] dump_stack+0x107/0x167 [ 1005.784655] should_fail.cold+0x5/0xa [ 1005.785464] ? create_object.isra.0+0x3a/0xa30 [ 1005.786434] should_failslab+0x5/0x20 [ 1005.787235] kmem_cache_alloc+0x5b/0x310 [ 1005.788101] ? mark_held_locks+0x9e/0xe0 [ 1005.788962] create_object.isra.0+0x3a/0xa30 [ 1005.789884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1005.789968] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1005.790957] kmem_cache_alloc+0x159/0x310 [ 1005.790988] xas_alloc+0x336/0x440 [ 1005.794184] xas_create+0x34a/0x10d0 [ 1005.794978] ? kernel_text_address+0xf2/0x120 [ 1005.795925] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1005.797039] xas_store+0x8c/0x1c40 [ 1005.797808] __xa_store+0x164/0x2d0 [ 1005.798585] ? xa_delete_node+0x280/0x280 [ 1005.799469] ? trace_hardirqs_on+0x5b/0x180 [ 1005.800393] xa_store+0x31/0x50 [ 1005.801099] __io_uring_add_tctx_node+0x1cf/0x520 [ 1005.802118] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1005.803224] ? alloc_fd+0x2e7/0x670 [ 1005.804008] io_uring_setup+0x1fbb/0x2980 [ 1005.804044] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1005.804897] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1005.804914] ? wait_for_completion_io+0x270/0x270 [ 1005.804958] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1005.809630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1005.810719] do_syscall_64+0x33/0x40 [ 1005.811505] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1005.812615] RIP: 0033:0x7ff283a12b19 [ 1005.813397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1005.817277] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1005.818883] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 1005.820389] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 1005.821893] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1005.823396] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1005.824909] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:09:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0x8) 23:09:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x28}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x72, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x7) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3ff, 0xfff}}, './file1\x00'}) write$P9_RAUTH(r4, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x84, 0x7f, 0x7}}, 0x14) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) fcntl$getown(r2, 0x9) 23:09:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x115, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:31 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101000, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 1005.977486] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1005.987234] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1005.990526] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1006.005994] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:09:31 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 23:09:31 executing program 2: ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRES32, @ANYBLOB="18005a80140000800500140008"], 0x34}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000280)=0x1, 0x4) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508) fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) semget$private(0x0, 0x1, 0x0) 23:09:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1006.136226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1006.154428] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1006.161497] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:09:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 1019.168024] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1019.171409] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1019.178009] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1019.182109] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1019.195214] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:09:44 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0xfdef) 23:09:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) accept$unix(r3, 0x0, &(0x7f00000000c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0xffffffff}}, './file0\x00'}) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:09:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:44 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 53) 23:09:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/acpi_cpufreq', 0x6bae9758b0bf878e, 0x1fc) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) renameat(r0, &(0x7f0000000140)='./file1\x00', r2, &(0x7f00000000c0)='./file1\x00') 23:09:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x1701, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:44 executing program 2: r0 = epoll_create1(0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000280)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) pwritev2(r1, &(0x7f0000000740)=[{&(0x7f00000002c0)="cd8bda6cf64718e9cd058f9d22757cc3cadc2d7bac564fb901c20f4e87fad2807ce7b6c909e130bd5eca044aacf3f15b627e352dfbf307a011388eb0cdec566cf28b3c6cfbb65416d921675a390779e76d1862f50bc9ff724295e7f43f8ef7e3f7ff3ca48cef90e6c9371715437e062c8217865212ccf9b862cb6991010150f514858fbedff5dc74b9966e83a8db498faf42e957166ebd7853b8c1e57399288b4c457db6637883acf1591698803cd27a3f65b648df62ecffe5c7bc322380911da5d7bc12a880076514ad4d04b59e609b6b1a1f5996629f2e7ef00331c62e76cd3450b3", 0xe3}, {&(0x7f00000003c0)="bb913be149e5028c9b3b41d5ecdac128b527a26b386e", 0x16}, {&(0x7f00000004c0)="1a6cdfbb1d66050c22a9279d8a8f5b8f96a9471f49f0627c4c91512e36577e1bf536061a3bc4c9172238b38fad67e0aa95c460d1ddc5e34ac0e925707a6c49abd6beb8fdbe8e991532946e63e5cfae", 0x4f}, {&(0x7f0000000540)="88ff076846489c434a5fdc7dc6c554ae8b5c395f8a84a93c40c626fc4a680b8ad028ff33061036613dd1b41619359f0b3141987c9c4a041fca11d550d69df83b80e9501dae5b3f9eda427ba10654a32e6e92b762870e639de12c6bbec9738db0da043b4ed3aac85621eafa519ec3bcadcafda3559120c43be3b2a45fe592ef06814d72bdc410cdbc824d68344afbb72fde1c014917d49d478ab6ce626f498ab77556ad557061135aca2b6be8019d3ac650a672e63ed95e8180d4eadaaa049c7f9617", 0xc2}, {&(0x7f0000000400)="f7178d57ad3d04443a8e0521f5a5bc70eb78aef4fa30e2e502992f50b215ce", 0x1f}, {&(0x7f0000000640)="40d73a1bd1781b2972a9b1a00dacd7bdb43ad358159960aeed3b83eb43e5782ff08b8895aa0c92bb9f9cf5f64e802f15a1d3e88252fa8a9030dc07098faf44866b4c8f4d21cecbe4f2419a31e063c36e0065887ea80775981e415e3c8b833d5b3cae7bdec2a7438f8377ece40671c5356006357c821aedc1bc90649d8061f951f985d66cf9b6ac6a8cec7f912bdfb974006e362e7958cb45d3341d106f4f49838fa575b3a5afdaa67496402d679938c9632b05f6437dd9abfa18363370078f2856097029688bfb95d0342bb926d91d536d7062aba8bb7bdc9f7c9885d5d33dbf263eb3f76b6cc8aa743ba9bf7711850bc5da5b62db64dfa5a9", 0xf9}], 0x6, 0x7f57, 0x1, 0x10) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x5, 0x0, 0xe, 0x0, 0x0, 0x2004, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff818e, 0x0, @perf_config_ext={0xffffffff00000000}, 0x600, 0x53, 0x3f, 0x6, 0xffffffffffffff4c, 0x0, 0x2, 0x0, 0x9, 0x0, 0x88}, r2, 0xe, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r4, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x30080, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/module/netpoll', 0x1003, 0x170) perf_event_open(&(0x7f00000007c0)={0x4, 0x80, 0x7, 0x4, 0xbd, 0x80, 0x0, 0xff, 0x820, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x800}, 0x1080, 0xb0, 0x8, 0x9, 0x100000001, 0x3, 0x6, 0x0, 0xe1, 0x0, 0x400}, r2, 0xffffffffffffffff, r7, 0x0) write(r6, &(0x7f0000000180)="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", 0xfb) [ 1019.205196] FAULT_INJECTION: forcing a failure. [ 1019.205196] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.208003] CPU: 0 PID: 10069 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1019.209564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1019.211426] Call Trace: [ 1019.212029] dump_stack+0x107/0x167 [ 1019.212864] should_fail.cold+0x5/0xa [ 1019.213718] ? xas_alloc+0x336/0x440 [ 1019.214558] should_failslab+0x5/0x20 [ 1019.215411] kmem_cache_alloc+0x5b/0x310 [ 1019.216332] xas_alloc+0x336/0x440 [ 1019.217139] xas_create+0x34a/0x10d0 [ 1019.217980] ? kernel_text_address+0xf2/0x120 [ 1019.218986] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1019.220167] xas_store+0x8c/0x1c40 [ 1019.220988] __xa_store+0x164/0x2d0 [ 1019.221807] ? xa_delete_node+0x280/0x280 [ 1019.222747] ? trace_hardirqs_on+0x5b/0x180 [ 1019.223722] xa_store+0x31/0x50 [ 1019.224472] __io_uring_add_tctx_node+0x1cf/0x520 [ 1019.225558] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1019.226724] ? alloc_fd+0x2e7/0x670 [ 1019.227554] io_uring_setup+0x1fbb/0x2980 [ 1019.228496] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1019.229629] ? wait_for_completion_io+0x270/0x270 [ 1019.230725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1019.231888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1019.233055] do_syscall_64+0x33/0x40 [ 1019.233881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1019.235015] RIP: 0033:0x7ff283a12b19 [ 1019.235842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1019.239932] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1019.241639] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 1019.243219] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 1019.244809] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1019.246388] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1019.247971] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:09:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0x25, 0x75, 0x2, {0x1a, "a3107f5a7658c9b183b8e588631817ed134330852269ade02b60"}}, 0x25) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:09:44 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x1000000000, r0, &(0x7f0000000040), 0x1, 0x0) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x480000, 0x0) pread64(r1, &(0x7f00000000c0)=""/172, 0xac, 0x3) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:09:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4800, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:09:44 executing program 6: statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/166) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 23:09:44 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 54) 23:09:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1019.354134] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1019.361925] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1019.367728] FAULT_INJECTION: forcing a failure. [ 1019.367728] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.369162] CPU: 1 PID: 10256 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1019.369994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1019.370987] Call Trace: [ 1019.371317] dump_stack+0x107/0x167 [ 1019.371760] should_fail.cold+0x5/0xa [ 