ncryption failed: -22 [ 2680.997819] ieee802154 phy0 wpan0: encryption failed: -22 [ 2680.999692] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.001702] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.003747] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.005932] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.007968] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.009636] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.011649] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.013561] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.015647] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.017517] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.019819] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.023627] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.025205] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.027139] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.029072] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.031823] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.034006] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.036050] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.037952] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.039947] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.041991] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.043976] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.045660] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.047613] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.049238] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.051204] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.053105] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.055134] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.057039] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.059004] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.060967] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.063034] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.065010] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.066925] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.068997] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.070625] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.072625] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.074236] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.076143] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.078127] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.080042] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.081950] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.083996] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.085625] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.087621] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.089211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.091141] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.093060] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.094976] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.096946] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.099023] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.100629] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.102614] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.104204] ieee802154 phy0 wpan0: encryption failed: -22 [ 2681.105738] ieee802154 phy0 wpan0: encryption failed: -22 10:57:01 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x22) inotify_rm_watch(r1, r3) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@dev, @in6=@dev}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) r6 = dup(r2) r7 = eventfd2(0x7, 0x80000) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) 10:57:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4890) 10:57:01 executing program 4: ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)=ANY=[]) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x1, 0x7}, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_perm_addr}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x100}, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd29, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x400000000000000) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 10:57:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:01 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 11) 10:57:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f00000011c0)=[{&(0x7f0000000080)="ca", 0x1}], 0x1) r2 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r1) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r4, &(0x7f0000000080)=""/89, 0x59) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) fdatasync(r1) 10:57:01 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe2(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x0) read$rfkill(r1, 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000340)) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x426240) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a31ba8fe5f6e76e6cfefc2603f0aa4383c8d214db38301f0fecba6f1c33286320695f23f30c5be01969040bdc067f3c6bfe9db6aed1fde143d6f3cd6014a9a4d9158d53be92f2685d573462294a85f50f77418e488cbdd24470a0e8d0b378ddeddf88d20c163755181d22ee0823f3b7fe1260aa87e8185149a7853835b4fea998ceebe464b4db15084fa0749072a9439b09388730293b612205b7839ee28e478d2d3d128d6776385217553589773d03635d978862984104a3641797f31a4640decb8c62d21ce0e44d4a"], 0x7b) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x0) read$rfkill(r3, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x7fff, "f8dc1f", 0x0, 0x6}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x20000880}, 0x4004040) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syncfs(r4) 10:57:01 executing program 5: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r1, 0x0, 0x70bd25, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002bbd7000fedbdf25100000003767d208e956b6bf657673696d0000000f0002006e657464657673696d3000000867cb0003000000060011008662aed00b40ca68f512ecb0c50000000008001300008f624042d3140000000000"], 0x54}, 0x1, 0x0, 0x0, 0x884}, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4f47670150397101}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x95}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x8000) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r7, 0x541c, &(0x7f0000000400)={0x5}) [ 2694.180870] FAULT_INJECTION: forcing a failure. [ 2694.180870] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.182617] CPU: 0 PID: 15187 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2694.183605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.184698] Call Trace: [ 2694.185066] dump_stack+0x107/0x167 [ 2694.185549] should_fail.cold+0x5/0xa [ 2694.186052] ? create_object.isra.0+0x3a/0xa30 [ 2694.186654] should_failslab+0x5/0x20 [ 2694.187159] kmem_cache_alloc+0x5b/0x310 [ 2694.187703] create_object.isra.0+0x3a/0xa30 [ 2694.188282] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.188965] kmem_cache_alloc_trace+0x151/0x320 [ 2694.189596] ? io_tctx_exit_cb+0xf0/0xf0 [ 2694.190135] percpu_ref_init+0xd8/0x3d0 [ 2694.190670] io_uring_setup+0x47a/0x2980 [ 2694.191214] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2694.191849] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2694.192514] ? wait_for_completion_io+0x270/0x270 [ 2694.193178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.193872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2694.194561] do_syscall_64+0x33/0x40 [ 2694.195054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2694.195737] RIP: 0033:0x7feea834bb19 [ 2694.196229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.198663] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2694.199665] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2694.200607] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2694.201560] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2694.202499] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2694.203430] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:57:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x2, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4890) 10:57:02 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x88) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 10:57:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x116, 0xa, &(0x7f0000000500)=[{&(0x7f00000000c0)="445d047aa3ca9fe4c95786f3dd734ca5f5be55f4104ee6ec9b77b6ae2f4effe7f3ae21888526ea7e85d00d70cef329d72d5c6f3718a0d378", 0x38, 0x37}, {&(0x7f0000000140)="385db610bee53563d8655a797c315793160a13ce06eef8488bf11015", 0x1c, 0x6}, {&(0x7f00000012c0)="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", 0x1000, 0xffffffffffffffe1}, {&(0x7f0000000180)="9114761cf01a0dc1a47e035b6e2d0ec46f591c6e7c903ce35d9c932110f92b772923e4f7ee2baf851311b2340c3e49a0e8659f0ea6f7120a2b68c47a88a06665c6bf3d8c82c6abfcf4603720a11e8adfed3fc84af2", 0x55, 0x100000001}, {&(0x7f0000000200)="f34517eb721b487469ece77596335d5ec8dff81207c35827be519e057bf1f27cccabb9043eb4ce1fdb3b89fc6de97ccce4a5148f0b36fcdb68a67f", 0x3b, 0x1}, {&(0x7f0000000240)="ab74a8df70ad9c7a495fea5c19c6eb8fd57855ad2e381d8cd64b36d639f41018033de6bb92ae961279463fae593f69305966524645392124", 0x38, 0x6}, {&(0x7f0000000280)="ccc221ed5f12d1fff3628af7cb6358523e10e818c1eeb0e534b9be33098f91307993a2a96303833de07e36d98004a2a3d9179e72d6dde7b3ef833014ef", 0x3d, 0x3}, {&(0x7f00000002c0)="d1e11c4c1b2938653c61bcee4c4131eac75d6baf41acb7e1d2", 0x19, 0x7}, {&(0x7f0000000300), 0x0, 0x9}, {&(0x7f00000003c0)="571dc157e84e8623b5f656894a33e8728f9225b3d7a3e9c34a74f0869044349a6b64f086dab3b634", 0x28, 0x34}], 0x800, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_winnt}, {@shortname_winnt}, {@rodir}], [{@dont_hash}, {@context={'context', 0x3d, 'system_u'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@uid_lt={'uid<', 0xee01}}, {@audit}, {@audit}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise}]}) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) getdents(r0, &(0x7f00000011c0)=""/213, 0xd5) [ 2694.389191] cgroup2: Unknown parameter 'D]z£ÊŸäÉW†óÝsL¥õ¾UôNæì›w¶®/Nÿçó®!ˆ…&ê~…ÐpÎó)×-\o7 Óx' [ 2694.406922] cgroup2: Unknown parameter 'D]z£ÊŸäÉW†óÝsL¥õ¾UôNæì›w¶®/Nÿçó®!ˆ…&ê~…ÐpÎó)×-\o7 Óx' 10:57:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x3, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4890) 10:57:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="10e4ffff0133000000010100a5d549bc3576d0de274e5606a2"], 0x300) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010001000000000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) faccessat2(r6, &(0x7f0000000200)='./file1\x00', 0xa1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x0, 0x2, 0x7, 0x4}) sendfile(r4, r5, 0x0, 0x100000001) fallocate(r3, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000, 0x7ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r2}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/89, 0x59) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x80000}) 10:57:17 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() pidfd_open(0x0, 0x0) dup(r0) 10:57:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x4, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) 10:57:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4890) 10:57:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 12) 10:57:17 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/89, 0x59) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f0000000080)=""/89, 0x59) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x18000, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000240)={{r4}, 0x4, &(0x7f0000000200)=[0xfff, 0xdfb, 0x9, 0x5], 0x9, 0x2, [0x2, 0x3, 0x7f, 0x9b2]}) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {r2, r3+60000000}}, &(0x7f0000000180)) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x0) 10:57:17 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0xc0102, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x1, 0x1) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@remote, 0x0}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000100000000001000000000000000000000000001af1000000000000000000001c00000000009495e3948578306cdd2906d2cad2c6d7a0283e3264709e850000de8caaa52df349cfadda8645ce5410bf6dec0ad81ddbe1af56fbe5f9", @ANYRES32=r8], 0x38}}], 0x1, 0x891) r9 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = dup(r9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r10, 0x0) ioctl$TIOCEXCL(r10, 0x540c) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r8, 0x4, 0x21, 0xe8, 0x5, 0x1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8000, 0xdff, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000340)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000003c0)=0x80) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fbdbdf25190000003400018008000100", @ANYRES32=r4, @ANYBLOB="7ca05d423a20962c24dc70ba6a528e4e5a7033ec0ef0fcb00e72531f4502e57cc1d37660d1ca8b6f0ef4c3641e39e553b6708faad185ddcfbc1ef1dda5e51ece3827987ea79a9a61e6a0054b95ca25f0a7a49e0e6d7bb57fd01046b4a3fcbf", @ANYRES32=0x0, @ANYBLOB="01000000", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=r5, @ANYBLOB="180001801400020076657468305f746f5f627269646765003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d3000000000000008000300000000000c00018008000100", @ANYRES32=r7, @ANYBLOB="20beef3ac90002006261746164765f736c6176655f310000080001003b9977cd7862b9ba00f1fa9b5726e7aae4f3fe50b8", @ANYRES32=r8, @ANYBLOB="60000180140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="1400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d6163767461700000001400018008000300020000000800030001000000"], 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) [ 2709.941945] FAULT_INJECTION: forcing a failure. [ 2709.941945] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2709.943657] CPU: 1 PID: 15228 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2709.944611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2709.945754] Call Trace: [ 2709.946117] dump_stack+0x107/0x167 [ 2709.946624] should_fail.cold+0x5/0xa [ 2709.947144] __alloc_pages_nodemask+0x182/0x600 [ 2709.947791] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2709.948618] ? cap_capable+0x1cd/0x230 [ 2709.949157] alloc_pages_current+0x187/0x280 [ 2709.949766] __get_free_pages+0xc/0xa0 [ 2709.950295] io_uring_setup+0xe27/0x2980 [ 2709.950860] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2709.951569] ? wait_for_completion_io+0x270/0x270 [ 2709.952300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2709.953320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2709.954066] do_syscall_64+0x33/0x40 [ 2709.954581] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2709.955459] RIP: 0033:0x7feea834bb19 [ 2709.956040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2709.959090] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2709.960388] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2709.961366] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2709.962343] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2709.963318] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2709.964290] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:57:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480), 0x0, 0x4890) 10:57:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x5, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read(r1, &(0x7f0000000080)=""/89, 0x59) timerfd_gettime(r0, &(0x7f0000000000)) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) read(r0, &(0x7f0000000000), 0x20002000) 10:57:17 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x94, 0x8, 0x1, 0x0, 0x7, 0x40440, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x7, 0x2}, 0x4202, 0x9, 0x4, 0x4, 0x4b53, 0x8001, 0x1, 0x0, 0xffff, 0x0, 0x5}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) 10:57:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x6, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) syz_open_dev$sg(&(0x7f0000000080), 0x10000, 0x41) ftruncate(r1, 0x52) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3}) socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000001700)=@v3={0x3000000, [{0x3, 0xa31}, {0x6, 0x5}]}, 0x18, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x10004}, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './cgroup/cgroup.procs'}, 0x19) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r4, &(0x7f0000000080)=""/89, 0x59) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000280)={0x1, 0x3, 0x1000, 0x63, &(0x7f0000000100)="bbad4eca32e9577a68d52226e9ddf9a1202f946f721e6e5993000788e32c2b720fc008f36e516d159000eb824bfab006d9a6e283e8b270787a9dd5bf406eb6c15cbf8d54b5ca3a817875a48351a397dc9a86c1e879273c909d586fc7796c42e129e40a", 0xa5, 0x0, &(0x7f00000001c0)="beb254b510183507ad95c6a52f5425712b36359c59937b20bf64840a7e8ea3852f6f86faa733f89cf5b2addf7eebc9dd5d3a78370339896f6ba825ff6af99233400764b4686c6bec0c82f5e08881de470868cff022111d7f02a83d0a06f0156a88b2953e7949383885473711c8fa3734d55496e0c879ebc52c23b5d38724a6fa072f5f522b91baac26bc025ea13335c7b25794610b9df9a6c4fd4f18279423eb7305cbb924"}) 10:57:17 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 13) 10:57:17 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r1 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x2}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="00c30000b7d66f7b3998d0a2f160e5f9676cbf9154477180", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r0, 0x7a, 0x0, 0x2}, 0x9) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) mmap$perf(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x9) syz_io_uring_setup(0x4b2f, &(0x7f00000002c0)={0x0, 0x1b7c, 0x0, 0x1, 0xfe}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file1\x00'}) r4 = accept(r2, &(0x7f0000000480)=@isdn, &(0x7f0000000500)=0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file1\x00'}) [ 2710.221719] FAULT_INJECTION: forcing a failure. [ 2710.221719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2710.224448] CPU: 0 PID: 15262 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2710.225935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.227822] Call Trace: [ 2710.228385] dump_stack+0x107/0x167 [ 2710.229165] should_fail.cold+0x5/0xa [ 2710.229981] __alloc_pages_nodemask+0x182/0x600 [ 2710.230974] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2710.232244] ? cap_capable+0x1cd/0x230 [ 2710.233080] alloc_pages_current+0x187/0x280 [ 2710.234002] __get_free_pages+0xc/0xa0 [ 2710.234825] io_uring_setup+0xf9a/0x2980 [ 2710.235686] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2710.236749] ? wait_for_completion_io+0x270/0x270 [ 2710.237796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2710.238941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2710.240027] do_syscall_64+0x33/0x40 [ 2710.240810] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2710.241896] RIP: 0033:0x7feea834bb19 [ 2710.242676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.246523] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2710.248120] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2710.249635] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2710.251143] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2710.252625] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2710.254132] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:57:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480), 0x0, 0x4890) 10:57:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x7, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x20, 0x4, 0x5, 0x0, 0x2, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp, 0x2000, 0x7fff, 0x3f, 0x5, 0x7, 0x7fff80, 0x2, 0x0, 0x7f, 0x0, 0x4}, 0x0, 0xc, r3, 0x9) 10:57:18 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@delsa={0x120, 0x11, 0x800, 0x70bd2a, 0x25dfdbfe, {@in6=@mcast1, 0x4d5, 0xa, 0x6c}, [@proto={0x5, 0x19, 0x6c}, @algo_comp={0xe8, 0x3, {{'lzjh\x00'}, 0x500, "37745899ac039c6d8851956021797ca6dd1dfec4e88afb5043461951493c603fe8a59bf22ba04d15f08931266bd941705ad402075096aba25ff272906440fd897272c83b1e5f53be9c8cd9e3fe3790b088dc1beb9bf2f763e57602a38ad0ad17cd43723165fbfaa8a93202fddc95ea0f1091d866b42df873030d31d37b662854410946af11f65206ce837f12cdc77286a4813e9e15b30cab87238accf75f21c2"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}]}, 0x120}, 0x1, 0x0, 0x0, 0x840}, 0x4008000) clone(0xa120500, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)="b7") 10:57:18 executing program 4: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r1], 0x38}}], 0x1, 0x891) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r1, 0x4, 0x21, 0xe8, 0x5, 0x1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8000, 0xdff, 0x9}}) stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x1, 0x4e23, 0x7f, 0x2, 0x80, 0x20, 0x4, r1, r2}, {0x3, 0x8, 0xffffffffffffff00, 0x5, 0xfffffffffffffffe, 0x4, 0x7331, 0x1}, {0xfffffffffffffff8, 0x1ff, 0x6, 0x8}, 0x7ff, 0x6e6bb5, 0x2, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4d2, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x2, 0x1, 0xff, 0x10000, 0x3, 0x6}}, 0xe8) syz_mount_image$nfs(0x0, 0x0, 0x800000, 0x2, &(0x7f0000001400)=[{&(0x7f00000011c0)="f5fb", 0x2, 0xfff}, {&(0x7f0000001280)='M', 0x1}], 0x0, 0x0) 10:57:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480), 0x0, 0x4890) 10:57:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x2, 0x4) socketpair(0x27, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{}, "82c782db09067f1b", "70f2835de1d956ba2409dcdcad0ccd0b", '\x00', "0e463fc745f1b72a"}, 0x28) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x20000, 0x10a) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000140)=0x8, 0x4) sendfile(r0, r1, 0x0, 0x0) 10:57:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYRES32=0x0]) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4c7e70ad188e492a, 0x80010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x2c36, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = dup(r7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x0) r9 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) syz_io_uring_submit(r12, r11, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r6, r11, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0xec) 10:57:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 14) 10:57:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x8, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x17, 0x20, 0xff, 0x20, @private1, @empty, 0xbe7200b6f2c706ad, 0x10, 0x1, 0x1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x891) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r5, 0x4, 0x21, 0xe8, 0x5, 0x1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8000, 0xdff, 0x9}}) sendmmsg$inet(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="b603bde893e8999c1a40cfe39631ae1ff1c647f018d8d26983fc321906ea61149b1f7384484b9a68092a1cedcf473152ec61645986234681265034813eda1698eac6214f81bb8acd08edb59c33111f5339c8b879713b1f1fcbaac8f9425a88ce670e0e5d", 0x64}, {&(0x7f00000000c0)="991bd70878afeb46851108be72393e8c15fe68ed7dab96367cf7a17c5e80f7b2347b00c10c960113bc39e2596d3e1dc0df8f6893195156dc3ea89976bfa545bbe94efa06cdf87c7988b5d8900226de981b584a0f78e9822ed2eeacb85334787877b8980a624ce42963bd6d7d8dd0360e5111d0ffc348e7c6740b9b12a209c3697d7133aa0bf91b5d6d431854b6ea27f368371138d3baf1837bc667d02e75e25a56cd4cab1add42349124083eccd7795126d268137e", 0xb5}, {&(0x7f0000000180)="78c220f00cbd502e50bfcaf5b376", 0xe}, {&(0x7f00000001c0)="b37d85e7f25fcfe50d5327ba6fed07e85c", 0x11}], 0x4, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x23}}}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xac, 0x0, 0x3, [0x1c, 0x6, 0x7, 0x3, 0xfff]}, @noop, @timestamp={0x44, 0x8, 0x2d, 0x0, 0x8, [0x6]}, @timestamp_prespec={0x44, 0x1c, 0x3d, 0x3, 0x5, [{@rand_addr=0x64010101, 0x5}, {@multicast1, 0x5}, {@multicast2, 0x256}]}, @rr={0x7, 0xf, 0x83, [@remote, @rand_addr=0x64010100, @multicast2]}, @cipso={0x86, 0x3f, 0x1, [{0x6, 0x8, "b7dc1c7c6bb8"}, {0x2, 0xf, "a6efa76a17122340116d76e16f"}, {0x1, 0x11, "033e88448db93557cd6d9e37fa7702"}, {0x7, 0x9, "d67bc78d244600"}, {0x2, 0x8, "bc94e3ac0f5e"}]}, @lsrr={0x83, 0x7, 0xdd, [@private=0xa010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_retopts={{0x74, 0x0, 0x7, {[@rr={0x7, 0xb, 0x9, [@rand_addr=0x64010101, @empty]}, @lsrr={0x83, 0x2b, 0x49, [@dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @remote, @remote, @empty, @multicast1, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @rr={0x7, 0x13, 0x92, [@multicast1, @multicast1, @remote, @empty]}, @timestamp_prespec={0x44, 0x14, 0xdc, 0x3, 0x4, [{@broadcast, 0x8}, {@broadcast, 0xfffffff8}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3f}}], 0x170}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000480)="f2a69fbe2d5c84b7f1e9f8a2f2dcb58306b828127ffb243a21bd88824b5993ef2a8e5e6e5926", 0x26}, {&(0x7f00000004c0)="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", 0x1000}], 0x2, &(0x7f0000001500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@generic={0x88, 0x4, '7s'}, @lsrr={0x83, 0x13, 0x8b, [@multicast2, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x14, 0xfb, 0x0, 0x4, [0x885, 0x8001, 0x2, 0x0]}, @timestamp={0x44, 0x1c, 0x7e, 0x0, 0x1, [0x2, 0x1, 0xcc, 0x7, 0x6, 0x8]}, @generic={0x82, 0x12, "74a763d2816ad5f2a6f365fdc177e2e4"}, @timestamp_prespec={0x44, 0x54, 0xff, 0x3, 0x6, [{@multicast1, 0x800}, {@empty, 0x8}, {@multicast2, 0x1beda801}, {@broadcast, 0x1}, {@local}, {@remote, 0x7}, {@empty, 0x3}, {@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20}, {@broadcast, 0x80}]}, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x14}, 0xd2d9}]}, @timestamp={0x44, 0xc, 0x4a, 0x0, 0xd, [0x3, 0x5]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}], 0x158}}, {{&(0x7f0000001680)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000016c0)="b807eccbeef7d890d3464ea8c511a8904cfb124faaedeb56225cda2bc246724a560c954831e830cf4cd1d08ec8e485f4e66811d0584ab1685a4841473026bc9054032576c6f88e404976cff43acfdf87a1ae6b6140307885fab877dba42b3b1b7701a8a6a82827c03c9f83cb4e13d7e5f29e6483866a1c530b493410ae76ae22ffc841a729dd0f759f20ee9fd95ca6d67e896b74b94bc4f8b943c5cb65a45c02b23ef911864060323d101d4bff5e9d4938f5b200c65cfcde529cf6f3c46b728afb50ecb04c0d80972007d0a9224faa1206a5fbf3bbeda9c37cc82b8a9120b9da00aeb1d2519ef973df7c00d2c307ba711e20", 0xf2}], 0x1}}], 0x3, 0x80000c1) 10:57:32 executing program 4: sync() syz_io_uring_setup(0x157c, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, 0x0, 0x0) sync() sync() sync() 10:57:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10, r11}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x8, 0x6, 0x7fffffff, 0xd}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1000dbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x113040, 0x0) lseek(r12, 0x0, 0x2) copy_file_range(r0, 0x0, r12, 0x0, 0x200f5f4, 0x0) [ 2724.891552] FAULT_INJECTION: forcing a failure. [ 2724.891552] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.894803] CPU: 1 PID: 15303 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2724.896801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2724.898754] Call Trace: [ 2724.899338] dump_stack+0x107/0x167 [ 2724.900143] should_fail.cold+0x5/0xa [ 2724.900985] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2724.902233] should_failslab+0x5/0x20 [ 2724.903086] kmem_cache_alloc_trace+0x55/0x320 [ 2724.904114] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2724.905366] io_uring_setup+0x14f6/0x2980 [ 2724.906301] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2724.907430] ? wait_for_completion_io+0x270/0x270 [ 2724.908533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2724.909719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2724.910871] do_syscall_64+0x33/0x40 [ 2724.911698] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2724.912836] RIP: 0033:0x7feea834bb19 [ 2724.913672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2724.917765] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2724.919453] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2724.921033] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2724.922609] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2724.924178] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2724.925758] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:57:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x9, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x800, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x0, 0x0, r1, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r1) r5 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) 10:57:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:57:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 15) [ 2725.207575] FAULT_INJECTION: forcing a failure. [ 2725.207575] name failslab, interval 1, probability 0, space 0, times 0 [ 2725.210341] CPU: 1 PID: 15323 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2725.211989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2725.214006] Call Trace: [ 2725.214644] dump_stack+0x107/0x167 [ 2725.215536] should_fail.cold+0x5/0xa [ 2725.216415] ? create_object.isra.0+0x3a/0xa30 [ 2725.217462] should_failslab+0x5/0x20 [ 2725.218361] kmem_cache_alloc+0x5b/0x310 [ 2725.219290] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2725.220667] create_object.isra.0+0x3a/0xa30 [ 2725.221720] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2725.222941] kmem_cache_alloc_trace+0x151/0x320 [ 2725.224053] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2725.225285] io_uring_setup+0x14f6/0x2980 [ 2725.226296] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2725.227512] ? wait_for_completion_io+0x270/0x270 [ 2725.228633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2725.229884] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2725.231118] do_syscall_64+0x33/0x40 [ 2725.231931] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2725.233173] RIP: 0033:0x7feea834bb19 [ 2725.233992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2725.238276] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2725.240031] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2725.241708] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2725.243395] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2725.245093] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2725.246647] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:57:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xa, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10, r11}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x8, 0x6, 0x7fffffff, 0xd}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1000dbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x113040, 0x0) lseek(r12, 0x0, 0x2) copy_file_range(r0, 0x0, r12, 0x0, 0x200f5f4, 0x0) 10:57:49 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000190c0)=""/102393, &(0x7f0000000080)=0x18ff9) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)) 10:57:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 16) 10:57:49 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x800, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xff}, 0x0, 0x0, r1, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r1) r5 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) 10:57:49 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x4e22, 0x0, 0x2000, 0x100, 0xa, 0x40, 0x3c, 0x3b}, {0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r3, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000094) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000180)) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000040)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r1]) perf_event_open(0xfffffffffffffffc, r5, 0xffffffffffffffff, r6, 0x8) r7 = open_tree(r4, &(0x7f0000000480)='./file1\x00', 0x88000) syz_io_uring_setup(0x7e43, &(0x7f00000004c0)={0x0, 0xbb66, 0x2, 0xfffffffd, 0x149, 0x0, r7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580)) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0)}, 0x8101, 0x3, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x8000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000006e40)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000180)={0x0, @aes256, 0x0, @desc4}) 10:57:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:57:49 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 10:57:49 executing program 6: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x2}, @l2tp={0x2, 0x0, @local}, @xdp={0x2c, 0x3, 0x0, 0x2f}, 0xc6, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)='bond_slave_0\x00', 0x6, 0x7, 0xd45b}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c000000a631e1e977fc4eb6c88c609be6ca69f327026b142be84ab09718b276e0d9744cdc17ae2b5b03203e3f6b2e8e054b9de951f392000fd428c47a9e42cd883d78df1c9da58f5245b9c8bb9db59e599bcc93387583b89093da5ecf9563516c61cf096d28b239f05498982b73af9586b900aa48", @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000000c0001800800", @ANYRES32=r4, @ANYBLOB="0c00e77fd731f2fcb9096fda73eb63a73ee75e36e426726b42ca437f564d4f7eb5e3cbf28ffc474ce8a900b1f17115b136b196e96eef2bb771a3533b21303b5e75886defe6b9b68f436795c4c84368053faaa47bcf2650f5e50fc725d887df3d7f1ef97300"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0xc8, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r5, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={@local, 0x6a}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) lseek(r6, 0x4, 0x2) copy_file_range(r5, 0x0, r6, 0x0, 0x200f5f4, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x43c003, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x6ea901, 0x0) openat(r7, &(0x7f0000000000)='./file1\x00', 0x2008c1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) [ 2741.683773] FAULT_INJECTION: forcing a failure. [ 2741.683773] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.685904] CPU: 1 PID: 15443 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2741.687179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.688708] Call Trace: [ 2741.689194] dump_stack+0x107/0x167 [ 2741.689888] should_fail.cold+0x5/0xa [ 2741.690625] ? create_object.isra.0+0x3a/0xa30 [ 2741.691495] should_failslab+0x5/0x20 [ 2741.692355] kmem_cache_alloc+0x5b/0x310 [ 2741.693358] create_object.isra.0+0x3a/0xa30 [ 2741.694416] kmemleak_alloc_percpu+0xa0/0x100 [ 2741.695494] pcpu_alloc+0x4e2/0x1240 [ 2741.696404] ? io_async_queue_proc+0x80/0x80 [ 2741.697426] percpu_ref_init+0x31/0x3d0 [ 2741.698357] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2741.699551] io_uring_setup+0x14f6/0x2980 [ 2741.700529] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2741.701659] ? wait_for_completion_io+0x270/0x270 [ 2741.702847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2741.704105] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.705351] do_syscall_64+0x33/0x40 [ 2741.706240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2741.707456] RIP: 0033:0x7feea834bb19 [ 2741.708340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.712702] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2741.714313] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2741.715614] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2741.716964] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2741.718320] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2741.719670] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:57:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:57:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/89, 0x59) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) 10:57:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xb, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:49 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="afc9", 0x2, 0xffffff) write$P9_RREADDIR(r0, &(0x7f0000000580)=ANY=[@ANYRES16], 0x122) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x63, 0x40, 0x81, 0x8}, {0x81, 0x20, 0xc0, 0x8}]}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@local, 0x78, r2}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r4 = socket$inet(0x2, 0x5, 0x8001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='./file0/file0\x00']) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0, 0x0, r2}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000820, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',noextend,dfltuid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6163a0ec73733d7aa2a9781cfa5fa191c1ade0ca97091c2ba0faeaa6107597b98c3a201d3267dd27369a0d3381d5334ea887c44c5c892cb97e9ba509ac2074e236368ad35739ed37fde7641b43209b92aaaf3683c62816b0746f0a69e04750306acd703b76d725d6fc9827407ebb18c8b91c402207d4512d59348ac9a21d01049cb58fa1ca9f7fe74c9c1a1d8d488a", @ANYRESDEC=0x0, @ANYBLOB=',dfltuid=', @ANYRESHEX=r6, @ANYBLOB=',posixacl,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',rootcontext=system_u,fscontext=root,\x00']) r7 = dup(r5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x890c, &(0x7f0000000080)={@local, 0x78}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40822, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3ba4141e, 