1019.372234] ? create_object.isra.0+0x3a/0xa30 23:09:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 1019.373017] should_failslab+0x5/0x20 [ 1019.373591] kmem_cache_alloc+0x5b/0x310 [ 1019.374079] ? mark_held_locks+0x9e/0xe0 [ 1019.374565] create_object.isra.0+0x3a/0xa30 [ 1019.375085] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1019.375693] kmem_cache_alloc+0x159/0x310 [ 1019.376201] xas_alloc+0x336/0x440 [ 1019.376629] xas_create+0x34a/0x10d0 [ 1019.377082] ? kernel_text_address+0xf2/0x120 [ 1019.377611] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1019.378233] xas_store+0x8c/0x1c40 [ 1019.378665] __xa_store+0x164/0x2d0 [ 1019.379098] ? xa_delete_node+0x280/0x280 [ 1019.379595] ? trace_hardirqs_on+0x5b/0x180 [ 1019.380114] xa_store+0x31/0x50 [ 1019.380516] __io_uring_add_tctx_node+0x1cf/0x520 [ 1019.381086] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1019.381708] ? alloc_fd+0x2e7/0x670 [ 1019.382145] io_uring_setup+0x1fbb/0x2980 [ 1019.382641] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1019.383240] ? wait_for_completion_io+0x270/0x270 [ 1019.383826] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1019.384453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1019.385066] do_syscall_64+0x33/0x40 [ 1019.385509] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1019.386118] RIP: 0033:0x7ff283a12b19 [ 1019.386560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1019.387286] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1019.388748] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1019.388761] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 1019.388767] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 1019.388773] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1019.388778] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1019.388784] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:09:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1019.432199] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1019.436600] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1019.456989] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:10:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0x20000108) 23:10:00 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x9e, 0x26, 0x8, 0x8, 0x0, 0xffff, 0x600, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x70, 0x1}, 0x200, 0x2, 0x4, 0x9, 0xd4c, 0x8100, 0x1f, 0x0, 0x3ff, 0x0, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:10:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:10:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x80, 0x0) r6 = pidfd_open(0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x401}, {r3, 0x200}, {r5, 0x8171}, {0xffffffffffffffff, 0x280}, {r6, 0x1008}], 0x5, 0x18) 23:10:00 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x800, 0x4}, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/fb', 0x200, 0x1) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) fallocate(r1, 0x20, 0x7, 0x6) pipe2$9p(&(0x7f0000000000), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) write$P9_RWRITE(r3, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x40}, 0xb) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) splice(r4, 0x0, r0, 0x0, 0x8, 0xf) 23:10:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:10:00 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 55) 23:10:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1035.123053] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1035.126129] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1035.141648] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1035.144490] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:10:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6800, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1035.150758] FAULT_INJECTION: forcing a failure. [ 1035.150758] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.152072] CPU: 0 PID: 10322 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1035.153014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1035.153965] Call Trace: [ 1035.154284] dump_stack+0x107/0x167 [ 1035.154700] should_fail.cold+0x5/0xa [ 1035.155153] ? xas_alloc+0x336/0x440 [ 1035.155587] should_failslab+0x5/0x20 [ 1035.156025] kmem_cache_alloc+0x5b/0x310 [ 1035.156515] xas_alloc+0x336/0x440 [ 1035.156930] xas_create+0x34a/0x10d0 [ 1035.157370] ? kernel_text_address+0xf2/0x120 [ 1035.157893] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1035.158506] xas_store+0x8c/0x1c40 [ 1035.158930] __xa_store+0x164/0x2d0 [ 1035.159362] ? xa_delete_node+0x280/0x280 [ 1035.159847] ? trace_hardirqs_on+0x5b/0x180 [ 1035.160372] xa_store+0x31/0x50 [ 1035.160761] __io_uring_add_tctx_node+0x1cf/0x520 [ 1035.161335] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1035.161935] ? alloc_fd+0x2e7/0x670 [ 1035.162367] io_uring_setup+0x1fbb/0x2980 [ 1035.162857] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1035.163450] ? wait_for_completion_io+0x270/0x270 [ 1035.164018] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1035.164631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1035.165244] do_syscall_64+0x33/0x40 [ 1035.165666] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1035.166265] RIP: 0033:0x7ff283a12b19 [ 1035.166694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1035.168831] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1035.169720] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 1035.170546] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 1035.171368] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1035.172192] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1035.173028] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:10:00 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)) 23:10:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1035.236162] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1035.249307] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1035.309899] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1035.322674] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:10:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0xfffffdef) 23:10:16 executing program 6: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) r0 = dup(0xffffffffffffffff) openat(r0, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) 23:10:16 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000093f7495129aa735a740100000018000000", @ANYRES32=r0, @ANYBLOB="01000100000000002e2f66696c653000"]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)={0x24, r5, 0x2, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x10001}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) write$9p(r3, &(0x7f0000000880)="3681f9ddc46461efe2bc25470b9102af1851eafac1508a9622e9bd6040f0148b24a59f1f2619645c5c1d3ce11db8f51087db590d6a64f4ceb5366e639b1f3fe015b06fd45710d0645fc40317607f3d81745b563fc5b352d8b4e72e0396e1779c5b7bc8ffbb32021ba0421471f4974dab158b003f1359e5f5c0425c16e184c09277927067d6344b14ed9171bfcb86d38b9d03bb5f248927a229672caa480b351e9fa67f48b45a8c2f5cf670cd140e898117452c23a3edc396fff3339a1e44d9a94554", 0xc2) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0xffffffff, &(0x7f0000000780)=[{&(0x7f00000001c0)="4c7dde55c6c2ebe921cec1b650b955dbd2a397e560ef4648d92ec9ac4e66dc61d79df060c1174209cff6c2e6c212ac7b886ffbb5863cb165ea39e3c67a3e5ff063c8241d283844c583e49a3614b19315c7cf3ee2c6b5a6b1dab6b8f13f4407cda83e0d1794e8fb257608b882554177fdaa7576ef5a62b657b7c19a42bdec328952c415ae18cfe8836a74c50a39d1ea2b37e9dc767f75c35743d939ee34f384137d7449c1913ff5531de52f5555b6a2ffc0", 0xb1}, {&(0x7f0000000280)="6f97e5bfb6ca5ae9b64c2be97c33f9e675dcbd8b2d10cb496af428236eb98e82ffae83fc4760524b6cd978b7b790b1f9e24e17eb3dd418fa3a2d6ffdd172f8c9714ee58562b40d7419e4ac66ece86507b8c951b2e16580f299c1d9c98589ee494e3d7c3438bca66b01b723002d0f4e479166946305096b308dd50983c49052741c8ec9569046c756591fe4151ebb835a036f75818250d8bc26eff7dd3bc36898786ffd110b37da25c22848f882edeabbe4b3089319da9ee3af", 0xb9}, {&(0x7f00000003c0)="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", 0xfc}, {&(0x7f0000000340)="1a9c1a", 0x3}, {&(0x7f0000000600)="2bfce1c2e286ec498bec2c99d5daf320689fabcc508d65ed8821bd08b3e6ccfc6a4d7171853cbf4e5ecc0c256b6428f89a4b80991b4ced01c7bf5d077b0d070bba8b7acfe02fec7237fbe048380ce9b83e367b660af347dec3f4acf15a3d4a45d84da851e1680a9d55003c044ba70ffb4ebe1901adc0c90fdce80acd0f263233c30b1e669fac2fcca25c411d8e5f3c40cd1a2e36eac7499da6ad063696d2433aa975756411ac11ff5ca8c8", 0xab}, {&(0x7f00000006c0)="116c90093125fce6b5af7f1a208bdc514f908d12db027ee347bdce2cf54b577a6299229f1beb834115635fcf601251e84ddef2be9c1b107aa949e243cc77b8a8fd628bd336f5433b2962922726cd4963686cd89891db8638efe20118302aeb6264b13f8e02eb2d1313c2530fb1bcec49f781eabf30f194a7e784d29d40788b0dea3b72ebd0c14a4163ae463b08d08e04dd98f5ab57", 0x95}, {&(0x7f00000004c0)="0e1649c0424af136f2bb144da4546dc4de77c734e05b7b4232809414c42209e6cfee135cacdd371af532cc10ef1f96f166e646b24883050bfc95f7033f2fdafd", 0x40}], 0x7, 0x1, 0x0, {0x1, r8}}, 0x2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x60bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x90) 23:10:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000be2b2e2f6669ee3d4a83bc6c61dee6201508dadfbbbb3ffee791f1e2fd6340ed8ca696f8bdaff2d6c00d68d6982dbe944171830a33ccf02e1f4caf96ed3c1efd16a59e8541dc0ed7ddbe5ece53cbbf356e6bc49966ba2276617cf193b33cb1cc29ad3012ef5dcbcd97d8d850591250f28e0322d9f4feff9f06e5dffefbc7580f95dbbfbb1d62844c46c2456801ea0e74729d409de10c033f54800809a32f2a25a16d4a9f4d2c33bab3a5726a256dd69c169c3b17dc9f7602c5e13bba14a3b5b35501e6f23f75489212c3332ac473803a8ab8bed8e4ad9cc6becd29726fb5e682c33e08a801000000ffed8c69b07f42af1907e8f8a8cbedf1d2467ab6bcf557bfb0042bf4abdbaa27157ba87d19814f10ce30b86ec78edbf0fe4f80aa20f1d09089135b3773453c0b52f38edadaf424ef4f378bd9294a926939771e6ab7b54d93629f26f08f8a82663a2e86ded097b988d21580b836c07bc515d21da25365a40b9ddac965fdc7ff1890602e69c7c2a96a52794ee0f698fabfcd3d4ea063b3fc9ffc2433eeb7eb646a8680f5d5b0ff749b544cf8254986ede0f16a1532a459ee46a0f5b4270d1ebd2fa043533e04615d34c0dfaa045dc6a39bee067b5e07edb92c53ff2576b6864524e6e8106408edb9e013df3e09df0f22a83a9450e7105f0fa141fc9f60a293ed30402ee099d35c23bafe38fd32d19cb66dd3e2197e5920058404e8585c7999841dc09e8579101a23cf256ec283eb62f40eb8551a485124ac6ceb9d15a6453764d64a5f95a26aeceeb17f4b8bee216fdb45169af7619fd50c979b285060bee5d712dc7b69367af55d2bfd44cf62ad8411279d91bdf2a7c61c993c25989e62a82adaf7820f20e30a846cbb4bfa2a3f061c07c46285a45cf94487b6b78fc6b8540eafd2ab977fedce1bcdeef81b8457276b26935bf2dc8373310b576088c61ea82720f06ed42db6c216ac7b667284eff9f41a48269561db039ecb9bf6b5a155ebcce1a0ef2ffa6708a470c16bcfde3ddc148e2108a3cc951a76caf5e5de80e57a2f1924a5292378f7660deb9d7a6721a3270bf382e6779c1a66f2c35b2a51b6c4402df8c078cbed7bb1a1ce0708f263b2aa0a19e93db9698083f6c829accf4a6171c93dfaba76985eb1c27c103bfe0de7c677de489a57cef1ba95909627580697e37e32df870b85f7ca682eeaa26c03ee5e971037c4e0678a99e28ba785c377ab1098113333e4832ff7597514e04fe335180cc8e64e535f26f9dbb24e5a65cc4c671bd204f6e5143009ce404b2a7bd31eca2448dc66d37ebf"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:10:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6c00, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:10:16 