0x1000}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 10:57:49 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 10:57:49 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@chain) keyctl$negate(0xd, 0x0, 0x9f8, r0) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000540)={0x0, "9db01798776d760d855b07bce6aacddf6c21d6ab36943e94a1f2d4ef2e0aa5bdbab3aeae7bca7a5a607aac99d527295ed3d0af0f3ff52cea8d279cbe8d8cef4a", 0x25}, 0x48, r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002000028020000028400001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37313539353330323300"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006a641059655a4e10bf1130ee7fdbd1e0010000000c00000000000000d9f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003000000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d9f4655fd9f4655fd9f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000000440)="ed41000004080000d9f4655fdaf4655fdaf4655f00000000000004000400de0000000000050000000c00000000000000000000000000000000000000000000002f597cc351e1a659fd69d9f8da22f95e814b12f6fea803a56d1c16184c2fdc9454e63da3fa02b170b45181d10176bbe78c50c711d578fe081898f49caaa53db821a74f313a65b00f54e599864f1bea80682ca4eed109f38bf61224ae6f48a9b3c7c39bacca8b2b1fe91a6b40387e38df9d63415cd4c92b5c6f6ac8d3e3917e41b650fea6e804ebfe11732d5cbf", 0xcd, 0x2200}, {&(0x7f0000011600)="200000007412ab417412ab4100000000d9f4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011700)="c041000000380000d9f4655fd9f4655fd9f4655f00000000000002001c00000000000000000000000d0000000e0000000f0000001000000011000000120000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d9f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x3400}, {&(0x7f0000011800)="ed4100003c000000daf4655fdaf4655fdaf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000002010b1b000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x3600}, {&(0x7f0000011900)="ed8100001a040000daf4655fdaf4655fdaf4655f000000000000010004000000000000000100000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000039c34d38000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000", 0xa0, 0x3800}, {&(0x7f0000011a00)="ffa1000026000000daf4655fdaf4655fdaf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3731353935333032332f66696c65302f66696c65300000000000000000000000000000000000000000000026908b44000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000", 0xa0, 0x3a00}, {&(0x7f0000011b00)="ed8100000a000000daf4655fdaf4655fdaf4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa02805e000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3c00}, {&(0x7f0000011c00)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000daf4655fdaf4655fdaf4655f0000000000000200140000000000000001000000150000001600000017000000180000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000cb34f3d3000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000", 0xc0, 0x3de0}, {&(0x7f0000011d00)="ed81000064000000daf4655fdaf4655fdaf4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c91b90e27000000000000000000000000000000000000000000000000200000007412ab417412ab417412ab41daf4655f7412ab410000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x4000}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x41c0}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x6000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x6800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x8000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x9800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xa000}], 0x0, &(0x7f0000000040)) 10:57:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xf, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:57:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4890) (fail_nth: 1) 10:57:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10, r11}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x8, 0x6, 0x7fffffff, 0xd}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1000dbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x113040, 0x0) lseek(r12, 0x0, 0x2) copy_file_range(r0, 0x0, r12, 0x0, 0x200f5f4, 0x0) [ 2742.055107] FAULT_INJECTION: forcing a failure. [ 2742.055107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2742.057988] CPU: 0 PID: 15480 Comm: syz-executor.3 Not tainted 5.10.258 #1 10:57:49 executing program 6: r0 = epoll_create(0x3ff) signalfd4(r0, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8, 0x80800) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x2, r0, 0x0) [ 2742.059564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.061642] Call Trace: [ 2742.062249] dump_stack+0x107/0x167 [ 2742.063098] should_fail.cold+0x5/0xa [ 2742.063988] _copy_from_user+0x2e/0x1b0 [ 2742.064920] __copy_msghdr_from_user+0x91/0x4b0 [ 2742.066016] ? __ia32_sys_shutdown+0x80/0x80 [ 2742.067054] ? __lock_acquire+0xbb1/0x5b00 [ 2742.068058] sendmsg_copy_msghdr+0xa1/0x160 [ 2742.069065] ? do_recvmmsg+0x6d0/0x6d0 [ 2742.069994] ? perf_trace_lock+0xac/0x490 [ 2742.070965] ? SOFTIRQ_verbose+0x10/0x10 [ 2742.071910] ? mark_lock+0xf5/0x2df0 [ 2742.072772] ? __lockdep_reset_lock+0x180/0x180 [ 2742.073832] ? SOFTIRQ_verbose+0x10/0x10 [ 2742.074759] ___sys_sendmsg+0xc6/0x170 [ 2742.075687] ? sendmsg_copy_msghdr+0x160/0x160 [ 2742.076743] ? __fget_files+0x2cf/0x520 [ 2742.077665] ? lock_downgrade+0x6d0/0x6d0 [ 2742.078610] ? lock_downgrade+0x6d0/0x6d0 [ 2742.079560] ? __fget_files+0x2f8/0x520 [ 2742.080471] ? __fget_light+0xea/0x290 [ 2742.081364] __sys_sendmmsg+0x195/0x470 [ 2742.082265] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2742.083241] ? lock_downgrade+0x6d0/0x6d0 [ 2742.084180] ? ksys_write+0x12d/0x260 [ 2742.085053] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2742.086172] ? wait_for_completion_io+0x270/0x270 [ 2742.087306] ? rcu_read_lock_any_held+0x75/0xa0 [ 2742.088352] ? vfs_write+0x354/0xb10 [ 2742.089208] ? fput_many+0x2f/0x1a0 [ 2742.090042] ? ksys_write+0x1a9/0x260 [ 2742.090906] ? __ia32_sys_read+0xb0/0xb0 [ 2742.091851] __x64_sys_sendmmsg+0x99/0x100 [ 2742.092850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.094025] do_syscall_64+0x33/0x40 [ 2742.094869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2742.096034] RIP: 0033:0x7f54beff2b19 [ 2742.096886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.101121] RSP: 002b:00007f54bc568188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2742.102904] RAX: ffffffffffffffda RBX: 00007f54bf105f60 RCX: 00007f54beff2b19 [ 2742.104544] RDX: 0000000000000001 RSI: 0000000020005480 RDI: 0000000000000003 [ 2742.106184] RBP: 00007f54bc5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.107832] R10: 0000000000004890 R11: 0000000000000246 R12: 0000000000000001 [ 2742.109471] R13: 00007fffc7461a8f R14: 00007f54bc568300 R15: 0000000000022000 10:57:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 17) 10:57:49 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) pread64(r1, &(0x7f0000000000)=""/165, 0xa5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) [ 2742.222920] FAULT_INJECTION: forcing a failure. [ 2742.222920] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.225589] CPU: 0 PID: 15491 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2742.227168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.229065] Call Trace: [ 2742.229686] dump_stack+0x107/0x167 [ 2742.230532] should_fail.cold+0x5/0xa [ 2742.231422] ? create_object.isra.0+0x3a/0xa30 [ 2742.232475] should_failslab+0x5/0x20 [ 2742.233370] kmem_cache_alloc+0x5b/0x310 [ 2742.234317] create_object.isra.0+0x3a/0xa30 [ 2742.235328] kmemleak_alloc_percpu+0xa0/0x100 [ 2742.236376] pcpu_alloc+0x4e2/0x1240 [ 2742.237258] ? io_async_queue_proc+0x80/0x80 [ 2742.238292] percpu_ref_init+0x31/0x3d0 [ 2742.239223] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2742.240469] io_uring_setup+0x14f6/0x2980 [ 2742.241652] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2742.242847] ? wait_for_completion_io+0x270/0x270 [ 2742.244008] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.245240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.246460] do_syscall_64+0x33/0x40 [ 2742.247338] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2742.248536] RIP: 0033:0x7feea834bb19 [ 2742.249406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.253664] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2742.255461] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2742.257093] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2742.258752] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2742.260409] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2742.262065] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:58:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 18) 10:58:04 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42401, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = semget(0x2, 0x4, 0x650) semctl$SEM_STAT_ANY(r5, 0x1, 0x14, &(0x7f0000000340)=""/194) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) execveat(r6, &(0x7f00000005c0)='./file0\x00', &(0x7f00000007c0)=[&(0x7f0000000600)='\x00', &(0x7f0000000740)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x00\x006\xdd\xda\xac\x05\x0fG/\xf9\n', &(0x7f0000000680)='/dev/nvram\x00', &(0x7f00000006c0)='!\x00', &(0x7f0000000640)='\x00'], 0x0, 0x400) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="66c66498ca93ee24fd11645f43dbdcc4d6f67e94d3045475884d6e82622c504768c00f7090307b8b2bb9479adc9333354eeb5851a3e8116291a2c0057088ade60842c3f40730a66c8cf116f8f9e578b23e5de999c1bb060b83091861969e4b77f722fdb31c2beb122bf25ed78f91efffe668a01409e75a511568d7f49879761a169469434fb0efc170e577f30da881257bef3fab03c2eff8b4b9b2afa061ac9a6277641b6a998f8b6aa2e842eee82b99e44b56030a26aba1c9f2e1fbbb96270f623c82df4509fa59c6e4aadfa68ad875c8a2f00ba3c071db0128bd", 0xdb}], 0x1}, 0x0, 0x40000, 0x0, {0x0, r8}}, 0x200) r9 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r9, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80100001a00010000000000fddbdf25e00000020000000000000000000003f1ab1414bb0000000000000000000000000000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x1c8}}, 0x0) fcntl$dupfd(r10, 0x406, r10) 10:58:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10, r11}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x8, 0x6, 0x7fffffff, 0xd}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1000dbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x113040, 0x0) lseek(r12, 0x0, 0x2) copy_file_range(r0, 0x0, r12, 0x0, 0x200f5f4, 0x0) 10:58:04 executing program 4: close(0xffffffffffffffff) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080), 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYBLOB="010000000001000000241513580000000c000180", @ANYRES32=r1, @ANYBLOB="0c00e77fd731f2fcb9096fda73eb63a73ee75e36e4"], 0x2c}}, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000400)={@broadcast, @multicast2}, &(0x7f0000000440)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @broadcast}}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000280)=0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r1, 0x2f, 0x2, 0x0, 0x3, 0xa, @mcast2, @rand_addr=' \x01\x00', 0x8000, 0x8000, 0x240, 0x5}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000480)={0x9c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}}]}]}, 0x9c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@empty, r6}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x5c00, 0x0}}], 0x324, 0x0) 10:58:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:58:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4890) (fail_nth: 2) 10:58:04 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x11f) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 10:58:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x5, 0x3, 0x3, 0x0, 0x41f5, 0x40000, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x6}, 0x4, 0x99, 0x2, 0x8, 0xb07, 0x79b, 0x7, 0x0, 0x7ff, 0x0, 0x7fff}, r4, 0x7, r3, 0x9) [ 2756.941235] FAULT_INJECTION: forcing a failure. [ 2756.941235] name failslab, interval 1, probability 0, space 0, times 0 [ 2756.943061] CPU: 0 PID: 15502 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 2756.944026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2756.945217] Call Trace: [ 2756.945619] dump_stack+0x107/0x167 [ 2756.946141] should_fail.cold+0x5/0xa [ 2756.946680] ? dst_alloc+0x9e/0x5d0 [ 2756.947205] should_failslab+0x5/0x20 [ 2756.947747] kmem_cache_alloc+0x5b/0x310 [ 2756.948336] dst_alloc+0x9e/0x5d0 [ 2756.948838] rt_dst_alloc+0x73/0x440 [ 2756.949350] ip_route_output_key_hash_rcu+0x98d/0x24a0 [ 2756.950107] ip_route_output_key_hash+0x185/0x340 [ 2756.950783] ? ip_route_output_key_hash_rcu+0x24a0/0x24a0 [ 2756.951552] ? lock_downgrade+0x6d0/0x6d0 [ 2756.952143] ? lock_chain_count+0x20/0x20 [ 2756.952174] ip_route_output_flow+0x23/0x150 [ 2756.952189] udp_sendmsg+0x190d/0x2220 [ 2756.952202] ? ip_frag_init+0x350/0x350 [ 2756.952220] ? udp_setsockopt+0xc0/0xc0 10:58:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4890) (fail_nth: 3) [ 2756.952234] ? mark_lock+0xf5/0x2df0 [ 2756.952251] ? mark_lock+0xf5/0x2df0 [ 2756.952270] ? lock_chain_count+0x20/0x20 [ 2756.952286] ? lock_chain_count+0x20/0x20 [ 2756.952301] ? mark_lock+0xf5/0x2df0 10:58:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x11, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 2756.952317] ? __lockdep_reset_lock+0x180/0x180 [ 2756.952330] ? lock_chain_count+0x20/0x20 [ 2756.952341] ? mark_lock+0xf5/0x2df0 [ 2756.952360] udpv6_sendmsg+0x1b56/0x2b40 [ 2756.952374] ? __lock_acquire+0x1657/0x5b00 [ 2756.952393] ? udp_v6_push_pending_frames+0x360/0x360 [ 2756.952416] ? __lockdep_reset_lock+0x180/0x180 [ 2756.952435] ? lock_acquire+0x197/0x470 [ 2756.952446] ? find_held_lock+0x2c/0x110 [ 2756.952463] ? __might_fault+0xd3/0x180 [ 2756.952475] ? lock_downgrade+0x6d0/0x6d0 [ 2756.952486] ? mark_lock+0xf5/0x2df0 [ 2756.952499] ? mark_lock+0xf5/0x2df0 [ 2756.952510] ? sock_has_perm+0x1ea/0x280 [ 2756.952523] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2756.952554] ? __import_iovec+0x458/0x590 [ 2756.952566] ? udp_v6_push_pending_frames+0x360/0x360 [ 2756.952581] inet6_sendmsg+0x105/0x140 [ 2756.952592] ? inet6_compat_ioctl+0x320/0x320 [ 2756.952604] __sock_sendmsg+0xf2/0x190 [ 2756.952619] ____sys_sendmsg+0x334/0x870 [ 2756.952635] ? sock_write_iter+0x3d0/0x3d0 [ 2756.952644] ? do_recvmmsg+0x6d0/0x6d0 [ 2756.952659] ? SOFTIRQ_verbose+0x10/0x10 [ 2756.952671] ? mark_lock+0xf5/0x2df0 [ 2756.952685] ? __lockdep_reset_lock+0x180/0x180 [ 2756.952700] ___sys_sendmsg+0xf3/0x170 [ 2756.952713] ? sendmsg_copy_msghdr+0x160/0x160 [ 2756.952730] ? __fget_files+0x2cf/0x520 [ 2756.952743] ? lock_downgrade+0x6d0/0x6d0 [ 2756.952760] ? lock_downgrade+0x6d0/0x6d0 [ 2756.952778] ? __fget_files+0x2f8/0x520 [ 2756.952798] ? __fget_light+0xea/0x290 [ 2756.952816] __sys_sendmmsg+0x195/0x470 [ 2756.952831] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2756.952844] ? lock_downgrade+0x6d0/0x6d0 [ 2756.952870] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2756.952885] ? wait_for_completion_io+0x270/0x270 [ 2756.952900] ? rcu_read_lock_any_held+0x75/0xa0 [ 2756.952909] ? vfs_write+0x354/0xb10 [ 2756.952923] ? fput_many+0x2f/0x1a0 [ 2756.952934] ? ksys_write+0x1a9/0x260 [ 2756.952944] ? __ia32_sys_read+0xb0/0xb0 [ 2756.952962] __x64_sys_sendmmsg+0x99/0x100 [ 2756.952976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2756.952987] do_syscall_64+0x33/0x40 [ 2756.953000] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2756.953009] RIP: 0033:0x7f54beff2b19 [ 2756.953021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2756.953027] RSP: 002b:00007f54bc568188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2756.953042] RAX: ffffffffffffffda RBX: 00007f54bf105f60 RCX: 00007f54beff2b19 [ 2756.953049] RDX: 0000000000000001 RSI: 0000000020005480 RDI: 0000000000000003 [ 2756.953056] RBP: 00007f54bc5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 2756.953063] R10: 0000000000004890 R11: 0000000000000246 R12: 0000000000000001 [ 2756.953070] R13: 00007fffc7461a8f R14: 00007f54bc568300 R15: 0000000000022000 [ 2756.961811] FAULT_INJECTION: forcing a failure. [ 2756.961811] name failslab, interval 1, probability 0, space 0, times 0 [ 2756.961844] CPU: 1 PID: 15508 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2756.961855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2756.961862] Call Trace: [ 2756.961889] dump_stack+0x107/0x167 [ 2756.961913] should_fail.cold+0x5/0xa [ 2756.961937] ? percpu_ref_init+0xd8/0x3d0 [ 2756.961961] should_failslab+0x5/0x20 [ 2756.961982] kmem_cache_alloc_trace+0x55/0x320 [ 2756.962006] ? io_async_queue_proc+0x80/0x80 [ 2756.962025] percpu_ref_init+0xd8/0x3d0 [ 2756.962051] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2756.962073] io_uring_setup+0x14f6/0x2980 [ 2756.962102] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2756.962120] ? wait_for_completion_io+0x270/0x270 [ 2756.962168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2756.962189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2756.962213] do_syscall_64+0x33/0x40 [ 2756.962240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2756.962253] RIP: 0033:0x7feea834bb19 [ 2756.962271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2756.962281] RSP: 002b:00007feea58a0108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2756.962303] RAX: ffffffffffffffda RBX: 00007feea845f020 RCX: 00007feea834bb19 [ 2756.962314] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2756.962326] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2756.962337] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2756.962348] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 [ 2757.030099] FAULT_INJECTION: forcing a failure. [ 2757.030099] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.030123] CPU: 1 PID: 15514 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 2757.030133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2757.030141] Call Trace: [ 2757.030167] dump_stack+0x107/0x167 [ 2757.030191] should_fail.cold+0x5/0xa [ 2757.030214] ? create_object.isra.0+0x3a/0xa30 [ 2757.030242] should_failslab+0x5/0x20 [ 2757.030261] kmem_cache_alloc+0x5b/0x310 [ 2757.030288] create_object.isra.0+0x3a/0xa30 [ 2757.030304] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2757.030331] kmem_cache_alloc+0x159/0x310 [ 2757.030357] dst_alloc+0x9e/0x5d0 [ 2757.030384] rt_dst_alloc+0x73/0x440 [ 2757.030409] ip_route_output_key_hash_rcu+0x98d/0x24a0 [ 2757.030443] ip_route_output_key_hash+0x185/0x340 [ 2757.030465] ? ip_route_output_key_hash_rcu+0x24a0/0x24a0 [ 