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x4da2, [0x800, 0x1, 0x1f, 0x0, 0x9c74, 0x7]}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1051.057221] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1051.065030] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:10:16 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 56) 23:10:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1051.074404] FAULT_INJECTION: forcing a failure. [ 1051.074404] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.075958] CPU: 0 PID: 10454 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1051.076878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1051.077973] Call Trace: [ 1051.078327] dump_stack+0x107/0x167 [ 1051.078803] should_fail.cold+0x5/0xa [ 1051.079299] ? xas_alloc+0x336/0x440 [ 1051.079786] should_failslab+0x5/0x20 [ 1051.080289] kmem_cache_alloc+0x5b/0x310 [ 1051.080838] xas_alloc+0x336/0x440 [ 1051.081307] xas_create+0x34a/0x10d0 [ 1051.081807] ? kernel_text_address+0xf2/0x120 [ 1051.082407] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1051.083094] xas_store+0x8c/0x1c40 [ 1051.083570] __xa_store+0x164/0x2d0 [ 1051.084048] ? xa_delete_node+0x280/0x280 [ 1051.084617] ? trace_hardirqs_on+0x5b/0x180 [ 1051.085193] xa_store+0x31/0x50 [ 1051.085635] __io_uring_add_tctx_node+0x1cf/0x520 [ 1051.086258] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1051.086944] ? alloc_fd+0x2e7/0x670 [ 1051.087431] io_uring_setup+0x1fbb/0x2980 [ 1051.087983] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1051.088651] ? wait_for_completion_io+0x270/0x270 [ 1051.088781] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1051.089297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1051.089318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1051.092356] do_syscall_64+0x33/0x40 [ 1051.092852] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1051.093534] RIP: 0033:0x7ff283a12b19 [ 1051.094018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1051.096416] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1051.097423] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 1051.098374] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 1051.099307] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1051.100061] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1051.100229] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1051.100243] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:10:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7400, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1051.154719] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1051.159168] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:10:16 executing program 6: flock(0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xc89, [0x2, 0x2], 0x5}, 0x10) 23:10:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x112d, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:10:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7a00, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1051.233125] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1051.246554] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:10:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x402, 0x1ff) r1 = signalfd4(r0, &(0x7f0000000040)={[0xffffffffffffff38]}, 0x8, 0x800) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) pipe(&(0x7f0000000180)) getpeername$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 23:10:16 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 57) 23:10:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x8100, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1051.292439] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:10:16 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x0, 0x81, 0x6, 0x0, 0x7, 0x9b0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffff68, 0x1}, 0x14, 0x100, 0x7, 0x5, 0x9, 0x3, 0x8, 0x0, 0x10001, 0x0, 0x18}, r3, 0xd, r1, 0x1) [ 1051.299243] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1051.354306] FAULT_INJECTION: forcing a failure. [ 1051.354306] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.357096] CPU: 1 PID: 10587 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1051.358708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1051.360627] Call Trace: [ 1051.361235] dump_stack+0x107/0x167 [ 1051.362073] should_fail.cold+0x5/0xa [ 1051.362958] ? xas_alloc+0x336/0x440 [ 1051.363809] should_failslab+0x5/0x20 [ 1051.364689] kmem_cache_alloc+0x5b/0x310 [ 1051.365630] xas_alloc+0x336/0x440 [ 1051.366458] xas_create+0x34a/0x10d0 [ 1051.367320] ? kernel_text_address+0xf2/0x120 [ 1051.368352] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1051.369563] xas_store+0x8c/0x1c40 [ 1051.370398] __xa_store+0x164/0x2d0 [ 1051.371237] ? xa_delete_node+0x280/0x280 [ 1051.372198] ? trace_hardirqs_on+0x5b/0x180 [ 1051.373207] xa_store+0x31/0x50 [ 1051.373965] __io_uring_add_tctx_node+0x1cf/0x520 [ 1051.375066] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1051.376249] ? alloc_fd+0x2e7/0x670 [ 1051.377099] io_uring_setup+0x1fbb/0x2980 [ 1051.378062] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1051.379219] ? wait_for_completion_io+0x270/0x270 [ 1051.380341] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1051.381541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1051.382722] do_syscall_64+0x33/0x40 [ 1051.383580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1051.384765] RIP: 0033:0x7ff283a12b19 [ 1051.385608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1051.389790] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1051.391499] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 1051.393131] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 1051.394744] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1051.396365] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1051.397972] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:10:30 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x301c6, 0x1ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x80, 0x0) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f00000003c0)) connect(r3, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x1, 0x2004, @fd_index=0x1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="d5a64568873052e237194da29b99636f0276bf3d992e64e648fad038a3713097ce95a191446dec1c0ddd35271297d7242f4d546982d2f3b3921267c1a473e7dc96c9a7badb06ac7a244bd8295e853ec6d101f3b71aab", 0x56}, {&(0x7f0000000200)="6455019e92956c1bae8b05a341cd3b18f4612cb908b106f27bc8c083bc390dc43528cea1655b9baa3a559697e228a7a41e743c7f602f2b51ab6c4059dbec89f9c382b3c8ed0aa968f30a2b33f9fb3ec5493cd591cfff2eb099bf67f4d2016947adbeff646c7671bb42d8c109980eef6081a5fd3e0cd98d0e4eed85e2eeac6f36cdd101960696bed357188281c58817f25805345d1dd10ee4aeb1f41825a7aa478469c34badc3a6af7c612907993ebb53975b0bd063d5de", 0xb7}, {&(0x7f00000002c0)="5ce8237ef28e0d80c23011cce3e5be36656e82e64f33a2d0c89404de6eb8d6193eb4666b4112006c9166248c6ee1d2ca9699f394b1a105130c59c66ee469ea24ba4271288c6fb4bcaab594f1955f3632aa24122bd178410d05b68098ffc3edb21dd0eb5e0de7429f5377c7cd0370b710053695dcef54236c", 0x78}], 0x3, 0x2f9ea8e26e8c467a, 0x0, {0x1}}, 0xffff8f7f) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x6, 0x0) dup2(r1, r6) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 23:10:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:10:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0xfffffffffffffdef) 23:10:30 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 58) 23:10:30 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x4, 0x6, 0x0, 0x1, 0x20000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x400, 0x0, @perf_config_ext={0x3e96, 0x1}, 0x2, 0x7fffffff, 0x0, 0x6, 0x7f, 0x3, 0x40, 0x0, 0x7f, 0x0, 0x100}, 0xffffffffffffffff, 0x4, r0, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) fcntl$getown(r1, 0x9) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) 23:10:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 1065.267723] FAULT_INJECTION: forcing a failure. [ 1065.267723] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.270262] CPU: 1 PID: 10604 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1065.271713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1065.273468] Call Trace: [ 1065.274025] dump_stack+0x107/0x167 [ 1065.274788] should_fail.cold+0x5/0xa [ 1065.275592] ? create_object.isra.0+0x3a/0xa30 [ 1065.276545] should_failslab+0x5/0x20 [ 1065.277343] kmem_cache_alloc+0x5b/0x310 [ 1065.278196] ? mark_held_locks+0x9e/0xe0 [ 1065.279050] create_object.isra.0+0x3a/0xa30 [ 1065.279966] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1065.281035] kmem_cache_alloc+0x159/0x310 [ 1065.281920] xas_alloc+0x336/0x440 [ 1065.282673] xas_create+0x34a/0x10d0 [ 1065.283465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1065.284572] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1065.285726] xas_store+0x8c/0x1c40 [ 1065.286480] ? lock_acquire+0x1b9/0x470 [ 1065.287320] __xa_store+0x164/0x2d0 [ 1065.288081] ? xa_delete_node+0x280/0x280 [ 1065.288969] ? trace_hardirqs_on+0x5b/0x180 [ 1065.289876] xa_store+0x31/0x50 [ 1065.290568] __io_uring_add_tctx_node+0x1cf/0x520 [ 1065.291576] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1065.292673] ? alloc_fd+0x2e7/0x670 [ 1065.293455] io_uring_setup+0x1fbb/0x2980 [ 1065.294332] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1065.295400] ? wait_for_completion_io+0x270/0x270 [ 1065.296445] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1065.297555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1065.298643] do_syscall_64+0x33/0x40 [ 1065.299433] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1065.300514] RIP: 0033:0x7ff283a12b19 [ 1065.301301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1065.305174] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1065.306766] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 1065.308249] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 1065.309770] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 23:10:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x1501, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:10:30 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x705042, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000853000/0x2000)=nil, 0x2000, 0x2000004, 0x8010, 0xffffffffffffffff, 0x92bb2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x81, 0x81, 0x6, 0x0, 0x5, 0x10800, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x4800c, 0x40, 0x4, 0x1, 0x7, 0x800, 