2757.030494] ? lock_downgrade+0x6d0/0x6d0 [ 2757.030517] ? lock_chain_count+0x20/0x20 [ 2757.030544] ip_route_output_flow+0x23/0x150 [ 2757.030566] udp_sendmsg+0x190d/0x2220 [ 2757.030586] ? ip_frag_init+0x350/0x350 [ 2757.030614] ? udp_setsockopt+0xc0/0xc0 [ 2757.030636] ? mark_lock+0xf5/0x2df0 [ 2757.030664] ? mark_lock+0xf5/0x2df0 [ 2757.030693] ? lock_chain_count+0x20/0x20 [ 2757.030718] ? lock_chain_count+0x20/0x20 [ 2757.030742] ? mark_lock+0xf5/0x2df0 [ 2757.030766] ? __lockdep_reset_lock+0x180/0x180 [ 2757.030787] ? lock_chain_count+0x20/0x20 [ 2757.030804] ? mark_lock+0xf5/0x2df0 [ 2757.030833] udpv6_sendmsg+0x1b56/0x2b40 [ 2757.030855] ? __lock_acquire+0x1657/0x5b00 [ 2757.030885] ? udp_v6_push_pending_frames+0x360/0x360 [ 2757.030921] ? __lockdep_reset_lock+0x180/0x180 [ 2757.030950] ? lock_acquire+0x197/0x470 [ 2757.030967] ? find_held_lock+0x2c/0x110 [ 2757.030994] ? __might_fault+0xd3/0x180 [ 2757.031013] ? lock_downgrade+0x6d0/0x6d0 [ 2757.031030] ? mark_lock+0xf5/0x2df0 [ 2757.031051] ? mark_lock+0xf5/0x2df0 [ 2757.031068] ? sock_has_perm+0x1ea/0x280 [ 2757.031088] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2757.031133] ? __import_iovec+0x458/0x590 [ 2757.031151] ? udp_v6_push_pending_frames+0x360/0x360 [ 2757.031174] inet6_sendmsg+0x105/0x140 [ 2757.031192] ? inet6_compat_ioctl+0x320/0x320 [ 2757.031211] __sock_sendmsg+0xf2/0x190 [ 2757.031233] ____sys_sendmsg+0x334/0x870 [ 2757.031259] ? sock_write_iter+0x3d0/0x3d0 [ 2757.031272] ? do_recvmmsg+0x6d0/0x6d0 [ 2757.031297] ? SOFTIRQ_verbose+0x10/0x10 [ 2757.031321] ? mark_lock+0xf5/0x2df0 [ 2757.031343] ? __lockdep_reset_lock+0x180/0x180 [ 2757.031367] ___sys_sendmsg+0xf3/0x170 [ 2757.031387] ? sendmsg_copy_msghdr+0x160/0x160 [ 2757.031412] ? __fget_files+0x2cf/0x520 [ 2757.031432] ? lock_downgrade+0x6d0/0x6d0 [ 2757.031459] ? lock_downgrade+0x6d0/0x6d0 [ 2757.031488] ? __fget_files+0x2f8/0x520 [ 2757.031519] ? __fget_light+0xea/0x290 [ 2757.031548] __sys_sendmmsg+0x195/0x470 [ 2757.031574] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2757.031594] ? lock_downgrade+0x6d0/0x6d0 [ 2757.031635] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2757.031666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2757.031686] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2757.031702] ? trace_hardirqs_on+0x5b/0x180 [ 2757.031725] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2757.031762] __x64_sys_sendmmsg+0x99/0x100 [ 2757.031783] do_syscall_64+0x33/0x40 [ 2757.031803] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2757.031816] RIP: 0033:0x7f54beff2b19 [ 2757.031834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2757.031845] RSP: 002b:00007f54bc568188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2757.031867] RAX: ffffffffffffffda RBX: 00007f54bf105f60 RCX: 00007f54beff2b19 [ 2757.031878] RDX: 0000000000000001 RSI: 0000000020005480 RDI: 0000000000000003 [ 2757.031889] RBP: 00007f54bc5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 2757.031900] R10: 0000000000004890 R11: 0000000000000246 R12: 0000000000000001 [ 2757.031912] R13: 00007fffc7461a8f R14: 00007f54bc568300 R15: 0000000000022000 10:58:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) write$cgroup_pid(r3, &(0x7f0000000000)=0xffffffffffffffff, 0x12) 10:58:19 executing program 4: r0 = semget$private(0x0, 0x4, 0x481) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r2 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) semop(0x0, &(0x7f0000000000)=[{0x3, 0x7a}, {0x3}], 0x2) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1f, 0x1000}], 0x1, &(0x7f0000000100)={0x77359400}) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000002c0)=""/207) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000180)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x3, 0x8, 0x1800}, {0x2, 0x7}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x2, 0x1}) semop(r2, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) semctl$IPC_RMID(0x0, 0x0, 0x0) 10:58:19 executing program 6: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0x10000000) syz_io_uring_submit(0x0, r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0000001f0000002e2f66696c653000"]) openat(r4, &(0x7f0000000040)='./file1\x00', 0x2000, 0x6b) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100000001) 10:58:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4890) (fail_nth: 4) 10:58:19 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 19) 10:58:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x13, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:58:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10, r11}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x8, 0x6, 0x7fffffff, 0xd}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1000dbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x113040, 0x0) lseek(r12, 0x0, 0x2) 10:58:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000008000000000000000008000000", @ANYRES32=r1], 0x38}}], 0x1, 0x891) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r1, 0x4, 0x21, 0xe8, 0x5, 0x1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8000, 0xdff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', r1, 0x29, 0x40, 0x8, 0x81, 0x10, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7, 0xfffffffc, 0x1}}) [ 2771.919738] FAULT_INJECTION: forcing a failure. [ 2771.919738] name failslab, interval 1, probability 0, space 0, times 0 [ 2771.921779] CPU: 1 PID: 15537 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2771.922710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2771.923821] Call Trace: [ 2771.924175] dump_stack+0x107/0x167 [ 2771.924667] should_fail.cold+0x5/0xa [ 2771.925191] ? create_object.isra.0+0x3a/0xa30 [ 2771.925819] should_failslab+0x5/0x20 [ 2771.926335] kmem_cache_alloc+0x5b/0x310 [ 2771.926872] create_object.isra.0+0x3a/0xa30 [ 2771.927476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2771.928168] kmem_cache_alloc_trace+0x151/0x320 [ 2771.928798] ? io_async_queue_proc+0x80/0x80 [ 2771.929362] percpu_ref_init+0xd8/0x3d0 [ 2771.929906] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2771.930631] io_uring_setup+0x14f6/0x2980 [ 2771.931189] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2771.931862] ? wait_for_completion_io+0x270/0x270 [ 2771.932527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2771.933224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2771.933927] do_syscall_64+0x33/0x40 [ 2771.934428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2771.935109] RIP: 0033:0x7feea834bb19 [ 2771.935586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2771.938046] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2771.939059] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2771.940013] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2771.940918] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2771.941834] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2771.942744] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:58:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x2b, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 2771.955099] FAULT_INJECTION: forcing a failure. [ 2771.955099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2771.956913] CPU: 1 PID: 15540 Comm: syz-executor.3 Not tainted 5.10.258 #1 [ 2771.957946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2771.959042] Call Trace: [ 2771.959393] dump_stack+0x107/0x167 [ 2771.959883] should_fail.cold+0x5/0xa [ 2771.960396] _copy_to_user+0x2e/0x180 [ 2771.960908] simple_read_from_buffer+0xcc/0x160 [ 2771.961530] proc_fail_nth_read+0x198/0x230 [ 2771.962112] ? proc_sessionid_read+0x230/0x230 [ 2771.962730] ? security_file_permission+0xb1/0xe0 [ 2771.963372] ? proc_sessionid_read+0x230/0x230 [ 2771.963972] vfs_read+0x228/0x620 [ 2771.964425] ksys_read+0x12d/0x260 [ 2771.964899] ? vfs_write+0xb10/0xb10 [ 2771.965378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2771.966083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2771.966776] do_syscall_64+0x33/0x40 [ 2771.967272] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2771.967957] RIP: 0033:0x7f54befa569c [ 2771.968454] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2771.970861] RSP: 002b:00007f54bc568170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2771.971853] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f54befa569c [ 2771.972754] RDX: 000000000000000f RSI: 00007f54bc5681e0 RDI: 0000000000000004 [ 2771.973643] RBP: 00007f54bc5681d0 R08: 0000000000000000 R09: 0000000000000000 [ 2771.974536] R10: 0000000000004890 R11: 0000000000000246 R12: 0000000000000001 [ 2771.975429] R13: 00007fffc7461a8f R14: 00007f54bc568300 R15: 0000000000022000 10:58:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x141040, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x10001, 0x31713}, 0x255d2155) ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x7) 10:58:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10, r11}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x8, 0x6, 0x7fffffff, 0xd}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1000dbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x113040, 0x0) 10:58:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x32, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:58:19 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 20) 10:58:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4890) 10:58:19 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x5, 0x3, 0x3, 0x0, 0x41f5, 0x40000, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x6}, 0x4, 0x99, 0x2, 0x8, 0xb07, 0x79b, 0x7, 0x0, 0x7ff, 0x0, 0x7fff}, r4, 0x7, r3, 0x9) [ 2772.182528] FAULT_INJECTION: forcing a failure. [ 2772.182528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2772.183942] CPU: 1 PID: 15559 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2772.184777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2772.185783] Call Trace: [ 2772.186095] dump_stack+0x107/0x167 [ 2772.186538] should_fail.cold+0x5/0xa [ 2772.186999] _copy_to_user+0x2e/0x180 [ 2772.187464] io_uring_setup+0x11b5/0x2980 [ 2772.187970] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2772.188587] ? wait_for_completion_io+0x270/0x270 [ 2772.189184] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2772.189831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2772.190422] do_syscall_64+0x33/0x40 [ 2772.190871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2772.191494] RIP: 0033:0x7feea834bb19 [ 2772.191938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2772.194142] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2772.195049] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2772.195855] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2772.196661] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2772.197464] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2772.198272] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:58:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4890) 10:58:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10, r11}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x8, 0x6, 0x7fffffff, 0xd}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1000dbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x113040, 0x0) 10:58:36 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) statfs(0x0, 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [{0x2, 0x4, r0}, {0x2, 0x2, r1}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x5}, {0x2, 0x4, 0xee00}], {0x4, 0x4}, [{0x8, 0x1}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x4}}, 0x5c, 0x3) 10:58:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x33, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:58:36 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 21) 10:58:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) getdents(r1, &(0x7f0000000000)=""/211, 0xd3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) 10:58:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10, r11}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x8, 0x6, 0x7fffffff, 0xd}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1000dbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) 10:58:36 executing program 6: socketpair(0x11, 0x4, 0xfe55, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) acct(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000140)={0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)={0x0}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000180)={r5, 0x0, r6, 0x613, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r5, 0x0, r1, 0x5dba, 0x80000}) lseek(r2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r3, 0x0, r7}) [ 2789.232043] FAULT_INJECTION: forcing a failure. [ 2789.232043] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.234659] CPU: 1 PID: 15579 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2789.236188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.238068] Call Trace: [ 2789.238655] dump_stack+0x107/0x167 [ 2789.239472] should_fail.cold+0x5/0xa [ 2789.240322] ? __d_alloc+0x2a/0x990 [ 2789.241127] should_failslab+0x5/0x20 [ 2789.241973] kmem_cache_alloc+0x5b/0x310 [ 2789.242873] __d_alloc+0x2a/0x990 [ 2789.243631] ? find_held_lock+0x2c/0x110 [ 2789.244523] d_alloc_pseudo+0x19/0x70 [ 2789.245362] alloc_file_pseudo+0xce/0x250 [ 2789.246285] ? trace_hardirqs_on+0x5b/0x180 [ 2789.247228] ? alloc_file+0x5a0/0x5a0 [ 2789.248082] anon_inode_getfile+0xc8/0x1f0 [ 2789.249036] io_uring_setup+0x138b/0x2980 [ 2789.249966] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2789.251080] ? wait_for_completion_io+0x270/0x270 [ 2789.252170] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.253327] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2789.254466] do_syscall_64+0x33/0x40 [ 2789.255273] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2789.256377] RIP: 0033:0x7feea834bb19 [ 2789.257178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.261138] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2789.262774] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2789.264294] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2789.265822] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2789.267361] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2789.268879] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:58:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x3c, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 2789.313564] kauditd_printk_skb: 24 callbacks suppressed [ 2789.313584] audit: type=1326 audit(1781953117.032:411): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15573 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e1d4ab19 code=0x7ffc0000 [ 2789.325655] audit: type=1326 audit(1781953117.033:412): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15573 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e1d4ab19 code=0x7ffc0000 10:58:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x2, 0x0}}], 0x1, 0x4890) [ 2789.351490] audit: type=1326 audit(1781953117.040:413): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15573 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff2e1d4ab19 code=0x7ffc0000 10:58:37 executing program 5: sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="4430de74", @ANYRES16=0x0, @ANYBLOB="020000000000000000000d00000005001a004c000000050007000f0000000500070011000000050019001f000000010000000000000006000a00030000009d3139e47bc1c1492da8b9810610d00b9a5b2212e375a88600f101b32d25881cd46e989c76ffc2cd08faffe98f60f6aab4e07d5842adfe87e843f0aaed60116dbc75a1f06bde35a746463d08000000005d758718e37a1a5ab7ff675e9a2c5e7973cf320313322ad2427534d62b73cc9e09e2"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="b00000001300000126bd7000ffdbdf251d000000a8a9ea534ff32add9c6e930986a1f7be8411e8d514bc68c35ab3fc3311c6fd1bba73d3cba9dfa6ded3700d6966e4147b3a81759c41626b73917827d83113b91e81dc1dbebbff2b9eddc97e9b16b66412b944d1169bee2bb50eaedd241aa49ff5c6d028ff39444dbb1166e6aecb5aef0a94a1471a1162a5e092a235bbfbc57ff6c6918fa0f0b7f375b32fc5e4287000000000009d8d80968552d5c533dd000000000000000000bfff74a1ad0e63c222141ba94d33467b2532b0b82a030cb125c65439fba1fd05db982f23eea0f95042c2a456321118b81c3ea8d5e2efb474ba8b0272180d922ade8774ad960e1b74bd68f6c65f5c42b820a26a7d8a337da8dbcca5874518fdbbc2e2b958478ea3b6b500abeb33a3c4ac278696a28909329779bf3a9c9d9ae9bbebb61b2376243e60d100e8712a7c16ad238ffc1f09243abe0b6c28c717c3c1360b10543f9576bb5042e1e3ea5fa4d80792d190a814b4968034e4858b94bcdc2b058557d69dee"], 0xb0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1811c0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2000, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, {0x3}}, 0xcac) r4 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x52000, 0xc0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:58:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10, r11}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x8, 0x6, 0x7fffffff, 0xd}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1000dbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2789.389693] audit: type=1326 audit(1781953117.040:414): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15573 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e1d4ab19 code=0x7ffc0000 10:58:37 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @scatter={0x3, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000280)=""/147, 0x93}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x6, 0x200000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000180)) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x6, 0x5, 0x8, 0x66, 0x6, "921ea4c97b6b72ea6dbc27073faa355603b7f6"}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001b80)={0x0, 0xfffffffffffffffe, 0x4a, 0x8, @buffer={0x0, 0x38, &(0x7f0000000080)=""/56}, &(0x7f00000019c0)="cd5360680c4a5835dcfb604e67ee7f62ba32ab11228c6c235a6d17141be21a11499bc91052c553b71cb0b1db02a4bbe4a5dcba37197763a8474b4d30812bf59e1ac5a5935ada5b7436ec", &(0x7f0000001a40)=""/200, 0x2000, 0x0, 0x1, &(0x7f0000001b40)}) creat(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x4000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001600)={0x0, 0xfffffffffffffffe, 0x1000, 0x0, @scatter={0x2, 0x0, &(0x7f0000000340)}, &(0x7f0000003600)="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", &(0x7f00000001c0)=""/180, 0x7ffc, 0x18011, 0xfffffffd, &(0x7f0000000140)}) [ 2789.418467] audit: type=1326 audit(1781953117.041:415): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15573 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e1d4ab19 