0x6, 0x0, 0x8000, 0x0, 0x954}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x3) [ 1065.311268] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1065.313146] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 1065.325957] validate_nla: 2 callbacks suppressed [ 1065.325971] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1065.342267] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1065.350849] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1065.354278] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:10:30 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0x8) 23:10:30 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1f, 0x90d0}, 0x40d01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = gettid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x9) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xf7, 0x6, 0x9, 0x33, 0x0, 0xdf, 0x100, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x2, 0x5}, 0x1020, 0x9, 0x1, 0x7, 0x9, 0xf095, 0x6ed, 0x0, 0x1, 0x0, 0x6}, r1, 0xf, r0, 0x3) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x5, &(0x7f0000000180)) write$P9_RXATTRWALK(r2, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0x3}, 0xf) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x0) 23:10:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x2d11, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1065.426210] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:10:30 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 59) 23:10:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x80000, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:10:30 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x90) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x9, 0x9, 0x1, 0x0, 0x1c0, 0x11001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x8}, 0x220, 0x7, 0x60000000, 0x6, 0x7, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0xf, r0, 0x9) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x80, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x7, 0x40, 0x4, 0x9, 0x0, 0xcd, 0x1a0e0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xffffffffffffffc0}, 0xa029, 0x210, 0x10000, 0x6, 0x5, 0x4, 0x101, 0x0, 0x5d9, 0x0, 0x1}, r5, 0xc, r3, 0x9) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xfb, 0x6, 0x4, 0x1, 0x0, 0xa90f, 0x4020, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x1800000, 0x40}, 0x0, 0x3, 0x4, 0x3, 0x0, 0x10001, 0x7, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x4, r2, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000000) write$P9_RLOCK(r1, &(0x7f0000000100)={0x8}, 0x8) pipe2$9p(&(0x7f00000001c0), 0x8147ed390fb9426e) [ 1065.447436] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1065.496090] FAULT_INJECTION: forcing a failure. [ 1065.496090] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.497569] CPU: 0 PID: 10733 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1065.498384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1065.499358] Call Trace: [ 1065.499672] dump_stack+0x107/0x167 [ 1065.500103] should_fail.cold+0x5/0xa [ 1065.500547] ? xas_alloc+0x336/0x440 [ 1065.500990] should_failslab+0x5/0x20 [ 1065.501436] kmem_cache_alloc+0x5b/0x310 [ 1065.501914] xas_alloc+0x336/0x440 [ 1065.502334] xas_create+0x34a/0x10d0 [ 1065.502775] ? kernel_text_address+0xf2/0x120 [ 1065.503304] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1065.503917] xas_store+0x8c/0x1c40 [ 1065.504339] __xa_store+0x164/0x2d0 [ 1065.504770] ? xa_delete_node+0x280/0x280 [ 1065.505259] ? trace_hardirqs_on+0x5b/0x180 [ 1065.505766] xa_store+0x31/0x50 [ 1065.506157] __io_uring_add_tctx_node+0x1cf/0x520 [ 1065.506718] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1065.507333] ? alloc_fd+0x2e7/0x670 [ 1065.507761] io_uring_setup+0x1fbb/0x2980 [ 1065.508252] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1065.508861] ? wait_for_completion_io+0x270/0x270 [ 1065.509432] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1065.510050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1065.510655] do_syscall_64+0x33/0x40 [ 1065.510845] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1065.511093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1065.511110] RIP: 0033:0x7ff283a12b19 [ 1065.513694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1065.514887] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1065.515848] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1065.515860] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 1065.515867] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 1065.515873] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1065.515879] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1065.515895] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:10:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4000, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:10:30 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x14001) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000004c0)={{r0}, "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"}) ptrace(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x1a68b1f4, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="1ed0b5b071b4740d526749e2515f18d32292d3c3491ace4c771ef3a31027739e34bb50188431f7c2f298ce1d30a595c2ce6cd51b5ea1e82ee8db94e27a8900b5e284abe0", 0x44, 0x8}], 0x800000, &(0x7f0000000280)={[{@errors_continue}, {@data_err_abort}, {@bh}, {@sysvgroups}, {@nodelalloc}, {@journal_checksum}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa025}}, {@noquota}, {@sb={'sb', 0x3d, 0x81}}], [{@obj_role={'obj_role', 0x3d, ')'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_hash}, {@uid_gt={'uid>', r3}}, {@subj_type}]}) r4 = mmap$IORING_OFF_SQES(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000000, 0x1010, r1, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendmmsg(r2, &(0x7f00000043c0)=[{{&(0x7f0000000380)=@phonet={0x23, 0xbd, 0x7, 0x7}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001c80)="4d26d0ad5eb52356d9595d71e5d0eaa7b70c52bc005f9c62207411ee7b77772b736e4fbe45b96b59b0c9af271ddfb33c7020a7cd3f915eb94bd342db1448413ae4cd0cd5e0ae090253e3680d3ccb281c2111b8e5cf7b4e5e057a660d72ac76408eef29c875b6afaaa0ff7e04e6cdc999b2e581d2bdba24831f83dd32f507d3c6d66e0e8cc71708d5b0268e2f2e65c1d6a11d81dc5e3620de620975f570cd8a0beff855d02d9c6bc656309b4e1ef10e7d966a61c60f8721c2e10be9bd0fbed74689b41a8a6d82e2b8d8af95500dae6f9439cf4d68e24ec18810384d7317a41d289e0c0be1b018330d812cebde2177a34c19c58dd638ab6b6ae00c167e35c25a237f02e0cc6fd8875e02fe2763a3e6362989d48068ad540d95698e3ae4a70b62ab5284873bbcedfff8cf6f842c60d66ee03ff4eeb42b042c1ce5a7b76dccaa2abf902e7a153421669d2fefedf922aec860822b24ae8fb31511c9e1313c9427497f3b284e8dc320822e225c68550174e6efb4308a8c7867be7223740a1e1183b9f47c052f2f53a4066c5346b7a92e783df4c4336d4ff745de7095254ffea0d34161ebde47cf4839cd856b0bf4cd643f183f44a88224670ec85ae9ac1d32303e18306964fceb245e9db8ac972d75755614596bd8cd179295738a7c3fb8a429fa5faf9bd2a44a1ac7f389815893e4f952b4d37301cee4014a6bcf1e03de4c8009ba26f2fe27a2a6f3dcdf8f1fe4dfede27a60dc4f12795a1c8070ae3a3a33c942b9c86b93f968ddf5a35f1c99f26447611b5079d1384951d04c09ae2209de45c7521514bc51c918c89c15b7076792b8966a7902b4b08de99d57559d3791bb6b90ea158753d98363b209ef6b2652160d7ecf018b8de54eec6083a2a3334be3cc789f595e04eed045e3c16e3cd39b28fec4c02a1524d36fc1b15d51409521ccf170b221c2d1084efd00483254fd338ccac9f06272a3c4164a9798d200d119677ada80a62f6d71f8db17b8695967b00300fad7cb15ea37baa548e2bd3c89ca237d491ceac87a64952f9b6b24b00b6fe609ead001cc1dae02803ba65693f64e03b1835da3ccc9d2fb816c10c200ba51fc3e8e87519054c4372ac8b6bdeb79ddf49ec4290314f7da7ffc3dd45920448b47e239d7f297b8fcdcb79e7eb4986a0d0a08658ab95d84b3e86285dece369a002a55e9136cdaa293897583337c22cd859c5513b9e97ce381206570fc5954c59b34a2a2b973ea07bb86d87147737ea50afa226f29218513c8a23cec5952112760abb93b58de4e4cb81ad472ffa616f34168d2288451588f390890284f8d412d8f437abad1354ce780970113121113853ac7b414482b8bc0318737cdc6ba2f69271bdb60ca34d7b9f9e95f998adbde6486c287baee54d0451a8a5eabb43603f332f89bba3ee11d36c95cdb0d0b0049000a0fba4b4cbbe013ecf73b4ec1116187c4b343cac3a24c4fed3a0a4ac6f96e1dec823b57bff0b58d3fe895c880625519ef534bb21e94dbe20f6c156fc85199d9e8b54142e872c43c0316a3aa28000d2c4e065cbd39fdbb2b69b432cd54fcd114e78133100f056a02453a7d5163c29c06ad727fcf7396398e5ddc3ce6e1aa948ef864765b6a2507e46f997c7bd1640d700a525b3dc0a2f3bd5c1a7289f607741a06a5730c506d9b9f16d1e37188b6ae7d86f9ff3ca28706091d23a5e77dedc5d2e8fad465cf5888266ae44a0b027e37669c48458315d4b9710f1ee8ba6f69ee7b4cf4937aba2838c6893fcc2107c6ae7a8d848747e40479a4b4dc3cbbfdf4cc24c024684edc00b32684c65d233f5ffe7d8cd4d8aaadbe5fa52a378ed421c1e37bee3e8dc371f30fbd47c851c2b420611f20ec7c1322d5dbec47e4317885bcec1f3c6c9d689ce70f40773e088093795c08c0f2a01244b58f733e84524900bbf75c2f008aba6106c78d27eb20428f54b62310250fbb61a0592e396f03330e4f3c7afb4b37a8d2888e130e591a113f02ef20d6db9d4d4e02de03c02638fb306ace1a7a13b8e6f71d27a7a6be9f50572ca274455b8e86782a0f2f298b5416edaa84331adb0db8261e6a872a8293a240d1b260068b9c8dd9b95f44ad4255927f81244260beb76fa59ae781134c0a410c81904e27062fec580875f1e05eb2ccc71dbaf0e25fac0c993d93b3ac44048b493e225b683bdf398329e733bd86da703452e4384440e921d6387f902d6104548f512a0a96c99e57f748ac09a7a762dc9e9285e7e2a8a66b68f21af676a590e5ae88b01f18d727db4aba1dd89c534b1381dd7966177a3decce24c87b6a7ad2135b6242bb0f73ca4e5dad55b4c73235e73cfe71a3a64c7ccfab172d9817ce37849564682bcd46fd563dae6a9d7f23c8e362d8dbd7d5181d86c0133ee11a63d160fb3d961c21d7d0f1e4b249915bd88cf44d294089f5786c9d8ce22c5469a6dcb8d98ab131a599aa814f5fadc7646768754cd560abc57de607b3e19dcfdd29be26f68df12e94bbfc78129958449c86d50048819c96f39a137f59f4a88bc2c3cf3a82769b40e9e19c4e939f46b1d6522c82790e110a563ca0ae920c4f52170892ddee6cb881818ac4fef58faa8eae151c73bd7dcc77ff2a43597f300e364874c86aa24d0c126b69f08b6fe197cfd2b2618eda7aad7144812604dcfde0a29ffa768b727f5a063bef25ebab2dcaf3b3f94ef3d53fdd31fa9c363b416c6b9c7d19f4e9089d1d9290225f9ea48703757d4846bd418184a4986aae9a3d4cefe2db87a45c5cbfe09cca752a613b4f867d656dadd11bf39ac61cac9231f8ab40707d7c1b1b48044d51ae0533ce3ee61165c46dd9eb071504ac7cdd427d09dd72bb207e78a8773bf5378663cb340a91e45ef61525ee90c4a76c414da2f3953a40fe033bd72d2ceaf6e1f282218ca96923d11617dabde507a9b61bf79ac26dfe2670346af46d542b6e1796f2ca7968f150fc946c9a115e13af193f39fa6a99dd11bddbb95629f54eccf37e2e169c61f522ef95fb4090885c3dee71187589c803944413d73eaaccfcd516ac23baaa2dc4309e29796aabdd57b89f472411fc242abef754b74edd44004a73fa99f42e83ee761343e0f5937c8d84003b378ec791be7d7a1b0e2ef445f2a19c7cc046f9545b258c36279b253ad626f7170862f98604cbf1f7388009335eafa939e6faefdf4d6008a3b2645719baa7f39d2ad5dfe56b7f2933fbf16f506f41d1f37933802c747bf2dfe961db805313ca4fa3e98c474872ffc2c775212c27e1c944113f86a6dfcc9cd68f2f24566d74eb5a5f1fad6fd6bd8d77f3cfb34896384f4fc678ea211ac68bd79ddf4142b4d634957cfa7d5a06c12e265393919e4f4144d53cb10d04f121ad43b0b99faa91e5bf8e92ae70900a80e4b36536c306239c27d00e6709280eb56b964059b7b9dd072b524dd24db67c1647a7bb56591896d839290c23078cceb96d0c712b0b5b1178499d3ef2745e9224be870c4a98e188a0f0692bc2fea9288e502d7d9c096ff363e51da2c422f635fdc486acb20ea594dc62e73df40d2650f77fea462c5548118fa9466f223c5c4be9dd22989c6cf5374d3716fdc87967e8e1fc717ab932f1d414d93ca11370cc1b57577a8346be9a60efde407a0524dccec5d86c6f999114c6edfd76d7433731e7504918f2aa7828a3be22f18d2d5d94813b81fa51dfd7c94c43b42c924482c893d6e70a5045577d37ec5d9761b1040f3f65b8434b42245546bc83917730474745ef24e91adee689a072d842af1e58d9b4db97fc8d221bcaafd9b81e6bd0d5084f7fe9d58badade328f59d1e1dc63b3f0778abb441cdb46cc7b018722476bce49d8b9426629a205a2705f678b4db53698081babac79cd2f51f771109dfb48a023e6ca2276c28690544091008d84cf1e627d4263ef15890655d342386f9391838e5474c363824715692848a423a9da62ad25e2dbe182b18fa7937886ea5c55938e463fc0b9f6ffe2492719199829b68cbf2a78d7e15a98094c15806e7a2738b28a7bfbd11ed78ccefc37027e471c6228492eff3fc7d4ac433d0975c4dc66d12c913aa6f7decc02f460a1e362e601270f64385b5d16b2bc5ab91023c0180edf94d813f277fb96c6f4b36100094d0fed72614e1c6b3193f3453fe8ccc37625d8d2e9742538bcc416ab203ff297e9755f2f0ceda5786b5cdef62ba5c8b1a199b214100359efe48d36c04ae0b855524317aad054bcf45df0144b23fe7938826256c5de965341ff08aa3f69246472070e9dd99b7a903e28023e1470d705c5dda25036efd6f7be2944a70273e975e2fa900c5e7f15254bd62448082cedb22c834aefc384f91e53908b00da19a6aa1b431a36e82c635917aa8a9def288778e345ea5919ec9b62e3a30234f1470234044dbb09adc2027aa033d43c1de7e6db69606ad236d6e6f128b99ea3ffc8008ad5a1540d5fbab101be9361eb1045be45ad842d1df8c4e9a00391729c6269b7043b706a5c9c7125aac97194a8136393486d7d8072fbe765dfab95e9267d811207e5a65bff10e69183da56aa30ab7f5b82cbcc2191d86c6b6e4a7cb0d4b274e17f3edcb1daa61a7b879ea416c28b3c0319dfc856b79bf9d2a35e923c68be424182942a77eff20398162c2420b5553cf4a65b2f145f12d19a07f8f8f2e07093dab8f792415640be6a824bdb049b737d7570a82a665e463728679b657829fa787c453d7a388187cba0a4cacd6daa62c18ac738168bca6adef685cfda211ae23fb988067814f8bb972f0f41f92c189ac4994a9397df3e97f246c5de328af99536308aff134add8f6cb9c2e2ab6b2e4b8340876521f6f78ba5fa81cbb5935434475ec7edd73aa9dd134db1915e397be877ea257e62a92ce7187d06c9910e53a45a66018f79efb8cc1ae6959770323c5386f6e6d44c8778905b8d99529659aea14d52ce68ccf330f610c7c8750d391b9dc2a8b1874dac46b2ca0ce383257b0b85fc3c0c66dfa5d928da164dd4f2858198971f1508b9f34ac96628d0c2e03adbe5852f9c9fc08e336c0087026345d7f90c166c8c6a8144557654085a76c901c4d65435cac2eb42113e9ae42cb58b89b35df8f1a4d7afd0fe602e2ee293c3779d038725fcde36a46555e56f24add218458bc9357f55b8d84bd8928eed2896902e8c844a7c4533943dadad2782ac028a832672e85d1e4a030e52888b0d636dbc4537f23d6bca8f68ef23feff022c4643727ccbb0420dc820548668862154a3933ac2eabbfe63296c56fee9831d4a9dcd1c4b9b25df71fa5c268fb31c0f4f361421f45401dc883859d733515d4c3cc48179f45f83004285eafbf5dfc0cb69e7a9ab7544c6d421f19a48c7d864c66517dd8e6f19349989e752a1c08eb9b1d3ce190302baaef4bb54b914316ae9f3277d20d64b4107eb68c152569fc76ec18f242a8a7dfd85ab591c6bfa7fe1eba70e9d9b9cf0e96e059329a2de1b014e42cef1e448059f7b95df4f8fc30208344b16b488dcca083d712be295b736fffd582da0c288e956723d11a70f28fa4314cac82d2203abf204e296ab91da64d614b2e8143c74fb92b825d756db8ad9f32d45dac1181f06b2c965725649d3be1a84ceec4d5135b22643c6ca12c0ebebb577c81a80bc2dff5c255f864267f45935bf615fc59752427c2624e2ccc7db8349760ebaba546fb544eb770e8f3fd57d2dd31901c018c5b1432760e78d3fb81f33915219a35382236f7a4536db2e716134ef2e67637b71e8c52ac41369902ecca724513205fa6c9a0991834132dd596fcef", 0x1000}], 0x1, &(0x7f00000014c0)=[{0x88, 0x3a, 0x400, "79fd3dec83fb85d16af1ce905631eb48cd57edc799911892ce5c4e548f2cbb8215f133554738cef14a4745fd29a59293ad8f72b41906e51f9a4cd41aa15f1b7bdf260adf599ce9f45e2dcbe65fc857d02ad9b83d9f20867e1ccc7cdd8bcc0755902da4e71d78a7dfd479fc5b8553ba8f8e5b109526"}, {0x110, 0x10a, 0x5, "92d4f22a0f492ed0ef7a5a97f926ea97e6a92a06ebabf38b249c87a831a7015a180b85b63ea48bdc53ad9347ee5db2a540e56d96c66ff8c61e2a0b5f6676e53d47c3fff6f554285817195253907d1c6209564f5f5acde267cdf5ddd6ea3221d6af45229cc247fb70d1ea4acbe6f802fd1e8b673874637fec09be629bb9b1a00aacd1b31011afb0021a6ae51f69347f838381309cb8873a4fd23eac10e835e3af729533a86a9f7f83abdc67fbc47eac35a61e322e14e6786378e196fd908e6dbb4133df0644c27dbaf69e50d8ea400b5c9268f8184c87017cc24e14bf91a507c7768a9ac291f66e2e1c5f75ff160b6d7d1b39bc1cc32c9ed19e9832"}, {0x70, 0x10f, 0x6, "22f2823d3addb7a31de028fa6856cd3638d7c438124b7408ebb68ec93256add80ce6b3ab72c6f1624f4d4fbb633a07f906f44508d60a08b4a70a51d715421aa7486063f2b48131c303b1c7e594b1c4cb09af4bbd5485f47f9f"}, {0xe8, 0x110, 0x0, "2a22ee41fd6a78b431a65b1ef6386c22323338769864b137957e7713ddbb5ed33ac02e4a8fb60973e8de62cf119d0bc53491795df365b573bd99a3cad1f0a97146769219c2cf4bf7fd657baae022bd0cd6571d9e95c76b76a7eb31538dbaaf19fd9115aa2a662569ab86fc771801e4b89beda9d5980fc780d68fa6e59b470cd2e6b31ca416c2904f95cd78615c230f01fd79aec98f43c6ef920d6c1163fbfa8f1ce6dd2f979aea4920cd46f4e05f08121d8a0ff75903395b0821723627d321cb2366dd31d4d14387b9a3eb934cf89364d078efa47d2f57"}], 0x2f0}}, {{&(0x7f00000017c0)=@ll={0x11, 0xf5, 0x0, 0x1, 0x4, 0x6, @remote}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001840)="ff449bd8bec10dfad99fc517eb7e1b69372281e38cc4a35fa8d174b1cb20e9ffc490bfb75d99c38114c0d0c67b26d44a09f21c02153d83d6817cfd452095c075f45137e7d457243af523de87e409db0fc7bfc90cf9fe97b3587666244d7c4ce3a6fb3c20013df2dc938ef72023049797c48a020f24a6b60da6b8d75f2d", 0x7d}, {&(0x7f00000018c0)="71d23b5e960e27c903ff23810d130a17934b02062b5e6cd697df1193c304dafa7203e4c876e201dca6bade647472483b786d0dc53c80f8dc5f7371b2e36ebe05562c7c00d48ab75e1afeb06d63f9386460cbc40139bfbd284fe31937256fd7db98b91153667d8abb27afc3457706afeaac72dc9c05cb4dc2434b6c4cefc7bd447ca06e20fb7ffa330c40fd0ba3d2607da6faacf1a5f5f9e4bf11b1118cf36ad1f80055d79065d0891254433aa22d6f374e80f4f9be579fb7c61d96dacf30cddf9ce1075f1dbc85e3397431", 0xcb}, {&(0x7f00000019c0)="98723cd9e5e8aca061d485b377647c64a916e68146a104641b458b829955664ae6c497d8a1983ef8755effc6c22f97bb6848ce5a097922016115e0e17905a9bc85653e59b19d2ea8ab338f38919cde0178c08a50e4a6d0fd4f1548de55a3ac85d426f16f685f725705bee97d12fb03093ab4b220593f19c93ba7f55c04865c0ed4e46f02b27977ed8c9b16b6ec5943fb09ffe5365b6ae7d507cafb359736dc3c32682b2d8789b5c2a199bc2429710f074976d93f8048ae69c748525f324a7b8762a88d9c6eb415dbde024529ca0c03fcd699d9af1b1e27ccc81bb0e2778f4360c5ad58b2", 0xe4}, {&(0x7f0000001ac0)="dd5e64ede2cc33df205cc6da2e69fc1be3c94c8be09e68415d382f797c152e375d4688a668605fc1156198b6d7b1a3aaba9b3b734bca63e397cee0386865d365a8c3c416003364754f49ab55578ffe3102798a1ecf8c3e566b06723beb5c1eb7a5d7e392de27999a6a3179", 0x6b}, {&(0x7f0000001b40)="85f552e2a1566ebf76a6b910407f535ddda468b1a78cae02a220f9697b212e8f6a9d6433984de09d36009aa1ff3eb52f7de5cfd7e260ccbb3154b7d946b6aa6148", 0x41}, {&(0x7f0000002c80)="8f9b3a37fa6d4d129d4ae73c87c953ac9fa90cc95a3bb636a46b10f6fd6cb69e48549a899ee45743c1e3e705bcc9a64526bbc31216b83a8cb8d50a9d433ecc3af901f5962d063b6137659eb154dee5f517feca199dff1a3c5d676a060abef5988513b12844398f0a0939b6ca6fc869a50c98f82d8e30fea1b4cfe79d10ad329152c8a37403322293089262c95698a39f5a4d245c56574d69c6e18d3ff6383631d6195a3ad691e486982c49514e56d1ba40a7b4aa5b6e24", 0xb7}], 0x6, &(0x7f0000002dc0)=[{0x90, 0x1, 0x59, "33dd6e529b5eed2657276854ced23cda4fd0f7c2c6f56241c0ad3d2a250468ed07be0153c3c6ce6213c3335e100f35f268e37059472f517f47e5b8c3d9d265eed91d189f68488ff133d246c72cd615fbe60d9dee2f8d0d841969f47dffb075e010dc2714d3706955727587c567968ca81e0bf6e13d261e86054d3a82c04a"}, {0x40, 0x3a, 0x2, "ca6851afee4fda290f3b466dc009982ae5b0f04d9600f5da3182688beef4bbcc5f8e55aa3c23374c8205e449baff79d8"}, {0x68, 0x88, 0x100, "3d9bb2ec8c34d77c93b0770009bb6db8ae81f12361be4f3cc5b49fb71cfac17885ceaad3979a1fb9e58d1af7eeab60c696456c311f1e4520461debb9a754c41f697182d721c52f79b7231fb3e0cc934503"}, {0xc8, 0x113, 0x3, "d3a82f085f27995b0a0584c43d5e8979b736b31358e2c2f7d0db9ee202eb4e65a0f8da1e5bb565e6f7562a7796ea736dd01f53d38ee0ed3ee2d3d429b487a37ccf0b278df14b0c327636c1f5a37fa1d16f498bfe55a33e0dcd890ac367629d9726491d49ab11ba0ced5de7ad063ef29e26fed3d5a61bd00ab4e75a038be7e8bd273bad862eaa47d3ecd6855afd16f03cac11d6ee7881ec61726ba7e3f033da078f8f44e9cc4e76c91f1db66dbb7fe1fbe3a34b7c39"}, {0x10, 0x29, 0x9}, {0xe8, 0x1, 0x3, "1879bd195662b3b9f47a622c7e908da06c1daed0e12ac7a901f8e51791050ed5d72cb63e4dd54eea5b5b23abbc791eb469748ed2eebb554147e85ef60f5ad7ac461bdfbf0f7689033c6f10969e1dd2923cdb9e1f78351b5e3ecfdf5ca93118c98a1b4596ad47bd89eb9b2e61a52f40248068823af389f1a0ad8ea56eedce1495093c29f786c37dcb9f02e954e6ae4ef22473eb1ba7e88ed82d4bdec21c72a02191bc69d377988fff09b97691da623953d316aa87d9a4e0784316733deeabc13d862e223062fde3a335d99bb5bcb8ccec55cb0259ad8cd1"}, {0xf8, 0x3a, 0x3, "f36c4a87c082269a852626f36cfdce6d57392e06ed0588029e0604bc03b1a5e77835241dedeac6eea8ade114022d468809c6531a4c3de53c5c0550213a5dec2fc1c7ebf3197649afe6419f170bde9e87cf998180f6ebe1928aad61476f66aae940f0218365bc5ffdb4a10c78007e386a9658a473af2da5fefee8966549f1692c5b9583ac922c0a099e9676a2166237e7d03c8cb4980064deafba97d2280762eaafe23a5d133dd16c40d3a9adf676d527a4ef48293c9726fba86211ed41b95377e8b04aa520a0c58c40a4c18414427cbf73bf5422dd3888da28152cf6c15a907e4aac95fa467400"}, {0xc0, 0x103, 0x2, "e2aad3deccefcac3cae6c2ee2e02ad4b6e82fb7efc1bd8888f8e00f6b9cadeab5bcfe81ee6cc44e43137e1ff5a5bb51b5e7720a513035cd74522d4c7b89900eb041d0dda14267375d65828e7ee04cbe206dd4457f84ebb2ad5873d82acc89412b2fbc6fba8068e98b29016e12afb54f58b18627bda8e2d0ec39be221ee8d301f0d03e339191e9f1ebf0a0fd8d897b128afae0727682220602b6726f2e95d86db2c76ae733b2e02efb6277cb0ec3a64"}, {0x108, 0x11, 0x0, "dc70d67882d0f6b35484bacb37e30484a3bcf10663ffbfb33fd4960c3f002fbfd4f62f1507287fc17ede956b9d4ef29dddcd98050a6c9ce06723230889bb5c37e6dbf90084a01fece6218e718492223fc197d13ca7696e51aa6cf2b417b09510e052759867156a8a572966b64aab00a1184a87477fd267781df086bb760c9a1a532d7160a3381b001d571acf1533ce96053ec7221b661af07d4aff0e2a9210f5d444cfcd3cb46a15a38288a6edbe727e5594bb015c39bb4922438cb4bfa6fc14af98538d2391056804dc2d3413809f94c7d60566442bf0cd0008c64dffd40d3d1e60a0787bc9fb440ca57f25b04ca183df"}, {0x1010, 0x112, 0x8000, "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"}], 0x15c8}}], 0x2, 0x20004020) syz_io_uring_submit(0x0, r4, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x84, 0x40, 0x3eef86dce136787d, {0x0, r5}}, 0x98b) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x1f, 0x6, 0x80, 0x0, 0x0, 0x7fff, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8de, 0xffff}, 0x0, 0xff, 0x40, 0x1, 0x9, 0x1d75777b, 0x5, 0x0, 0xfffff001, 0x0, 0x8001}, 0xffffffffffffffff, 0x4, r0, 0x3) 23:10:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1065.587451] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1065.590692] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:10:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:10:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x80, 0x0) write$P9_RLOCK(r1, &(0x7f0000000100)={0x8}, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$cgroup_devices(r2, &(0x7f00000012c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x3) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r7, 0x0, r5, 0x0, 0x80, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001200)={0x43, 