code=0x7ffc0000 [ 2789.436409] audit: type=1326 audit(1781953117.041:416): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15573 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ff2e1d4ab19 code=0x7ffc0000 10:58:37 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/252, 0xfc, 0x9) readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="d01c15bbdfbf79f1fe0000000500008acb78a1d5004a31b24576760823c828505f8daf4a08954a6dba9937c5cd29b4305fc3d0dfb83fc9dfc33222c3749836550416be"], 0x18}}], 0x2, 0x0) r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="10"]) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x4, 0xda76, 0x6) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000001) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x7, &(0x7f0000ffc000/0x4000)=nil, 0x4) [ 2789.454751] audit: type=1326 audit(1781953117.041:417): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15573 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e1d4ab19 code=0x7ffc0000 10:58:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x5, 0x1f, 0x20, 0x0, 0x7f, 0x10, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xb4d1, 0x0, @perf_bp={&(0x7f0000000080)}, 0x88d, 0x6c, 0x9, 0x3, 0x5f3, 0x9, 0x3, 0x0, 0x338, 0x0, 0xff}, 0x0, 0x7, r2, 0x9) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="01373a4ce313958085000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) dup2(r3, r0) r4 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000008, 0x11, r6, 0x8000000) r7 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = dup(r7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = dup(r9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r10, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x6, 0xe7, 0x81, 0x2, 0x0, 0x5, 0x102, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x40000, 0x4, 0x400, 0x1, 0x4, 0x401, 0x4, 0x0, 0xfff, 0x0, 0x15}, 0xffffffffffffffff, 0xa, r10, 0x2) [ 2789.481435] audit: type=1326 audit(1781953117.041:418): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15573 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e1d4ab19 code=0x7ffc0000 [ 2789.503608] audit: type=1326 audit(1781953117.050:419): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15568 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19808fab19 code=0x7ffc0000 10:58:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x6c, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 2789.532014] audit: type=1326 audit(1781953117.050:420): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15568 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19808fab19 code=0x7ffc0000 10:58:37 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 22) 10:58:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x4, 0x0}}], 0x1, 0x4890) [ 2789.667506] FAULT_INJECTION: forcing a failure. [ 2789.667506] name failslab, interval 1, probability 0, space 0, times 0 [ 2789.671120] CPU: 0 PID: 15612 Comm: syz-executor.7 Not tainted 5.10.258 #1 10:58:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10, r11}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x8, 0x6, 0x7fffffff, 0xd}) [ 2789.672589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2789.674511] Call Trace: [ 2789.675077] dump_stack+0x107/0x167 [ 2789.675857] should_fail.cold+0x5/0xa [ 2789.676675] ? create_object.isra.0+0x3a/0xa30 [ 2789.677639] should_failslab+0x5/0x20 [ 2789.678455] kmem_cache_alloc+0x5b/0x310 [ 2789.679318] create_object.isra.0+0x3a/0xa30 [ 2789.680239] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2789.681315] kmem_cache_alloc+0x159/0x310 [ 2789.682202] __d_alloc+0x2a/0x990 [ 2789.682939] ? find_held_lock+0x2c/0x110 [ 2789.683813] d_alloc_pseudo+0x19/0x70 [ 2789.684621] alloc_file_pseudo+0xce/0x250 [ 2789.685489] ? trace_hardirqs_on+0x5b/0x180 [ 2789.686404] ? alloc_file+0x5a0/0x5a0 [ 2789.687220] anon_inode_getfile+0xc8/0x1f0 [ 2789.688123] io_uring_setup+0x138b/0x2980 [ 2789.689022] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2789.690102] ? wait_for_completion_io+0x270/0x270 [ 2789.691143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2789.692262] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2789.693356] do_syscall_64+0x33/0x40 [ 2789.694157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2789.695237] RIP: 0033:0x7feea834bb19 [ 2789.696024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2789.699919] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2789.701537] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2789.703058] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2789.704571] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2789.706077] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2789.707585] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:58:53 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 23) 10:58:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, r2, 0x0) r4 = dup(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) 10:58:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10, r11}}, 0x0) 10:58:53 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1d59, &(0x7f0000000180)={0x0, 0x4ac1, 0x0, 0x0, 0x20c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)="a6", 0x1}, {0x0}], 0x2}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x58a8, 0x80000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r5 = syz_open_dev$vcsu(&(0x7f0000000040), 0x100000000, 0x468842) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x800012d, 0x0, 0x0, 0x0, 0x0) 10:58:53 executing program 4: r0 = syz_io_uring_setup(0x7d02, &(0x7f00000002c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 10:58:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0xa, 0x0}}], 0x1, 0x4890) 10:58:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xb1, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:58:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './cgroup/cgroup.procs'}, 0x19) socketpair(0x6, 0x1, 0x6, &(0x7f0000000080)) [ 2805.531041] FAULT_INJECTION: forcing a failure. [ 2805.531041] name failslab, interval 1, probability 0, space 0, times 0 [ 2805.534765] CPU: 1 PID: 15637 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2805.536695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2805.538701] Call Trace: [ 2805.539329] dump_stack+0x107/0x167 [ 2805.540356] should_fail.cold+0x5/0xa [ 2805.541429] ? __alloc_file+0x21/0x320 [ 2805.542438] should_failslab+0x5/0x20 [ 2805.543274] kmem_cache_alloc+0x5b/0x310 [ 2805.544172] __alloc_file+0x21/0x320 [ 2805.545061] alloc_empty_file+0x6d/0x170 [ 2805.546228] alloc_file+0x5e/0x5a0 [ 2805.547008] alloc_file_pseudo+0x16a/0x250 [ 2805.547929] ? alloc_file+0x5a0/0x5a0 [ 2805.548789] anon_inode_getfile+0xc8/0x1f0 [ 2805.549879] io_uring_setup+0x138b/0x2980 [ 2805.550889] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2805.551978] ? wait_for_completion_io+0x270/0x270 [ 2805.553033] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2805.554172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2805.555274] do_syscall_64+0x33/0x40 [ 2805.556068] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2805.557157] RIP: 0033:0x7feea834bb19 [ 2805.557953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2805.561869] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2805.563500] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2805.565009] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2805.566531] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2805.568037] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2805.569549] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:58:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xf0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 2805.608766] ieee802154 phy0 wpan0: encryption failed: -22 10:58:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0xe0, 0x0}}], 0x1, 0x4890) [ 2805.628174] ieee802154 phy0 wpan0: encryption failed: -22 10:58:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) [ 2805.654117] ieee802154 phy0 wpan0: encryption failed: -22 10:58:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1, {0x0, r10}}, 0x0) [ 2805.665166] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.681606] ieee802154 phy0 wpan0: encryption failed: -22 10:58:53 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) dup3(0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) openat$incfs(r4, &(0x7f0000001100)='.log\x00', 0x200000, 0x10a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f00000010c0)={'veth1_to_hsr\x00', {0x2, 0x0, @remote}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000080)={{r2}, 0x0, 0x4, @inherit={0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000400000000000000436c00000000000004000000000000000800000000000000190f0000000000000e2e00000000000008000000000000009a8d0000000000000500000000000000070000000000000006000000000008000000000000000000"]}, @name="482b63b2661ccee84e76b9a61c757660a0d4889a020e9ebe0f932e6010b2ada64331f6e1e2b84d4681f9457f84b98391b44900c07cc355528fee0ad0e120cda0265cebd08d7829855c8f7c540e77cd71f7c12cac0dc381e89b5b28a94949df80c41757e2ba00cdafc25e3a96a0bf97b15d3375894430ad1c0bce96398bd29a90cb1b7253b6ec0a744da51a996fce28cfd5b0af740169c231a028f18bd6935a4932d902c879491f37f2dcac2de6b315d234d222f89c8603b05d67ce3aed34662d975e9246ce50b0ddc2f8c68eb4c2e18acb7a830c2650189e6cc0f658be51bfa40db7a82f4f1d6189bd91e1200291dc675f6b1b8df532b6e09e711ed5e91c75f1f92ff74f4c25edf0ae94c4a8a7a781e8c200bb77654447d2de49ec00a30acfe416ee15fa4c8584b8d57ba572fc6602b48f61ada31b3c546e93cd3bece8b7804be45db0e72adfec2e6edf37a3001eb801bd151ead479ee9fc7fef3f5a788560854b4d1d507353b7a42b4cba6bdc559ea86a18372bceedc17b5c4915dc4cda13854c31e8b63c803c378d8004e9f5ffa53cf9cf8d3a3c11605f7db76880c6483c797412ed4420c9a8492fa7db9db7462e866cb117c5fb9614d4767a0e3da281f728a5b97dc685a7a624195a9fcf1f2a7afa55ff54fb578117d9ce6ed33d651efd4836291fa566d5d6ca42f6e509900d53ffeb36499062b7fe183e560d59cdfb6d1bb7ce25ec6d4924f62162f1bde8ff6e89c4a3dfe073268ecf9ec302bfb78adb21c4bcf9b098ddd32234c6ad1445853bab19dc253fcb01a83516f8371abe694958a11477bf8e4039317ec1f987a797a45401b061a9e741ee7b685543cdb2e129002d20c785c91587387338955cd0efe5005ad4e81f5e1111c7385aadca1e89fbe2da61fa19e41c334275a1c99995cf6bc8ce4df2647991d3cb269850e509c3a0cb99e59f1bb36596bceff90b77f793b9333aa0bffb07a1b143a4575024e696c7f29ec494d2c5c845d632b110aefd3932555b1a42c2f633c3b2f3af932ba1baba4615c8530be762f5657fe808420c8eedd3f9e69e210f280677f33382bb9deb5686d8eefec3d981eff0f4ea84f30ce3cea1eedac7c27270f9825df09cdef14f2d05e757eaad31230351c76552b6819814a69b47c81f01b07b3fe32b1e6b66042a4863c10b755d2d8b66c7f71839ac9ad0a8c4bca26cf24421d8a39c97e2a41c889e83f8ffadced5319c0f2dfeea7434c9eb01e8972dc911e865815f3839669fd4fcee6fce34a5e2cae742decda931203d8b4387041656388bc70fb18eb250161b50257e351c4466c041aa5e3c5103c1c45de1b792e7ba9d6116ab2e5484fc5719058157f0324ebe46dc905ec32d79853f320bd5ef63bf8644a220488d5d8910be7f8643d17e42326a5132f798882a46f6b315a2028f1d48c1731de868ce8a480861e6e62abeeab871351fced13902cc72c237f0b3f959ee56666a02282675030b735a6ca04d69199512dcfcbfbc096b4983053b52412f49fcd1c09ba3b8d47fe14bd0bbed2ef5d77abd36c834af78b903157fac526d2c5b46c9bdd450e53519b68876eaa90fb5173a423a94597fe212a64d4263d972d45da4d06012ecb5754f568ea8fa99300a9d341c2c2f747ebfa14bedd814af9a364d18e0df7af98b127a79de9fbb479257906909880938354af56b1c0086271c5e32e12997ee2bee322cc1f27ea83c5cfc41d6d44e418a2473e25873d969774e4460867f373e29e1b675671a9306efd37ff3c9b943eae2232cf5d88ccc78a84b1015fe91ea82dda24ccb129099b4beb6f5b405b06d295f6062437b4201a5e132609cfc158d70f3b7cfc9be1187ccc279c29fc489177bb1265fa758678e9d2e97802dcc88c170276176c4b15e4b58473aa325af7cbac8ddaf47c152da316eddfd57fb4f6df1b884d19acf40dc037d702cef1b4b3bb441c85cc803baa4633eac1c80ae999733d7734bce0f188da52c110a95d7af6c36b2c86e4e8af6f1d5701a9ae086dc17484a9ada82e9eaaeaee4890cc8c1b4dfd7f7b4a526e2223d9b412739d678680da61fecdc52d394ef15ff34f6f18fcff15695d8a023fc18c2da15d5066de5a75834877bf1c447de47e2a89e1c310f47c95d04e75a02f400aba1971c450b0bbad96ad19c33394846fd0b0194ecb1d057a9ef26d4e0631129f3472b9b785357cab0dfc1ad5cb77b49fc9af1d72ff1a7798d74509d6d3d0ffccae6762f82000641e5d1a4d83b361d26deaa601b71caeb7ffe805af952a76d78c7014ee864836598cc64239768f74f2239c15c2dc8b5c8316e3cc2f1879d0c9278cdb776c91a4582b63edd673d5fd3771510048b163615c17694f2937db618921dc9f86e405492a96f07d96b9ced30d5c6adc29f0f725b4412e07cf9139486ff695b0151b6670e8b71b428dde9bedc6a99274550dd5010baa3a1009fceeff820d652ee72085396602f03434a4eef798ac0bd7446e0a3a102d387a8053a931035b75b9143d46a49ef2643568ff9d47bd2a067e92a73d5751543e2a307e729a4644684321ef21f92f9ee971b15060d2503a79c848798b9292c18f269e6213e10ee226612401c8f7727b0cb9d3153e3a5298fd0d64aae76c9bf85d0b3c705310eaaf35753ab2c86c97c6a815dfc451dbafd117bc004dd18881605f5c383f9ac739224dea28e8d64b2debedf307ac1515c1d194490303869dfce9931f003c7e5b83a06b23f9b0b43029e82e6bb540a416876de7610321266030e6338e588b25e400b07348ac0f60bc2c835cb654e94e2d46303e7cb2d41d1b3493fb27d84a5ed7980ced7d361d18ceaa8ee7a154b6edd0885c50364f908e0020297e2cbb199d8e66b5f31d70f266680b94a1d218288247ebee49be59d0b951e29c71ef7fcb5dcf7b86ee18e2201eb3e82bc63ce7f59babd937946b8291082ee83508470bb390225e8debd728bf47e608160a06d5baa691d57d0cb042e722bd74084b4b2f83348e351cb27ec1c55ba31a22a576de6014d770cb5f5ec3f5cfcde726c90553e605747ad453c17385835e239f5c7a3203b74f56f2c16b6d27f35dd3f530f7c9eb7d14d2604907313313eaac4a03e0a2c39e50b97e566ceb066f6c3001fdde00efb77b92f782c5f74b677fecf7387d04d80018179cc64625275bf3c3105f8bcececa1754c31bb5d9547875469881c1abae479658f91d262ea97e64d603ce10e92028670254ebe71a54d9a897209704e679fc9adac1822d1e68182aa939ac71735160f24e71ae5ed9b051a208fdeeffbe0ba914790e0b3326c7211a6e224bc029c6f51da93e668b8c17ca6e31e8693cfbeabb28ce6a65203532e9681340809a6a8eeba9ed5b3620fd898bb1bfd83db43acccaf1a84b8b45260f2cacf7584cd5e5410a5b2bd90e813df5eeef6cc0a88a65b4b865aee4acac3b0f28161fb2b5fadc45f4b6318d53e57d262f75c8d0af041d0815dfaddf7dbda228afafe2f9453060f5d488fffee3812fb362f732d827dda262cb675caab38303d8d3e8d04c5360ac9f9f393a5586ff2efb6279dfb1035727e3e48bf8f90c1ec96fe2655ed9b7820e19f9cb46b42d06d6e2e9a85d047f83518d46afc4e9c5ef0830b51a9edabeef900c6e0d4b5e1a3e2c8f2444be05eff15ab18eb7228cfe6122e6db86460425b74a1cd34121568b31503f85dba945d3908707a77d6a0974a62c0a17fa87a0151446896911eec187d612ab9af50cb512a8c2ecd6c79827098ff1a6db7e5e21c7ad7f988c467896547d6534c304d8bd8524db70ecd382c03491123614d7246507a43df5d716f38abbc55b82e5303c19c99ba582d7da334e4d96dc9fe3937e141bde9751865aec504e4f72fdcbb9d2887013a075dd55544f4da786ff714a1dfbed7bb3a7d7364bb07c3718872707782cb6857463eef63c0bb0e4172259467f10b8dd32a4f8b6fc41f04d51dd5a9ebf52ba5a459c6ab339ad21181d364f19aa4ad280631908d9a757afcd3a6fb09211c747b3c7a01475aa11943f558882e7550d81bec014c8d37a3e32c7c5ab5c122ec7d5d15581b32c3a3e7cb9eadea45bdf7756bcc0af6ea9d255e08efb05a2af1b2eb4fb9e432443e360eea64e3ac6442ea93685fa33df25494675d3304358e47c3d2185b928ad055473d98b34965f2127148dbefbc09e9611f94bc0a8dc9456cf8d92039ef92ea58158bae0f844faf870ccb4242a813cb525696f3b106841937bbbd856ab52433e967795644eafaac3022f6e5554aac0f93e52d07b9d65eeee1ac67643307c1d761ae85cb73630ad36ca3e2782db692a20738ff13e1a469812171e14c5d55884a68679ff9275f18d3d97f4931b502a256aa21d3e40cb803d71e1c22884e33e7055846aeab3960e5880de6537f45356d95ecb2100c33ac80252a86864b992a4a0b1cc865cfc37b800baebd649d3eb5f4cf9e05745539cc47701605efab84a075f3393a844f8cfb0104179ca1e44f7fc406f920daf1b25627f744a1e9a814788eb01a237b7a8ca1bd99ee891e47ba29c69de5bdfb529caba61f876fab504b6934e08af869f77cac0d72c06d4a1e88d081b0d67192edd8c9339f7bd836577010148d4ec2ee960e1fbd6afc5336947ef27a8bbc4fae50a9911b48380875439d6318e53b972f3e2b1b24d0353227ab44917930100c6bda83a1b60d95083c9cd15a3335d6eb126cdce0dda163632fcac175ba370f6d4b9729031ab5fc6081843812d7f79b9ffc4b5404cda4b7ddf4ddc2cba64bc05f091f34acd15c0bd94faac58324d155a8c1527e5940e71735135a76e9b6b9cf3bcd3bed98246c01da6309f70560276a7016f5289ebde214c42df6dc142e1069b43657f6870422208c18dd5f51c71ea71264cf4a3a859d481dbcd6a96105c654fe50f7d44262df856be6339fd55c8a40cc8999ff87f16416fddb785a4254d205e90159a7d7d6ff24abbd0402ba15bfe7e55bf7d0852d76890e4196fbae026922b520229a43ae052dce6c912709c2cfd3f9e8629a0f832db980e36400a64c7904d0533accf56090c90e52609ad67bd2469bbb7b5ed3503d1a604a7f45e526858c6cdfc47261f9145c20e89980e5a9a49e89c4908124b04bd7f245d7cfe5216addc8a7b622b2f2ae511f4127e584a308f9452b7c833f7f3dffed517c6157252c0954bba3f6e8db6259f98170affe331f206f35f49a056cfdeb4b0c180b995c0b493d5522ad2b76dcfe364c7b29c3198656176070b8dc101209730b5d13cce6b3d0b81e987cca60af23ce695600f46c228fbace1372554d119cea0825e894a5fa8fb521c36547f7076a06a85f18d0368d0c89388d54a8dbee9cc5900d84c7c10ee0c1d60e4ef87c721773b6560e895f1d8c9d30acc357dc9c8e4b1526baeea6a88ccf4c840e402e0b9d65d02fce3486d7716ec7cfe6d96721fe132ddb311c875143d98894449272cc1650b8bb8f5a7274487a02ede430cbf56892b5678cfa7165f34dda6e219c6ce8544d36e33be8ca5d010d06d2d1468227e178ca86b85eb5b3156520ae1d394d15453c8a23d6948dfc181cc09783d48a3ec588c343e66a35438c6c065ef8b5bb685e6dd0452be291f7aa4688a9267ad02eb9f3140f47d00fdae66036951c89381ceb581ed1e1379d3b5c920a9df1bdb177e43628df3fb7ad3c5e5cf5bcab97c14feb00f3ff2b49bc0f6ba6aa4a6123290bcb97fc"}) r7 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = dup(r7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x0) [ 2805.695088] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.707853] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.715599] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.726750] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.743773] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.754300] ieee802154 phy0 wpan0: encryption failed: -22 10:58:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x300, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 2805.786587] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.801623] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.809699] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.818738] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.828031] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.834849] ieee802154 phy0 wpan0: encryption failed: -22 10:58:53 executing program 4: request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='devpts\x00', 0xfffffffffffffffb) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) [ 2805.846853] ieee802154 phy0 wpan0: encryption failed: -22 10:58:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x4890) [ 2805.866402] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.874734] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.887678] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.902603] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.927733] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.938235] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.949133] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.971713] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.980029] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.989076] ieee802154 phy0 wpan0: encryption failed: -22 [ 2805.994740] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.001660] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.012594] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.020736] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.029738] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.036595] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.057835] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.059662] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.074600] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.082578] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.084784] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.086634] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.089492] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.091812] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.093648] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.096097] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.098091] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.099820] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.104603] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.106596] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.110610] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.112590] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.114593] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.116529] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.118216] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.119955] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.121661] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.123615] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.125568] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.127584] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.129524] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.131290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.133011] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.134714] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.136646] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.138616] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.140742] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.142611] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.144562] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.146674] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.148612] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.150571] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.152528] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.154225] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.158657] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.160609] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.162574] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.164786] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.166621] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.168551] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.170506] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.172196] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.173899] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.175626] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.177597] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.179998] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.184119] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.185822] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.187652] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.189611] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.191634] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.193610] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.195587] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.197594] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.199619] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.201574] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.203548] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.205532] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.207500] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.209181] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.210883] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.212622] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.214606] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.216588] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.218689] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.220640] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.222602] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.224612] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.226550] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.228236] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.229962] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.231660] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.233601] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.235558] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.237573] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.239516] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.241190] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.242904] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.244606] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.246588] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.248702] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.250638] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.252596] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.254684] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.256648] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.260595] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.262633] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.264578] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.266528] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.268211] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.269929] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.271644] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.273594] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.275534] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.277209] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.278920] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.280937] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.282673] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.284869] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.286614] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.288633] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.294643] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.296644] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.298600] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.300587] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.302556] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.307741] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.309642] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.311647] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.313630] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.315606] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.320740] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.322633] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.324639] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.326634] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.328622] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.333643] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.335748] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.337618] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.339628] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.341632] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.350661] ieee802154 phy0 wpan0: encryption failed: -22 [ 2806.364218] ieee802154 phy0 wpan0: encryption failed: -22 10:59:12 executing program 6: io_setup(0x5, &(0x7f0000000340)=0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f0000000080)=""/89, 0x59) r3 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x801) syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x7, 0xa, &(0x7f0000001900)=[{&(0x7f0000001380)="e430c944d35211df55ddfaea4916b2b941111d40960ac8e84f899a6642659379fdd11b5162157bbc9f4bf1f1a616bf6bec954de898cf2365e9035bb029050e5755bd5a5ea0cc86bdf7d1d1d2ba5de9a989183f86a652fb059b21d4f77a8a14a8f9525b7fbb181987b21bf49b6d1319065a9a3faa545666fe36de8c9b9576412d63b6e2df7f0ff7757abd445aae5aeddd5a79890ff05302416048a9c1f38b767ec645740b264215a844cd928d8a561f5db1e89e667e97593ac1ef8fadf78821fe6de4df17167bde13813442bb2e63ff8247faa65865d503fba46010c6559f0e745bef7fc4a0f70db4272f2a3a79d92ef22ea48fb7c7e9edf0", 0xf8, 0x5}, {&(0x7f00000002c0), 0x0, 0x7}, {&(0x7f0000001480)="34d6c13c222ed5274f24f39a6b5375d5b841672b77bf19d9362d7546ceeb974621c0dd089b76cff48cd93b9ff60a5a8dad1f474a58d331cc0502ea1d1818608b534460ebe1df657d1c6f0a30c62cd43d7c54c0968dfb85d41f691161f3845ed2bdcbc683516fbe73d64975e0d5455c08cf04ebacd57d8eef182933e96d15539b919f9393cd19ef17d1610fdc55053826b4003203b39821a2795f7501b6ef4f151c1c0a029ab215fe4dd1ae98cb3c92ebd626", 0xb2, 0xff}, {&(0x7f0000000300)="39cd93d32253cc532cc253cf6824111ccf62137af9d41e08ccfb3ddecf47ad0caf9e", 0x22, 0x401}, {&(0x7f0000001540)="79ffdb9cce6e287de679f5a3a3977320ca7534c5b0120c56ae99f945f70098b541f915f872a0caf1a6d412576cdaa945ffc4451269c414047dd66857d6f6645530cd3a01ff215de9b501ab0ad4ebe8a5f27bfa5909dfb134b4fea754c849414c1254487a4fb5e5dbe1a270dfa91e0d74f3cd7600a0d4749a7ee51dd131ba80d712378d617a2fa28a8f26ba0c5460ea94d552edd41b9032385ad8c56e50dc9e7c944d5b04bf80d206e476017ba3ee43f61ffe6e271e6a3bf6d2bee3abd104d56ef60b4c0377b5885d424a1ab73ddffa153c2aa7", 0xd3, 0x1000}, {&(0x7f0000001640)="41fa399b99b033120362e321ea39208aaadfc857c9119587c8ffaee122716e4edb4d27a998cbada12796bf8f67fa249a527dfe165ef07ea1e142794fc0fc223a703524fe76e9d2e5ae4e798bee07d3bb3486ad8f3d62f783dd52b8e06d85e8948bae95d8a9ff468d0d101d79da80d20db8e7bcb9f43e4295f07fe5fde0c2b6d33afe25627f216d29", 0x88, 0xc37}, {&(0x7f0000001700)="deab3197d9a77d3cb7758e1679321bcb4ce29c42f1699a0c27ea6f372785fda9799ab0496503a8491b39d1b1e79815f0d7b988612b2973119b8cc608f80cb8a9afcf489a504521d799329138ba616784cea9743b6d7957e4960f344e12a4425e005b4215745d646b3ae62fff16e03b8f4fb88813731c27f94f", 0x79, 0x2}, {&(0x7f0000001780)="78c78bb2da66fc717737bd7cd8b41d78f9b86f9b72a564", 0x17, 0x1f}, {&(0x7f00000017c0)="e5494c122b22a3dd850ea483172e9ded301415acc12d3aad7e0b3b972328d79ebbbb2b2e53f51e7be24cad41d327e7f7da7cf7617413523f6532d941a3f06086eb74a7f0ad533dab24155c148aa749dbba36b8d0db110319fccc77d665596aae1ff0d7b3e61e3c0aee451217e7e613762f1fa447904b47472d5e49a06de50cc4114ca7e1555a2eae10a5c1d78ffd7c", 0x8f, 0x7}, {&(0x7f0000001880)="240533d03b7cbbbb83fd96c93483bb35082546508a6d5dc155f9f5c12490149ffb07b27ad50217648074f9c176ea3b0e4dcc7e15f55220445ec3351392d077ef8d07f6c90dea0c6b412524240b76e78fad5932aa4d5491013ad3930d15e7b699e7ce775b", 0x64, 0x10001}], 0x10082, &(0x7f0000001a00)={[{@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x33, 0x67, 0x74, 0x32, 0x6b, 0x6d]}}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x35, 0x38]}}}}, {@mode={'mode', 0x3d, 0x4}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt}, {@hash}, {@uid_eq}, {@fsname={'fsname', 0x3d, '[\''}}, {@obj_type={'obj_type', 0x3d, '--\'\\:!%)'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '}\''}}, {@uid_gt}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x4, &(0x7f0000001b80)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f0000001bc0)="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", 0x1000, 0x1000, 0x0, 0x1}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000100)="216f79f820d3cf24a90fd9a010eb63fec06bbc17eb91e144813fbe57e66a8e2bb99e4ebf70fa09c84582f958de6230e8c90876e816dc057e12f315b3b0873a32950de00922c5e8149ef8a2b98d921b6ec172ef94a6d5e90d219e7c60ac74bafc6da77e8b62b61f95209ba74507bb259814d47b10b4103461f40ffaa9cf27e7c0d9dc72da", 0x84, 0x7, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x101, r2, &(0x7f0000000080)="3c8520156f43f683fc5a97bde467c7f6d10f5707940e04ab8e3072ed41c704a4445f", 0x22, 0x38, 0x0, 0x2, r3}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f0000001b00)="1bf3e8aa7f3ce30a031492f150f4baa95f15eaa2adb9cda09e64f279813a3b34a52759fd3791dbb27d40914e34322fcd5795046754d61a75b6", 0x39, 0x8, 0x0, 0x2, r3}]) r5 = openat(r3, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100) io_setup(0x4, &(0x7f0000000380)=0x0) io_cancel(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0, r5}, 0x0) [ 2824.796689] FAULT_INJECTION: forcing a failure. [ 2824.796689] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.799198] CPU: 1 PID: 15686 Comm: syz-executor.7 Not tainted 5.10.258 #1 10:59:12 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8010) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{&(0x7f0000000040)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, &(0x7f0000000140)=""/145, 0x91}, 0x1}, {{&(0x7f0000000200)=@nl=@proc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/133, 0x85}, {&(0x7f0000000340)=""/132, 0x84}], 0x2, &(0x7f0000000440)=""/28, 0x1c}, 0x8}, {{&(0x7f0000000480)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/70, 0x46}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/47, 0x2f}, {&(0x7f00000006c0)}], 0x4}, 0x6}, {{&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000007c0)=""/49, 0x31}, {&(0x7f0000000800)=""/252, 0xfc}, {&(0x7f0000000900)=""/244, 0xf4}], 0x3, &(0x7f0000000a40)=""/5, 0x5}, 0x8}, {{&(0x7f0000000a80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000b00)=""/52, 0x34}, {&(0x7f0000000b40)=""/90, 0x5a}, {&(0x7f0000000bc0)=""/213, 0xd5}, {&(0x7f0000000cc0)=""/123, 0x7b}, {&(0x7f0000000d40)=""/170, 0xaa}, {&(0x7f0000000e00)=""/215, 0xd7}], 0x6}, 0xffffffff}, {{&(0x7f0000000f80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002480)=[{&(0x7f0000001000)=""/102, 0x66}, {&(0x7f0000001080)=""/33, 0x21}, {&(0x7f00000010c0)=""/245, 0xf5}, {&(0x7f00000011c0)=""/214, 0xd6}, {&(0x7f00000012c0)=""/119, 0x77}, {&(0x7f0000001340)=""/15, 0xf}, {&(0x7f0000001380)=""/183, 0xb7}, {&(0x7f0000001440)=""/41, 0x29}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x9, &(0x7f0000002540)=""/63, 0x3f}, 0x1}], 0x6, 0x0, &(0x7f0000002700)={0x0, 0x3938700}) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002740)="c485bb98e0a3acc706ae82cbc067770bd85fecf85268540a5404c7b4866707c1797dc838bc838bd24054f85484f25b79fbae32610a5455f504", 0x39}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)="f0f2b66a33ef9ca4d9885630ee041807790ef086072fd00b6a9a0de214e3d1b9f1518ef8a1f9c75dbf7ad3b7aaa53dbd524589931ccad47cb8c1e9e0fabd3f1539e4bd995aaeac7926483aff6918dfc8e175ff15487458d2ddcc4972651cb94236c9bd6ff7c5889a99abd0916e7089be56819a703bbbce616c954a735ad0797c1539ab0dc1f9537d87fa5e7f7435697ad9003a574275ca33c004f717e7f608eb6bd434a4ad19dccef04a3dfb0a5ab11fd0bd1594e2e7d3d1a9992be76c927ea74fc5e424e40b5e106dfe70ae14b958648a77c52d73e6dbe77605442c1d01135bfe0f9598d7347b9ed672c3468189471625fc4cf518197292", 0xf8}, {&(0x7f0000003880)="48f0b3a507dae15db7ecebc6306f7fea21c8f42409a1938c64fb565aec446f63dbbd0330fef149955310dfa80dc2abe81b8458ab11d90ba40117d72e35bdbf072da51b1b2cd5bf22f2749cd6140244a8c7e9d6ddaa063bdb614c21852581c3ad3fc5adb114707ea2a70b79ebccb3dbb200ba02ee3a555928468b497b5ab2ddc29a89f9562f5355c5ad37ffcadbab193cde061e7d490a1989b2841797b614c1bb0d1007525a9be47dbc387c7c9fa4f760a4438a89", 0xb4}, {&(0x7f0000003940)="b8f91fbc0cc826cd1bdf99b21157d0ecc6726d0edd13566a01683dc543c909f8b2866478cb90", 0x26}], 0x5}}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003a00)="25e2d8bafd78750d1f52dd2465f32fec459313d0c410d1db2002194fbd650859e03fe270b70758a72b649f1d94751e7f25cb61438b8b1008c3dacb5f6aa6e4568415c8b4212deecfac69c7b33a75966028d1e84e5b719e6f17725d09f2a0b2dc3462d49af109", 0x66}], 0x1, &(0x7f0000003ac0)}}], 0x2, 0x20000010) r2 = accept4$inet(r0, &(0x7f0000003b80)={0x2, 0x0, @initdev}, &(0x7f0000003bc0)=0x10, 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000003fc0)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000004000)={{0x1, 0x1, 0x18, r0, {r2}}, './file0\x00'}) sendmmsg$inet6(r4, &(0x7f0000004840)=[{{&(0x7f0000004040)={0xa, 0x4e20, 0x8, @mcast1, 0x1}, 0x1c, &(0x7f0000004680)=[{&(0x7f0000004080)="31904f596ced69c5c0fcccbfdc1a96b0bea757a674f65f8950237168d86a5c012d3b704aa8a0de5b38b6415902b506747fb7f5538aa576deb010ae3f261d30fd7342a8cd234af50c5cfc1a571ac7b77edeec9fcb6a3f14591817272a9d5476529edb2a50c490868a26f4c6ceebb0862896ea2176c14a7a7323fe49e0fcdaf5280709d545b2aef3d03c88f15e3766812590ec3c458a35a38a7ce7c80231afcab20a7c5acb5e41a9053ffa1558f330ed0701bd2930eb5c65cb2847fc70602921a265abd50ace", 0xc5}, {&(0x7f0000004180)="9f74dba675b8b4158880e847024fdc431e909e94ec2fe569a16e8864fadcb23a885bf38d6898cf5e7d4e207dc7455ce40d79f13af20928ff05e6561281ac8e86d3d70340b27142053f1d5c02341eee24c7af372219056021f93a0209833690e883a653c4bd9d179400f8171c64e57ee47ab5ff4b728c688b8b176e091446b286e5026a4924a3da687aefe14cc484ee3896e50f767ed3c0d63bebb5c599851fae0c2a6ef81663c7e3617cee80bac5f8c34f", 0xb1}, {&(0x7f0000004240)="c79e36eaa0627a676e2bc422a78a242cb9b6d86d9d14292823d613e70029ce8571082b91f66b0d3e5fd9f30993d6c808e4a166d10bb1a7be6a7cd51f24bf1fe0ba36bb79180a8103fb4ac70bb07ecc1138154a4f9034573fd1814c2747ff9cac8fc31425b3f8975ba50b417cf6fbc401698620ef32f76515c50f680748066cc6c282aec7563dba92c1ca797fd8dc468ef7991879e8cb4405e97547d163880327a1b71b1ae0c573c3c3f3e5d2b08390c2066bcfa075a074d68f18a3cfaf3b4fc8a1a77f8fa07c7bb4b15e1c1a2bae6c2d", 0xd0}, {&(0x7f0000004340)="c8bc1cd56d58d56cd776b5363ae41e690bf8c9484e3a2e49af3562a5ec9015847f7e929229bcf90f6fd27d9247627365f41fd2c696219921307990c3c086cd12b6a296b6050ce509753255ca4a49e9b34baf45e24c7218e26fe41a81e94c29870a7e9537777e73330c20bb00655c5b", 0x6f}, {&(0x7f00000043c0)="35026c4ef006fc13ea8e0b90405f52633981424e76beeb09f95ec8ec2e3d5258667a0aedc55288b0395ed41310e9a512ef3e21914996be64bffef6b133392b6c8cc2c4576f15a7025d5e60f6b08aaf847f6da6ef2695a1c7d44da7b7183b7e24bdd613179c27e7463f2f79e055cda49ac90d75129f3704634f187cf1ebd5700ffd046fb241532c2ba3c8b8607105fcddc1fa43fa0e422a931ce85f373b2475ae132e5619e65b3fae79f5e9ac", 