0x9, 0x1, {0x67, 0x7, 0x8000, 0x80, 0x2, 0x3, 0x0, 0x8, 0xff}}, 0x43) writev(r7, &(0x7f00000011c0)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="953c82a456477752e2374622d97f6737cda3b27e03777357c6765efdffc49b9fab02", 0x22}], 0x2) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000001280)={0x7, 0x5, 0x1000, 0xffffffff, 0x200}) splice(r4, &(0x7f00000000c0), r0, &(0x7f0000000140)=0x4, 0x100000000, 0x8) 23:10:30 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 60) [ 1065.650383] FAULT_INJECTION: forcing a failure. [ 1065.650383] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.651721] CPU: 0 PID: 10848 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1065.652516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1065.653480] Call Trace: [ 1065.653789] dump_stack+0x107/0x167 [ 1065.654211] should_fail.cold+0x5/0xa [ 1065.654655] ? create_object.isra.0+0x3a/0xa30 [ 1065.655184] should_failslab+0x5/0x20 [ 1065.655628] kmem_cache_alloc+0x5b/0x310 23:10:30 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f0000000040)={&(0x7f0000000000)=""/13, 0xd}) [ 1065.656102] ? mark_held_locks+0x9e/0xe0 [ 1065.656686] create_object.isra.0+0x3a/0xa30 [ 1065.657206] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1065.657791] kmem_cache_alloc+0x159/0x310 [ 1065.658274] xas_alloc+0x336/0x440 [ 1065.658685] xas_create+0x34a/0x10d0 [ 1065.659120] ? kernel_text_address+0xf2/0x120 [ 1065.659646] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1065.660271] xas_store+0x8c/0x1c40 [ 1065.660701] __xa_store+0x164/0x2d0 [ 1065.661132] ? xa_delete_node+0x280/0x280 [ 1065.661626] ? trace_hardirqs_on+0x5b/0x180 [ 1065.662137] xa_store+0x31/0x50 [ 1065.662531] __io_uring_add_tctx_node+0x1cf/0x520 [ 1065.663097] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1065.663717] ? alloc_fd+0x2e7/0x670 [ 1065.664150] io_uring_setup+0x1fbb/0x2980 [ 1065.664643] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1065.665252] ? wait_for_completion_io+0x270/0x270 [ 1065.665835] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1065.666453] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1065.667054] do_syscall_64+0x33/0x40 [ 1065.667486] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1065.668077] RIP: 0033:0x7ff283a12b19 [ 1065.668507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1065.670633] RSP: 002b:00007ff280f88108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1065.671528] RAX: ffffffffffffffda RBX: 00007ff283b25f60 RCX: 00007ff283a12b19 [ 1065.672357] RDX: 0000000020ffc000 RSI: 00000000200002c0 RDI: 0000000000007d04 [ 1065.673188] RBP: 00000000200002c0 R08: 0000000020000140 R09: 0000000020000140 [ 1065.674018] R10: 0000000020000200 R11: 0000000000000202 R12: 0000000020000140 [ 1065.674846] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:10:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:10:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4800, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:10:44 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 61) 23:10:44 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_complete(0x0) write$9p(r1, &(0x7f00000001c0)="f4be7c8ad6ceee9a05b98a816694b986754b322e3c6a0ff96863209e9f75da23eaf5a6760274281b2e5fbb6906c811784dea720a2a3f89209543cd631b4147029aebe92ede3361b6480ba8cdfd72d4854cb265bab495a0d54367685eeb2a79c14809d6cc99d576285371a38727b773635167c916376e7491d0f0374eb999079c5fc490a6431f9576f9df816d0e3bd545c2296001a9bb02ef7dad4af2a8b561f448c2ec2eb24c1a473d040eefd5bed2fb445be57ca561234d944d8faebfa719f6a7371466cbeddb56db217a4379141d4face1441f392d5f7ed6da07838b8f675cd8c78b33216eb043b1673f715d", 0xed) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x80c00, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r2, 0x0, r0, 0x0, 0x5, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) splice(r0, &(0x7f00000000c0)=0x9, r3, &(0x7f0000000140)=0x1000, 0x10000, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x80, 0x0) write$P9_RXATTRWALK(r6, &(0x7f00000002c0)={0xf, 0x1f, 0x2, 0xffff}, 0xf) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x80, 0x0) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x7, 0x6d, 0x2}, 0x7) 23:10:44 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xc, 0x0, r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x2, 0x2000, @fd=r0, 0x0, &(0x7f0000000340)="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", 0x1000, 0x15, 0x1, {0x0, r2}}, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000080)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xc, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x1, 0x3, 0x0, 0x81, 0x2, 0x1, {0x0, r7}}, 0x8) splice(r5, 0x0, r4, 0x0, 0x80, 0x0) 23:10:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:10:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = fsmount(r0, 0x1, 0xf6) writev(r1, &(0x7f0000001700)=[{&(0x7f0000000440)="db703856de5c20bb180a296cdf7d595dcb22e2a1733df1376ee80fc64d3fb0cfde695cad82748bae1b0f25f471b6c1d96421a6fcff20e621ce72ea089d092565d5e3fe5d54666830963a691afc50a2d8b111918257c4696caec4d75ae6d61e8dd3e2fcd39aa1bf09e0fa6572c0b33872017958df", 0x74}, {&(0x7f00000016c0)="a2a614a3d9f0ceb854751938fb1a1e5b6eae3213c0a8778b36801e2cacbac2f1ab4a8b4cac772a8a56a9", 0x2a}], 0x2) execveat(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) stat(&(0x7f0000001740)='./file1\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/6, 0x6}, {&(0x7f0000001500)=""/220, 0xdc}], 0x3, 0xfffffffb, 0x0) setreuid(0x0, r6) stat(&(0x7f0000000180)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) r8 = getegid() close_range(r2, r4, 0x2) setresgid(0x0, 0x0, r8) r9 = getegid() setresgid(0x0, 0x0, r9) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/249, 0xf9}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/23, 0x17}], 0x3, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x2142) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000001780)=ANY=[@ANYBLOB="02000000010004000000000002000300", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES16=r10, @ANYBLOB="02000b00", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32=0xee01, @ANYBLOB="bf652df077427fb98084e50cb1353e00", @ANYRES32=0xee01, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB="080d026f6426b24305000000001400000000000000009bb5f5cd948e1fbebfd630", @ANYRES32=r11, @ANYBLOB="10000300000000002000070000000000"], 0x6c, 0x4) 23:10:44 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x44, 0xc5, 0x0, 0xb5, 0x0, 0x40, 0x10, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc0000000, 0x0, @perf_config_ext={0x1, 0xd8}, 0x150, 0x2, 0x5, 0x3, 0x100000000, 0x9, 0xff55, 0x0, 0x40, 0x0, 0xea1}, 0xffffffffffffffff, 0x7, r0, 0xa) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x80, 0x0) io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x3ff, r3, &(0x7f00000000c0)="7dbc41a109375261cd4026dfa91384c2ee181aafffccbe10341cf848987e3ead33b671a9b290073fdde4d999042ebe8848a2b8e9d3850850ed985ec250cff9a871099fa954a78172fc63c0465a028198143913380fd096a8141988aa6c67015af4eb27f70e4e22", 0x67, 0x6, 0x0, 0x1, r6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x4, r2, &(0x7f00000004c0)="3dbd988f0f387b1b2b125d5c004aba8e6ae47a63b5a6c0fcabc7c666386bfb3026be6f40fdfd50a6d8ddf90e9641d0b7528bd67585c04854ea09e6188ea78ef45442c90371d99d2d1595de3b12ce3b734e65aae36644a98e389354ddb62ecbf89aae8b3934078bf6579940fa87050ded5bb94fc4833af410d7ffc198dd3ea9c3de708df9f5babeecba997ec5762f4b229324a6bf0270a44252158d1064c8f9f63d9bb4326c66882793f572688fc4e80bacdb8779d6c89156cedacd9379e85c75814cd03f6c413c39ee25b4f5c6e8a8ca0361748056a6994a5d4f1ea5c1f7561a7dd655a25dd608a15a5d1b4640192718516a9ca801894b02aba3526d407cfe020691e01808d977e45e37b3be1896f568859b52050ade25ff084a59bb3dbd1933c30a4474ac7bd39057366fb31a8d687fd2838fbeb23f3a43dadc2e052ad465c0b3a031b2df897d35c735f560bd4077329c8cdb0441e0386cf4aea8dee06606efc8a6981cb76fa5ecb51603f6ce85cd51cb429bc5f50ab17890312616702aa44b61b03810c03832d7d544849cd759b4eadd54ed08eac42aa254d74472daa350d405138cf98acac6364e69b79bab2149b7a09bf5456b3476f1686039cc357f2d9e7c5d79afce101d3caf76e93182eb46eec3e9ace7f46b662947b802ba1a951cf76be6fb6160f4c20779a4f91d1d8ebce019a184562bd1753cf10b101ce3d193a022b7c890f6bffccb022f614ade30a517018302cd6e5ac290b43e1f5ba00b40d5dcf17c923fbf2886450fe569945786da71c049a620fdcdea12ce123b46f47a2fdbf1721a9d0421dfddcf4d66cc43fdfbbe2390c3d5f9e41094e4a2d1465a16b4f0351cea3dbcfc637f520ba8299bf570d4430a4ec3786c50b47b7c3b61cab5f40f3a8399c345b189568a3fbd5741e1f7d63725bed1098c1de1bc5c1244654e092da7585fe288f240373212574015169f3ab0f6f23d3358ffc9a2466dc9771ae4652bd5294cf72acd8ba95bc1d1426c8857cc21fceac220f53c700ec7702cae245f51e3a1a1b25721c3c57e78ea65b8af1b11a5fdd20437141c06b45de51785f97cced4f1bcb4f908326473a0e1cbdd407ba9309e598815cba6d0c3db333ba52664d2c26f0fab94b1b56934e54349d644365171d238d80a85d564b5a761eb7104b1c762a67c299e28482d1452546d0dcc99789a74a4e807cc83303c8de2ca46038d9e3b989d4cde434847a2ba683cc29c50433a27c963bb04aed80e486543cfb87a19b7b7c99709c486232e96c9ca4988779ff936d8fe898c66848f6a92bd01949708ea04474e3e5453d61d1a53bb97ea9508ac993f1af5e7efe011f3bd4605df46d3cdae62e3200d15cd9915f297c9e52601f1ca34fe6fbbffb2c0cbeb768ecd3990dce2351c9af639c10de52025168c794c5ace66cc55acf80737581b3b3abdc3a80b30c8983a857ed4a2607e2fcf25957113402533a661696b30a91f0e6a5a9df459feae77c4c441900246c67a29691010b9b6da75d4db69b7234e7b5f40412a31b3d2c7fae0842ace81d3361ecb8aa5361d8d77f2669033594af824e80d2f8361099033a1b40afce57b1bbe87e248868f6caaf35fdd938267a343c6a8119f8dccd57ae6f1e901149441a29fec1e4178c3bfd8b497821c92995e758b43f9257aeab9963af9dd665bb3ea5cad8fb9bfb828cbc0fe2c5fd338f6a8647569708820b1f3ea553b7e7439fa883a8eb2b6da2350219027cf34d4899209fadfa88bd820aa9bb510e687c5463f6f170dcc6d64055e4eaeecc23a7bb396d3514b6e2e4434d1ab3c56590c8ddf0b5f786e32da746eb99b486420970427c5416cd8991335516a9b60375001310bc42c02ec8c97c226bff143c1cf6c013450577272759e88baf4b25a69329798a1e8300eb4330f5c53d02f85d6fe0ffd8bdf2c67ebbb1747587a27da4170fb98f4a7f92bc4012888d9b4ff6218486c5bdbc0c0ae5664ae461a48fe7b55871092fcb64de68c9cec47f0ff9f0d53f177be65ca3ba38d11f0cf08da693c0153bfca49a6ecb3e39810929d145f5e7f42c661979841cc26f492465ef3c0680cdc6fa81adbb011a03806c1cb5bd8bc4d11402c4c4842ed7e5e6a31f3db07eb283094bbf7b829d2c52830037719e073b39972ed49d5aa01d50e61056cf06396fd2b178d52d0b0260de259c34ce06beb574b40fb6df0fe1cbf741221483b67fe2c842eadd2c0da3303a17e3a374335d05ea60c00e3cb9018797a59d05203a226605bc6a6c241367797890218d514c21827bede909fd8404c49eff1d2045e00f71e11838dd12d3fab96bbe1adb96cba4d0de8d26404255018392e5cc67d32b3aedadd0dadebdd0787287fcdbf57d4ffd9f12a637a4a2005c845cdde1779a3d167083375a18de79d71c1599c96062568e12e68e3f223939f109bf1c894f3a6a592ff344cc24612b30054093c18d5ca9eb4c8ea6ff210bd1e77b9b2d7948ea0d5bfae371254c08eeae2da9c9fe3f4b2b3bc82aa4c2654562db416be4daaed31b01b6d9100cda1343258908ecd192e38b061c25dfe5083fb3426907e6b7a753fcac126d6bf7af5f52b8dce764e357169cc8ecd6058b73fdbbbb9db8e7a9ee4d2f945b6e66c524052e39de5e7df5f2fa1b18ee99ad7793c969381e6c5cd36ea81511871334cbd9bfe51af7f2363608ba0a76418b616ab52129a1844a9f0331855cdf19e0e19dd2931283da5d0f082856f76757e47df41fd424f7afdc70888b3092e680b88c204627a2eb9fc552a31e7a929a86617300080b94f892dd8a0f5102dffaa512a00d89a1dbe6312c37aa148f309bedb6c8f288306c00964034f5661d445f33cd87c6ca85da4ab13a6fac8932eae28b025f6781efc3178f4ca6ca7be5eefb50f427496cd4009114d2651ebbf4c90305d33f29866e200594c23d42b0deea1bd3e3205192b340cd55e973f37d54efc18d267030cc238e3a9ec39a741117955f4bf611b507068ad80e10c91f2b7c546addf28d3b628ea54b8ac46ed4c509337aeb90028294aedbda16440891a17556ca964b22fb9ae9a1b10239144ac9bf39ed3e94763e86c2c469dbac2e427774d252c98aa0ffca8ba49a2b7ffa143852795d6d045eda28334bae703ffe0dd9d75225527e91862dda3c677a9ed272f90e8a047baeaa5022ec065e5440e865a61cb7b0d92248f04fdeb36f8916e8af7d4fca2e39ce9197a058a8ee98932c2a72a60ad361da052c78cae26ea79f2bd736b6595b65c25c68360bc6ef2d1906172cd263f1e1df33598296c51a40216ba449264df9064aaf638aa19e35562883caaf6aba369a7ae2415d74aabc687362bced8ab0dab4fe5bbc49aad1bbe458b1d9cf4c435d89e0c8870a79e1dc33f2fb77f2468e0b33ee0f674ea5a42e5467a601b8401f5fa0bb850ab247e134d1fcfbaff5ae2169380242d24afd928ea8671c7b61568826c3441ffa3c327e6222c3560c8fa7093db1205fd504f8c582e8a965ed1e537b67f71a8bf2a3916b5a0acd136ca5eef8e948973a7b4612f52469b0c4db3cf374cb9fdd195f815c8d8a98f34429eaf2fbd191bab01b9352628dbc982f010664a71202b7b2a17bc55048bb091bb76b059c9b8bfe0a4b541bb68233fa324a51c950efcce8d26473daf459bcb728572a0ccd191481ecbcfb5e8cf63687cb703389b23bbfcf3d27a3f6b234759b2df9d7e3b9fdf41241bcd737bf6bf6c81febffc86d3bed0455ddac0cb261089b233dbfae37a441a13a255b1b0af6bea901b76cbb4993ee731785d57ebb38e081ba66d0a26be332c11d17ce0315471e55f06904d57fbe9fa8330f05d928314242eb2d92f6b5d41ce50926f0c71a8c72ebe27188e401d7204e6bb253ba444047577e2af641de6708099d10917f6b819e136eb4e20cb99f246b82c554e7c3f75d7e0b8e9a66d0b350061ba01255b65936c735cb9ebd45c55c42ba8aa737fc8dfda6ac67638fc214266181eae4b773c088b916e58ebd2aff0a2d74282580833111166d2b48dbddcc9e6738f5407a29489aa51cce73d1bd963b5d822c9baebe061d1f2748c00da7fbfa4156ed804ce55ac7a1b590afe2b71bd7f94eba77b9a656fb22af56a24923c30e497c9be962ebef7a0ea2400013a0198384fabccc20255b181a4d5addbab45fde8de6a23763a41161744c59c19ae8f66e25027a8c78cf7dba7102edf3b5b024bceb647cb9d7951c99f41caa79d6543fc4e56c0390d2a35e7f7e53d4c816ef35c53fa5ba6807d898b7ed59367b05917f228d145f6882b44d7e89b354631375e191774dddc2f7666c6e69f97ce5228d9407700057e290b7d92c8cc3c562a7fb06e5bc17cf836cbad5376393cabaeee7c92ea254357c40018e9d9c25bcd4779663964498ba3b1aa4ecf1e5f19a1ecd977da9a7c6ca41de04c24beecef7b17fa35f50fb79158f0e2c6aae4c203dbd771fbaa3bcf2d2a2d095a053e35910a63c7e4309d244a2d63e3bda413d6cf11ff338e0abd0ade066ddbca8969265cc4cdd3cc4ab6031e61b59265be2e39a80d48fe6741f1ba58aa8f9a829ac8f6e244d7b98dd18bfd1d9a24be4b635da6cf2a650f19d3902c900896c389da7bd31cc58b18aa5e0ff1ac71eabd961f78135c09011aacdb8dcb57b391340c92a625439d8d6f8d4303f94d2528dc9c2937ef2b839d2c21599c47643b6fb28a8af49978c739b06aa790096f11efd2d3ac50f0e5ca9647f1b45517e7b79c7bd022ca59e8a0c8945efc2bbc2e5b4d7c1af920c5117c98e16cadf1919eda20f11f26afd749bf0ef80f773c547e91008373b8981ba6db4f7350f921b76105d8b8c2a015aa393bd8f8b462c3597d79a16a11e696ac8d7ddc13b88608dfa7a23596f5ce0be58b5ccfdcfc747e4d5fe5a9026574da360d9ae0a7368223d9cdd94d96f336b1a2c6a8e8c8bd0b575f935d78e447fcb62100e07049760d6677a59935892dfd8e5210f4bca23ffd6a5aea273754bb29c49fd31eff8cb1e2adbbbd6e743f6f17c44dc037b5461894baf7eeceeed34a24d76cc15d4b1dd670932aa215b11fb8443965ce67de9f77f00fe41201b4c07b2accbf40162c7dacb8fe51427d3c24b9cb928e3c66398aa345afb0bd673526064ef85ec199f9e08687cd70b3b78691540395550b42b4f7fa8321cf6dcd5087b806c647a69be8e838877841d2a79c7e153c84d571d05affe1abbb9db098d1860b39d95156e729548a9f8706b0427ab953eba8f27ad5f7434c1ccf9483584d8465132e2487773646b796f0eaf17cc6f5262461cab12494169d463ab532bdbc1340d8f9b47e9d1ae472f9db848ac067d2e98532472b64a7547a1332b0a4087cf32e41d45d6310274aadfc084960580301dd254f2164a1f1ccd767e6cc1d7200d9fe9d516c5b09351c87094f13a27d69706d121ab9b19916d9ee616db1c5c6d3fd8315eb09903476f872081c9feca9c53e9af6fde884cb2fd6dbbba9aac32c3ad24332deee973d81e566311006644f9b41b8ad743bfc4e0887238a811b95db9323bb8cf2c1d9a96fd55097cb850adc7fdb12ad9f3f0edf4b5390c990e853c279702a662c6aa008184cb437c3a2554c13a1a9d692c2f11f7b8851b55cb662febf94b373b1b96f13b663f03ead6e6ea34a6caa15ea77e4967045bef3ea6e7bf20039adbf3f08a50197e50fbefd9cba0a767fb4558232ef5695cf46365258fe2c2a79b88032bfc5087860db83f3d953da9e72c239275fba33ec23bf2b49672f0a5a6876b85b5dbb4548284ffa41b3a56a09f410af40181543", 0x1000, 0x0, 0x0, 0x0, r1}]) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r0, r4, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r9, 0x0, r7, 0x0, 0x80, 0x0) openat(r9, &(0x7f0000000080)='./file0\x00', 0xa80, 0x30) [ 1079.152421] FAULT_INJECTION: forcing a failure. [ 1079.152421] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.154322] CPU: 1 PID: 10967 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1079.155317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1079.156042] validate_nla: 2 callbacks suppressed [ 1079.156058] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1079.156469] Call Trace: [ 1079.159108] dump_stack+0x107/0x167 [ 1079.159625] should_fail.cold+0x5/0xa [ 1079.160158] ? vm_area_alloc+0x1c/0x110 [ 1079.160711] should_failslab+0x5/0x20 [ 1079.161247] kmem_cache_alloc+0x5b/0x310 [ 1079.161816] vm_area_alloc+0x1c/0x110 [ 1079.162342] mmap_region+0x982/0x1500 [ 1079.162891] do_mmap+0x868/0x1370 [ 1079.163379] vm_mmap_pgoff+0x198/0x1f0 [ 1079.163926] ? randomize_page+0xb0/0xb0 [ 1079.164493] ksys_mmap_pgoff+0x41c/0x560 [ 1079.165073] ? find_mergeable_anon_vma+0x250/0x250 [ 1079.165783] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1079.166540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1079.167263] do_syscall_64+0x33/0x40 [ 1079.167796] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1079.168509] RIP: 0033:0x7ff283a12b62 [ 1079.169059] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1079.171656] RSP: 002b:00007ff280f880f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1079.172713] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff283a12b62 [ 1079.173719] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 1079.174721] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 1079.175715] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1079.176711] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 1079.179558] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1079.185342] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1079.194486] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:10:44 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 62) [ 1079.239187] FAULT_INJECTION: forcing a failure. [ 1079.239187] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.240939] CPU: 1 PID: 11002 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1079.241922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1079.243096] Call Trace: [ 1079.243472] dump_stack+0x107/0x167 [ 1079.243987] should_fail.cold+0x5/0xa [ 1079.244523] ? vm_area_alloc+0x1c/0x110 [ 1079.245089] should_failslab+0x5/0x20 [ 1079.245662] kmem_cache_alloc+0x5b/0x310 [ 1079.246241] vm_area_alloc+0x1c/0x110 [ 1079.246788] mmap_region+0x982/0x1500 [ 1079.247332] do_mmap+0x868/0x1370 [ 1079.247822] vm_mmap_pgoff+0x198/0x1f0 [ 1079.248387] ? randomize_page+0xb0/0xb0 [ 1079.248959] ksys_mmap_pgoff+0x41c/0x560 [ 1079.249549] ? find_mergeable_anon_vma+0x250/0x250 [ 1079.250237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1079.250997] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1079.251716] do_syscall_64+0x33/0x40 [ 1079.252253] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1079.252973] RIP: 0033:0x7ff283a12b62 [ 1079.253516] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1079.256092] RSP: 002b:00007ff280f880f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1079.257195] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff283a12b62 [ 1079.258223] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 1079.259244] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 1079.260276] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1079.261422] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:10:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:10:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:10:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0xfffffffffffffff9, 0x4}) 23:10:44 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 63) 23:10:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) [ 1079.361973] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1079.368326] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1079.371142] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1079.375756] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1079.378766] FAULT_INJECTION: forcing a failure. [ 1079.378766] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.380115] CPU: 1 PID: 11098 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1079.380926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1079.381888] Call Trace: [ 1079.382196] dump_stack+0x107/0x167 [ 1079.382621] should_fail.cold+0x5/0xa [ 1079.383069] ? create_object.isra.0+0x3a/0xa30 [ 1079.383603] should_failslab+0x5/0x20 [ 1079.384048] kmem_cache_alloc+0x5b/0x310 [ 1079.384526] create_object.isra.0+0x3a/0xa30 [ 1079.385047] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1079.385652] kmem_cache_alloc+0x159/0x310 [ 1079.386145] vm_area_alloc+0x1c/0x110 [ 1079.386586] mmap_region+0x982/0x1500 [ 1079.387047] do_mmap+0x868/0x1370 [ 1079.387455] vm_mmap_pgoff+0x198/0x1f0 [ 1079.387912] ? randomize_page+0xb0/0xb0 [ 1079.388383] ksys_mmap_pgoff+0x41c/0x560 [ 1079.388854] ? find_mergeable_anon_vma+0x250/0x250 [ 1079.389442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1079.390056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1079.390676] do_syscall_64+0x33/0x40 [ 1079.391109] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1079.391699] RIP: 0033:0x7ff283a12b62 [ 1079.392133] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1079.394270] RSP: 002b:00007ff280f880f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1079.395151] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff283a12b62 [ 1079.395977] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 1079.396815] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 1079.397645] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1079.398462] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 23:11:02 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x902, 0x1) write$P9_RXATTRWALK(r0, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0xfffffffffffffe01}, 0xf) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/129, 0x81}, {&(0x7f00000001c0)=""/22, 0x16}], 0x2) [ 1097.897803] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:11:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8}, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x8000, 0x4, 0x800, 0x1000}) 23:11:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:11:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:11:02 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x132, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (fail_nth: 64) 23:11:02 executing program 6: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_xfrm(r1, &(0x7f0000001680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f00000015c0)=@newpolicy={0xb8, 0x13, 0x100, 0x70bd29, 0x25dfdbfc, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1e, 0x0, r2}, {0x100, 0x3f, 0x100000000, 0x82, 0x8, 0x1ff, 0x28000000, 0x4}, {0x2, 0x5, 0x6, 0x6dd}, 0x24f, 0x6e6bb3, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x536cc85f05fc0fc9}, 0x8001) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x100000001, 0x5, &(0x7f0000001380)=[{&(0x7f00000014c0)="0df9f9c92c50f8ee73cd40ffcc9e39a8afb31d5341de5e07c536e508c0ed76a2929213a0f1a0753eabc390cdd67a6130ffefd7bac16b7027713db67aa2301ee3288cc772de72b9c23f01b9a511c0c8b8ff251cebf33f814fe7da73719dceacd8d05fd8cbdc8ae74736f8bfe8a30afaa432e6599c6ce8b7b3279f1c72dd37c90912c9982e3fee25345ad96712e77801de57d4dfc334f7aaee4ed6f6452c6146976faa32ca99c796fc55e501349d9884bf0743c49d4b79867dfffca6d55d285c4fef8d6c0a36cc23bf5c23f4ed79b6a40899a9ab48692b121c9b85", 0xda, 0x1}, {&(0x7f00000000c0)="f3bbe36128a2645cbf8c10dedf3ab3c0477cf83b3871e1dcf40e08cef126e1ae8afd39c9050113", 0x27, 0x100000001}, {&(0x7f0000000240)="7fafbaa391719eea72ee26209a1123b04cbc42b817c15c65199d4d385627dfbc8ee3b579a2b106c00388fa3a843e398ae5c6f648944e6dfa0bde7683832a8356e84000e4e0ec12a1d40ce348b7d56b92eff3d4406958b94b01f9cfdf4b00c09978d763015da914f4f0bab094ee954750aa11e4f316c46431fc9174b177eff47aebccf6d0b2cc905648b94c933f30e69b59d06e448e8690128aeba1b743fc4ca1bd6a64dc9b68328d449a1fc4068f4978b93d1d7958e758bb7b5a0b61f997c076a2d13260df80847dcf7e67c1e277", 0xce, 0xffff}, {&(0x7f0000000340)="db5a5b80596350c26beb810f9d5fd8d3bf7f6116bc6e3b1fad48f6e4c62386c49fd794697139dece1f4301642f97eae189", 0x31, 0x6}, {&(0x7f0000000380)="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", 0x1000, 0x1}], 0x204d010, &(0x7f0000001480)={[{@huge_advise}, {@huge_within_size}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}]}) openat(r3, &(0x7f0000001440)='./file1\x00', 0x50840, 0x183) 23:11:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6800, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:11:02 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1097.905747] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1097.910209] FAULT_INJECTION: forcing a failure. [ 1097.910209] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.912860] CPU: 1 PID: 11123 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1097.914475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.916392] Call Trace: [ 1097.917005] dump_stack+0x107/0x167 [ 1097.917857] should_fail.cold+0x5/0xa [ 1097.918740] ? ptlock_alloc+0x1d/0x70 [ 1097.919615] should_failslab+0x5/0x20 [ 1097.920493] kmem_cache_alloc+0x5b/0x310 [ 1097.921443] ptlock_alloc+0x1d/0x70 [ 1097.922284] pte_alloc_one+0x68/0x1a0 [ 1097.923163] __pte_alloc+0x1d/0x330 [ 1097.924010] remap_pfn_range_internal+0x9a3/0xf60 [ 1097.925158] ? lookup_memtype+0x5b/0x200 [ 1097.926282] ? apply_to_existing_page_range+0x40/0x40 [ 1097.927657] remap_pfn_range+0xcd/0x160 [ 1097.928580] ? remap_pfn_range_notrack+0x70/0x70 [ 1097.929685] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1097.930883] io_uring_mmap+0x398/0x530 [ 1097.931787] mmap_file+0x5e/0xe0 [ 1097.932565] mmap_region+0xc4d/0x1500 [ 1097.933465] do_mmap+0x868/0x1370 [ 1097.934276] vm_mmap_pgoff+0x198/0x1f0 [ 1097.935177] ? randomize_page+0xb0/0xb0 [ 1097.936110] ksys_mmap_pgoff+0x41c/0x560 [ 1097.937047] ? find_mergeable_anon_vma+0x250/0x250 [ 1097.938204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.939420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.940620] do_syscall_64+0x33/0x40 [ 1097.941487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1097.942668] RIP: 0033:0x7ff283a12b62 [ 1097.943542] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1097.947796] RSP: 002b:00007ff280f880f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1097.949556] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff283a12b62 [ 1097.951214] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 1097.952858] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 1097.954510] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1097.956153] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 1097.962569] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1097.966868] ------------[ cut here ]------------ [ 1097.967738] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1097.968134] WARNING: CPU: 0 PID: 11123 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1097.973193] loop6: detected capacity change from 0 to 135266304 [ 1097.975238] Modules linked in: [ 1097.976034] CPU: 0 PID: 11123 Comm: syz-executor.0 Not tainted 5.10.258 #1 [ 1097.979162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.985248] RIP: 0010:get_pat_info+0x216/0x270 [ 1097.986332] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 21 8b 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 0a 8b 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 c5 ae 5a 00 e9 [ 1097.990519] RSP: 0018:ffff888047fe7890 EFLAGS: 00010212 [ 1097.991767] RAX: 0000000000013227 RBX: ffff888041ef3c00 RCX: ffffc9000380f000 [ 1097.993421] RDX: 0000000000040000 RSI: ffffffff811255f6 RDI: 0000000000000007 [ 1097.995068] RBP: ffff888047fe7948 R08: 0000000000000000 R09: ffff888047fe7818 [ 1097.996713] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1097.998410] R13: 1ffff11008ffcf12 R14: 0000000000000000 R15: ffff888041ef3c50 [ 1098.000068] FS: 00007ff280f88700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1098.001945] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1098.003299] CR2: 0000000020002040 CR3: 00000000417a0000 CR4: 0000000000350ef0 [ 1098.004958] Call Trace: [ 1098.005570] ? pgprot_writethrough+0xc0/0xc0 [ 1098.006606] ? finish_task_switch+0x1a4/0x5d0 [ 1098.007673] untrack_pfn+0xdc/0x240 [ 1098.008542] ? track_pfn_insert+0x150/0x150 [ 1098.009585] ? lock_downgrade+0x6d0/0x6d0 [ 1098.010567] ? uprobe_munmap+0x1c/0x670 [ 1098.011508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1098.012746] unmap_single_vma+0x1bc/0x300 [ 1098.013742] zap_page_range_single+0x2ce/0x450 [ 1098.014834] ? unmap_single_vma+0x300/0x300 [ 1098.015854] ? remap_pfn_range_internal+0xc56/0xf60 [ 1098.017035] ? lookup_memtype+0x5b/0x200 [ 1098.018030] ? apply_to_existing_page_range+0x40/0x40 [ 1098.019254] remap_pfn_range+0x139/0x160 [ 1098.020228] ? remap_pfn_range_notrack+0x70/0x70 [ 1098.021360] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1098.022592] io_uring_mmap+0x398/0x530 [ 1098.023525] mmap_file+0x5e/0xe0 [ 1098.024337] mmap_region+0xc4d/0x1500 [ 1098.025274] do_mmap+0x868/0x1370 [ 1098.026118] vm_mmap_pgoff+0x198/0x1f0 [ 1098.027048] ? randomize_page+0xb0/0xb0 [ 1098.028010] ksys_mmap_pgoff+0x41c/0x560 [ 1098.028974] ? find_mergeable_anon_vma+0x250/0x250 [ 1098.030157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1098.031395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1098.032610] do_syscall_64+0x33/0x40 [ 1098.033513] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1098.034712] RIP: 0033:0x7ff283a12b62 [ 1098.035596] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1098.039820] RSP: 002b:00007ff280f880f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1098.041601] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff283a12b62 [ 1098.043266] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 [ 1098.044937] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 1098.046586] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000140 [ 1098.048215] R13: 0000000020ffc000 R14: 0000000020000200 R15: 0000000020ffe000 [ 1098.049917] irq event stamp: 1669 [ 1098.050708] hardirqs last enabled at (1677): [] console_unlock+0x92d/0xb40 [ 1098.052696] hardirqs last disabled at (1688): [] console_unlock+0x839/0xb40 [ 1098.054680] softirqs last enabled at (1134): [] asm_call_irq_on_stack+0x12/0x20 [ 1098.056743] softirqs last disabled at (1019): [] asm_call_irq_on_stack+0x12/0x20 [ 1098.058821] ---[ end trace d4bedccf4b7f3888 ]--- 23:11:03 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x20, 0x5, 0x85, 0x8, 0x0, 0xa48, 0x20, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_config_ext={0x9, 0xffffffffffff8000}, 0x100, 0xfffffffffffff801, 0x4, 0x8, 0x7ff, 0x2, 0xeb76, 0x0, 0x41e}, r1, 0x5, 0xffffffffffffffff, 0x3) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) 23:11:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) [ 1098.137307] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1098.149614] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 23:11:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6c00, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:11:03 executing program 6: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x400) [ 1098.215135] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1098.221283] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 23:11:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:11:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xa, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 23:11:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7400, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}]}, 0x28}}, 0x0) 23:11:03 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) splice(r1, &(0x7f00000000c0)=0x401, r0, &(0x7f0000000100)=0x200, 0x8, 0x9) splice(r1, 0x0, r0, 0x0, 0x80, 0x0) [ 1098.324474] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1098.331321] netlink: 'syz-executor.3': attribute type 16 has an invalid length. VM DIAGNOSIS: 23:11:03 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822e967c RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff888047fe7278 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3f495 R14=fffffbfff0f3f44a R15=dffffc0000000000 RIP=ffffffff822e96d0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff280f88700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020002040 CR3=00000000417a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88801e173dc8 RCX=ffffffff8126fc27 RDX=1ffff11003c2e7c2 RSI=0000000000000008 RDI=ffffffff86874a78 RBP=ffffffff868749c0 RSP=ffff88803a35f498 R8 =0000000000000000 R9 =ffffffff868736a7 R10=fffffbfff0d0e6d4 R11=0000000000000001 R12=ffff88801e173480 R13=ffff88801e173df0 R14=0000000000000002 R15=0000000000020000 RIP=ffffffff8126fc8a RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc5ebc57000 CR3=00000000401e8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000