0xac}, {&(0x7f0000004480)="2955cb7d6d2852115e6c85bef1f1367eb9809c16604ce29316254250e57a0765ed37ee2a7c9f7e9be679dc354cee589ecd10a0cb4cbf6bef779d9feeee23522d3a9192a7d161517954f49100bc0dffc2f6335bd1fd9d223f368eb316c9233f55829ab5bc3147b45666d0bb55a9c72a00b4dda1ef6e129866762e25187ec49bdb67828e9de100ad53b27ebed0dc3fa2df111f2e9dfb845229942cc7e397170544dd134b2d402c8e3967", 0xa9}, {&(0x7f0000004540)="96b229a2ba058369f1b632451f93e685bc0167ccb37cfda8", 0x18}, {&(0x7f0000004580)="6fe7e2ecbe3cf57b809d3224b281541c2d002751820312db07687513ca7e1b499b3298698a3a0f385c399853bb0d748d1a07daaadff94fb50c41f31818cc61b8bfc8b2a196a1c840036e9d188f7052fb0395ef2e8b2ac092ac1e2e562b2e041c91ce66eee4f76409a8e168ec9f8999baa94953a6ef5abcb614baa27df9a0b896e2a4aed8830c582f4af683dfcdd61b1086dbfae02115408d7d55885c17cb0d0cf4bdc9d5168a2e185f274831d65653772ee729914122bb7dcc966ae3aed47888cbbb4079", 0xc4}], 0x8}}, {{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000004700)="ce01b6c470916d33670bf9644a20754997ac112e9172e59492243e8b1db279df7f9a1e4729a224f52cce59f6048ddb3b48d1e0b0a23c3f7e5cd2b4fa54c0322d86ea6ee8ec74a845b6", 0x49}], 0x1, &(0x7f00000047c0)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xfa}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts={{0x20, 0x29, 0x37, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xb7}, @ra={0x5, 0x2, 0xff}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x20}, @ra={0x5, 0x2, 0xfff}]}}}], 0x80}}], 0x2, 0x20000040) fremovexattr(r1, &(0x7f00000048c0)=@known='trusted.overlay.upper\x00') [ 2824.800932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.803077] Call Trace: [ 2824.803648] dump_stack+0x107/0x167 [ 2824.804418] should_fail.cold+0x5/0xa [ 2824.805217] ? create_object.isra.0+0x3a/0xa30 [ 2824.806175] should_failslab+0x5/0x20 [ 2824.807007] kmem_cache_alloc+0x5b/0x310 [ 2824.807863] create_object.isra.0+0x3a/0xa30 [ 2824.808784] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2824.809862] kmem_cache_alloc+0x159/0x310 [ 2824.810756] __alloc_file+0x21/0x320 [ 2824.811536] alloc_empty_file+0x6d/0x170 [ 2824.812403] alloc_file+0x5e/0x5a0 [ 2824.813154] alloc_file_pseudo+0x16a/0x250 [ 2824.814059] ? alloc_file+0x5a0/0x5a0 [ 2824.814903] anon_inode_getfile+0xc8/0x1f0 [ 2824.815802] io_uring_setup+0x138b/0x2980 [ 2824.816689] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2824.817755] ? wait_for_completion_io+0x270/0x270 [ 2824.818811] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2824.819917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2824.821046] do_syscall_64+0x33/0x40 [ 2824.821893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2824.823010] RIP: 0033:0x7feea834bb19 [ 2824.823813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.827750] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2824.829363] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2824.830882] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2824.832383] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2824.833886] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2824.835403] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000004a80)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004a40)={&(0x7f0000004940)={0xf4, 0x0, 0x603, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect(r2, &(0x7f0000004ac0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3f}}, 0x80) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000004d40)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004b80)={0x150, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x12}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x340d}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x94}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000004dc0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000004fc0)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004f80)={&(0x7f0000004e00)={0x15c, r6, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20002804}, 0x8000) connect$inet(r5, &(0x7f0000005000)={0x2, 0x4e23, @multicast2}, 0x10) recvmmsg(r5, &(0x7f0000006740)=[{{&(0x7f0000005040)=@ieee802154, 0x80, &(0x7f00000060c0)=[{&(0x7f00000050c0)=""/4096, 0x1000}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f00000061c0)=[{&(0x7f0000006100)=""/153, 0x99}], 0x1, &(0x7f0000006200)=""/247, 0xf7}, 0x8}, {{&(0x7f0000006300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006380)=""/191, 0xbf}, {&(0x7f0000006440)=""/137, 0x89}, {&(0x7f0000006500)=""/75, 0x4b}, {&(0x7f0000006580)=""/225, 0xe1}, {&(0x7f0000006680)=""/1, 0x1}], 0x5}, 0x6}], 0x3, 0x2003, &(0x7f0000006800)={0x77359400}) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000006940)={&(0x7f0000006840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006900)={&(0x7f0000006880)={0x78, 0x1, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3f}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xffffffff, 0x7, 0x0, 0x1]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x120}]}, 0x78}, 0x1, 0x0, 0x0, 0xc041}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000007b00)={&(0x7f0000006980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007ac0)={&(0x7f00000069c0)={0x10f4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "98fd59d2fae3081ef207fd077e8ac2672a44cf2cafe246e6ef4a1a68ae50836cf42c20c345bfec0f04cc4b2983208aec5bf493ebcad39ad9f2af6e25dc86db1a290ff6ba6ea23f827359c6c6dfa71c43fbd4595970f7bdcecb531e5a4fdfebcd37449d7ced2567f510882cdbd9adc4469bfba5df97673062eb0aa6326cc541a0fc997039c0eeadc821f508e780bd372d1529ded68b27157343ff427943045d7fb7cde5e62045a66a1f2facae57f375dbab35ef38beefd4d08837170269e68699b7f0c9f0f27dc3910b963ab640b747f191c1b9455a812aef7d8defa3ab5af2763c58deaf59122f4a5d05d0c224d9d154d33c13df7b97cf852824fde561ae90e6275d24e4c903d00256c647cceb0bccfeb93a64b69dd2700980ba9333374a5d746c76558bdd89e3dbbae61f73dc5c95afd5eb27f13e7d36ec5e8cc17b8e20832e084bfe58f7f4615e9929da2c92739e5efac2d7459ea020d9160c8bbd45cc8e346895447481f173e98d0684a8ea042acfd61939757e9dfc6fe7bc740cce595b8d533b5d8b0c7fe135da5fc1a3a465bcaa91377d0b5b777abc7d0d3ff11730f64ca1d279367182373efb12f4d805c15ecfb2c31f84d246f86fb637f4f07cebd3e3356a8b785aad78eafb76059284ec03ae7fc783bf0afcfaba3b41337fff3651f9970d8c3f2d41d1b0132c13058217a174bebc6862d02c23cba51d6534f2590a594a24c399d2cf10e9502e8bb54e8beed9408c591c0f973b72226fa332258dc56a18c41f2ff72ef1a00bf4e2abba59dfa32c191aa0540ee589c2a84659945b891d46a40e00fc850063e99404c67ed406657a6a019088c73a2f3b266a7cdbe6ec365b5494d129a7be12e1141309470734b97938c1f357c8d76334a86e32f96e701ffbf6dc7f346bad003c33e5f82d5846b781e726275ea659d4e448859d2a807fe6ba88f2ebad9bf9ed1543d31f983373f221fa2bea2e2f5103911a6d43b7f18f961350400ca9393b09f8e213cd9d41326fdfdb4923e08a0f63f5a1a97158c58dff48f00044aeb7c41cb04428b33d3663662375e4176742b515af56a5570adf975942a3a388a7779643fb52cbbc276835b58e395c8188a79f99206730f59bd424a5c90a7d4c99d22847095d25e3e96d7e572cd10979b1211d6f2efb988d05accf1cfb0bc973b28359438e926a6a3266af5c595a838998cb0b2988e77a66740ebb2ec39f4fcb9459c990f582f25588a8e5a570c00b32a49ab13fcd75484b54a47ca02fcfc39f7d3ba39149541c4b8f8e1e450a23e81bfc6a570b8dfdaf7418b1874e02803f1e1cc005f2fdbf751711c8de79a991cd918ccd7410faa10019ec2767dc87656faddba118df0916c35847e2c065af4cc5bea9a6a823c56ceee127f8ce85aa3c6655a3c1bfe9c3b7454ed714701e37c5fb5cbb28734129ef3540e3338305399cac559a9f80b027a42eab1868ae4a1c612776cfa0e64c7bef4248a8fb4c6a1f1ab2b72e01919b0f26f9b5e19e83a46d4dc98748938c64883cdd25193a671664b81137bb82d1319b41001aa5a6218dd9646d9aa0d64efe60f3c65dc43cc0f9801df45659a9b55b57149cc8f162e8fcbb1dbb5e62d0ccecff98b418e34d12fd6990ef0261953abc34af2002a43348a9ba497017ae63c4653a8fadb0a618ab65e91924e4a1fdce41a091c42d491f1702b90411c7e556ef4019673c51fefdfe3ace3e62f7384bdf55240daa482120e0e1144858c675b2044c887849bcc6b702bc5b8cccf92957a7e457ab641c3a6daf506cd164c5fcfd95a43248556fce56fa2aa629b1a9f7b5168984fd0fce735725a4ff6586da84eca211cb95e7e69ca7ffc29a5d6ed1af0ba9df2f8ebcdf8ada6b2b46693e93413e64873db998517a6f9ecb956d91773f0cb03ca8b1f01a5c7da18a8b48d079797097818841980afa3cff64317ced1511371949502cb0eec5f9f14e33dd9f7dfdf942d6c2880a389d1608b106386955308b17d549257c9e8562a43ecf730aa0247f0568b7cc3d25ae734f44b483bd229b07a652f8a4fadf17567504bf6da2bdb0ac2656291af8393b044ddaa208cfa520afe7e5c20cbdc4fae4a36ffad9700691e98aadcb6c59feed9dc10fb0d7e8d60218444ea0a4c3d84ae5fd0cdf43a8c864806234e2061f7dcdc2bcb2d0abef818501f09363a85f6637add0a4bb74ba3d766bc6102a8516fbf5db33ad096f12617c9dcbac288eed2fc95d0cae0f601b1878582f6f4c1e70e3d859601668acbee1540128273e82076f66ea8dd59091c94da0b34ed92cddf1d44ddf82da26379e6b18f921bf25b6ecb173a9871cc659f2bdb5f8849439937558ea12641169e695ce7e8f9552fcbc3decd720bb75ffd0bfb2e9bdefa012274a96d9ec7809f7e1aac523f6b0a0a9b8e6e2ccd00128a8221d5ef9ea050746be01be1bd84ff522b3c3fc6665077e6bc6e3e99b230108f85e673176ed9ce67d7724a0120ce10cffeadcd29ccba6be5deb6ffd3235467b5920ef9639c67e7ede4d556af0f54ae725042749c532c203c6a633699ce4c476b6e273d5d7744209faa0fa5e6435e89ee21e6bf28856c1ea1ed4cd371cd5bc48f56236871481e95325714ab4e7cb1a683adb5a456f1f3d861bb13aab5188a9cce7cc72bbdfeaa65a7094f2d6c5611534ff423ac003b63cd3d73cac642c73838240ad122257bb0bed550d9d8958726b2279342ba2c85fd7b323f673ff33553daa7aa779d70ce216d20b950eb85b76ec50e39148febf99fa98510341a6137a760352c85a2336bb7838e142c2e11fcc3433a596382f9512345633f7adc7b80d2783d3c131c0f6a83bca0675fe8000a4d5084061b398bd8ec2e60cfa15a902b74bb180098b0151a1345d8b9a111e71817afbfe17438a9ddf197623d82d6dc065fa0a54c8c1d7f6ec89eb1dbedf6f6eeabf677e85889384be590515b764f44207a5e3785325fddc13048c5777d3bbd5dde56d20de3838a059cf8af8e94a959ae5d8faabe3a3bec5d2531f8c3b2e086d0e3a7a78d74df7bdcf7d0a03d0fa29849505d1a9b97fb12cc9c76658ed38a14060208cf2520f8ec02368337b423d66e765217b82954da3faf7cf23d194d94b58936ba5573989ced8340a5555130575a3e84c7ce2addfe9b20d73277642d78f8596559d3bf033721d577a9eefcef3368aa6e8fa8c9753ee281aa76de9a95097da1c1e906a688faf4f8bfb38874461d6a1bb1ad5d800149c55ac2ed50d5690ef967ac143922bcfaff70242de16717cddee73aa221e1c753c74a3e65f3525974845105b1cbe18c5273dfe6af4b100a87b936ff2b7c5e6b7fe8020a5d77c395877012414a4ce5425c2c982d26178c67506f01c583e8e0f7471fe1fd8aed84d533b8ae4ccfefed32c69f187d619c6bfa4cbed3284f15cebac256cffd877aafd2e5f5f6c34e7ef15ac0807eeb4e53b26255476fca816ee28da240fa9778da5c6f7253201cd5c56dddabcc2377eebd50c3f2bd302605272c9f568b87f8f7be947eacbd6b81d4bbe1c6ee2a0eee04a6322a704020819954a4d138b2d2844cfac8d574ca8f6c9622fb83a1c4d00cdcb635ca983ec17c79838e43f9b92665d07ce95fdbc4c8d0cfe6621ffd33650447fd84efda46a0c7e130bec4f056a703b2320d8529ca923a64fb9574c0b4fa8f91a56e2ed4f566c932fddefd9bbd079c87169b081a82068773319797e748c4307b2d292e35b2e4cd595ae5a567764fde05dfb89e4e6876a185756d29a11511796fb8605ba13a185ee21c6bfab22567a73f3d8a62f12b5ad990376e47f31e4c604ed2f0ff17167044fac3a1512891b0b7b0b5d0fe1fa315c6ac9f427607b7ddf346f76f05b910a0afc783ffa9ca08f16570a260315ad3a0e7cd829c0c1b237368a924be4716e61dc8ac6053ecd9aab675439389bc3e76423950ce859dcd4ae955cc012e9f33fb2c9714cf87c5b34131d239f5f3da8021757bd1fd2c1b218d09dbcb31ad30aa0a4980aeeab450ab1e0aa77bbc1b0dd833bbfa9b9043e5e6c5de40e2bf1140fdd42921d33e70c457425f715e2c4a67ac76b74fcfe986d9e2947cbb14fb6ca8622633a3e50342d16d321ba191409628179d6ef8f67c07d094d79a6dbf6cf7866d359318d3674cb0e0eb43877cb211d4eff23fda1ac3a8ce7e820c06e24f48021c281a8645ee92ee300528a9d81278886f3957ba91e0160d8dc0bee6cf3d2d215d1178a9bf9d968995f9a558d0dbdca2be576d708fa4b6b648e2865301ecacacf02dfbeffd9c4d6e52db210ae34907a44d1da95c47adbb147d5895f4d905f5ef03ae40d398434c27dec7e262302860a0f25407f25c729d2391e6c9108f9ac9f697b0478aa30e9c7296b985f18a5fa059ee159c2e3c90b1927aa9fc1f4dbdd68b4e08c5555f40718ca8c94a2b4bab84961b7d30bf54deb21289374f3c2793f6d2a66df320d34e2d808308fa5d37fe5b386d2b07039a47133014c246639f1620607eb8654039a530f8373bdb5cafccf221410f6ff80468dc0d65eb7ae53ceae0e6da46bb72c7f9b1348b761e932d8d47629412af9db7ed867a26f44593c6f140be3b53f6b11577857d73cd9ec4b687cb7b89d3c2fe1f1cb737aea773051141277ddcd6b64f9cfbaf68eba089b5909c4f9dc84af78c276be4307c9f3b6fedd4482ebabd52a42fe8fee3a62e1046baa9f405922964ed62eab953dfbcbb2969af2e29b1a303df865c2c673c935c49c2efcc14ca38a8151d4f0aa7961a122f2638a6b73ffbde488e907d9b4d311f4fa2d77a150190421613e4de3ec7922f163c7a4ac8813814457edc946563cb0989222b6e76f42be9d52dff694f0d9cd4b58ee53ef542b6bba5ee4ea7be4e2f69c21fba2408a42ab300e08d9b27be158cce1bb10deff57a214326853d335fc55cc91177528d6d81968b5c4ed3a3c8f831338e8a25a998d7c694910abee3bc42a5d6d45d29585b9a5cfd2d1d581a551e3b4e31be1e28b12ceca6556bcd9812f23eefc7232617701ca0d11335ba1dfae7b77bf4e89e6bb5e2c14d7aba5a144595491382566cb7581277f48445e68ca46514ef73e7db51270ac3147af9745f5d85159bf53641ec811f1383744d026549c2f65e266f9cbc32c618a5a15abd5d82b714f5682dece3c4e95815e649a4eae3d335e84598c68db34263da69600cbd06a9f46f3ead1b3d2c993a70c81c00365c3ceb9913fc1206373bb69cd3ba620008938e5f152f3f2d0aeed4f8369fe112584a3eb77fe645721169801241621a33f10830c8699057296d26397611d897b66aaef1846d0849f8fb50b279d979df56acc3456931e9c282d49fdb50dbb43ad3b5f2a644fd04cd9810b0ea96a26e158f46307adb1b23df5f281114f11f317933838dd76bcab819f06e3b8f68dad47a4594198ad4f94c4b328e6580892af13481188b390014c314980b5ec38d6c19b36a4a3339cb673f635524e9f8e23132312306c09a26dd2ca41eb3376ea07f23b5fe05c37886ea760d65073a523011859b29fcce26f2d9b05ca791279d780ee52d5b18f429f09249ae58a7283fc6c522b3ec69b1d35e0e5cc6cce02068b0cce4734cc9a886ae88e000ec3edf40c3ebde52081a1ab2b497cbe66f18e9276388b43b3e536799e19ef9fb4712538f94071f90e1d6201e7d32b458d851817bb852b64e0b71742823bfdb7f4e24e525d06932c8dce38188c44e60df05398045c9af736288f31fb4b5ff111d61c2d3b1cb244d95c394c2fe869c2913c4d959644b764c64c8f8e056f8e31d457771f4b6dbb7a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffd}, @NL80211_ATTR_FRAME_MATCH={0x1d, 0x5b, "3e9d4e0c3be521d5d3e2b6032684bf09ab424187885816b797"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xa3, 0x5b, "334243b540881e63931a0e5cd4f7d7f88d1b357d877ccfa6b99d0cf45d1b9593667a4ba091c21bdf561d1c02dd39de86d9ac5637a4cbac0497201618f4dc894404947ebf3a3ecfddf49bd0fb006ad1e25ac43b25784f22e993be4cf3f102ae274afbb4870ff0dad2daf1f11995fef8a5577be89763de8f403dc978bca8f4d1a4df185718bf233d462ec9a386d0d4c1fd1d1b689db72098adb32c16071e09df"}]}, 0x10f4}, 0x1, 0x0, 0x0, 0x80}, 0x810) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000007c00)={&(0x7f0000007b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000007bc0)={&(0x7f0000007b80)={0x38, 0x4, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1000}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff801}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000007c40)={0x1, 0x2, 0x15}) 10:59:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 10:59:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x500, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:59:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 24) 10:59:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x10000, 0x4d, 0xa}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x80000) 10:59:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0xe000, 0x0}}], 0x1, 0x4890) 10:59:12 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000080)=""/89, 0x59) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001e00)={0x0, "a074b0cdbdbcc865a13156ce28a946fd"}) r4 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) 10:59:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x600, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:59:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 10:59:12 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x1529, &(0x7f0000000180)={0x0, 0x261e, 0x0, 0x0, 0x20c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)="a6", 0x1}, {0x0}, {0x0}], 0x3}}, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = syz_io_uring_setup(0x10005e4f, &(0x7f0000000480)={0x0, 0x20001, 0x0, 0x2, 0x2e0, 0x0, r5}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r6, 0x58a8, 0x80000, 0x0, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000200)=0x2, r6, &(0x7f0000000240)=0xfffffffffffffffd, 0x10001, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r9 = syz_io_uring_setup(0x10005e4f, &(0x7f0000000480)={0x0, 0x1, 0x0, 0xfffffffc, 0x2e0, 0x0, r8}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r9, 0x58a8, 0x80000, 0x0, 0x0, 0x0) fsetxattr(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="bea5e7ec62"], &(0x7f0000000080)='\x00', 0x1, 0x2) io_uring_enter(r1, 0x800012d, 0x0, 0x0, 0x0, 0x0) 10:59:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x40000, 0x0}}], 0x1, 0x4890) 10:59:12 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 25) 10:59:12 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r2, 0x1, 0x7, 0x12000000000000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) [ 2825.041077] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.045557] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.051578] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.054018] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.057642] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.061365] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.063947] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.066205] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.068603] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.070852] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.076575] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.079708] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.082113] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.087643] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.089814] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.092051] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.096205] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.100479] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.101288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.103608] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.105791] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.106797] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.108993] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.110097] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.110993] FAULT_INJECTION: forcing a failure. [ 2825.110993] name failslab, interval 1, probability 0, space 0, times 0 [ 2825.113710] CPU: 0 PID: 15713 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2825.114820] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.115378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2825.115387] Call Trace: [ 2825.115423] dump_stack+0x107/0x167 [ 2825.116406] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.118316] should_fail.cold+0x5/0xa [ 2825.118364] ? security_file_alloc+0x34/0x170 [ 2825.118923] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.119641] should_failslab+0x5/0x20 [ 2825.119671] kmem_cache_alloc+0x5b/0x310 [ 2825.120609] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.121356] security_file_alloc+0x34/0x170 [ 2825.123309] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.123381] __alloc_file+0xb7/0x320 [ 2825.123934] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.124882] alloc_empty_file+0x6d/0x170 [ 2825.124916] alloc_file+0x5e/0x5a0 [ 2825.125823] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.126735] alloc_file_pseudo+0x16a/0x250 [ 2825.126765] ? alloc_file+0x5a0/0x5a0 [ 2825.128043] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.128446] anon_inode_getfile+0xc8/0x1f0 [ 2825.129425] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.130154] io_uring_setup+0x138b/0x2980 [ 2825.131134] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.132038] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2825.132119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2825.132829] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.133583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2825.133623] do_syscall_64+0x33/0x40 [ 2825.134717] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.135378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2825.135399] RIP: 0033:0x7feea834bb19 [ 2825.136785] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.137130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2825.138030] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.139110] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2825.139143] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2825.140016] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.141195] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2825.141214] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2825.141233] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2825.142526] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.142822] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 [ 2825.143729] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.179680] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.180687] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.182207] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.185665] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.187193] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.192649] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.194051] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.195486] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.196887] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.198693] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.202981] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.204494] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.205846] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.210572] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.215780] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.218070] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.220687] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.225738] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.228546] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.233676] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.236922] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.239010] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.243565] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.245651] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.247932] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.253059] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.255158] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.259119] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.261185] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.263565] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.266186] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.268235] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.270909] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.273026] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.275721] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.278666] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.281664] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.284607] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.287673] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.290662] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.293671] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.296659] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.299640] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.302655] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.306032] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.308191] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.310867] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.312938] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.315901] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.317997] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.320915] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.323016] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.325679] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.328660] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.331919] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.334056] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.336643] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.339106] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.341043] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.343838] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.346638] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.349836] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.352508] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.355633] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.358529] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.361618] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.364522] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.367903] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.369895] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.372597] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.374925] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.377852] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.380553] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.383090] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.385078] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.387905] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.390573] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.393853] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.395899] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.398645] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.401775] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.404599] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.407073] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.409881] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.412833] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.415558] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.418576] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.420884] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.423850] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.426591] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.429851] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.431928] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.434950] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.437008] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.439742] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.442659] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.445661] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.448599] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.450706] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.453945] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.456110] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.458906] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.461052] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.463766] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.466852] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.469037] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.471975] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.474142] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.476674] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.479062] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.480977] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.483558] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.485878] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.488542] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.491839] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.494548] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.497676] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.500898] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.503559] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.505888] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.508585] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.511045] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.513056] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.515909] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.518906] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.520982] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.523869] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.526566] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.529162] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.531496] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.533998] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.536083] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.538731] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.541652] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.544657] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.547881] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.549951] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.552576] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.554929] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.557557] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.560127] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.562011] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.564849] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.567547] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.570627] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.572981] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.575716] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.578039] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.580843] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.583818] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.586560] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.589629] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.592813] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.595522] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.597651] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.600034] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.602027] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.604641] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.607049] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.609074] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.611616] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.614117] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.616151] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.622027] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.624151] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.626840] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.628955] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.631895] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.634013] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.636647] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.639082] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.640991] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.643911] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.646651] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.649040] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.650952] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.653621] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.656645] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.658872] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.661550] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.664610] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.667859] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.670514] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.673967] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.675944] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.678603] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.680899] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.683551] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.686631] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.689216] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.691192] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.693890] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.696548] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.699561] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.702615] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.705868] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.708507] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.711645] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.713974] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.716623] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.720785] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.723669] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.725929] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.728546] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.731586] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.733834] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.736561] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.739788] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.742589] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.745842] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.748232] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.750115] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.752821] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.755617] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.758546] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.760857] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.763551] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.766625] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.769048] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.770960] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.773638] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.775915] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.778654] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.781075] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.782958] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.785608] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.788850] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.791537] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.794656] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.797937] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.799892] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.802602] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.805620] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.808667] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.811614] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.815040] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.817120] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.819967] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.821903] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.824514] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.827595] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.830622] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.833613] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.835899] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.838577] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.840485] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.841949] ieee802154 phy0 wpan0: encryption failed: -22 [ 2825.843822] ieee802154 phy0 wpan0: encryption failed: -22 10:59:30 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) fallocate(r0, 0x1, 0x20, 0x5) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f0000000080)=""/89, 0x59) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=r2]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x10001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa4800, 0x0) r6 = accept4$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0xc0800) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r7, &(0x7f0000000080)=""/89, 0x59) sendfile(r6, r7, 0x0, 0x66) sendfile(r3, r5, 0x0, 0x20d315) 10:59:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x2000000, 0x0}}], 0x1, 0x4890) 10:59:30 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 26) 10:59:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x700, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:59:30 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = timerfd_create(0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESOCT=r2, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRES32=r1], 0x34}}, 0x20000080) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x781980, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0xc0f85403, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x9}, 0x8600, 0x0, 0x0, 0x1, 0x9, 0xbc7, 0x90, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000280)=0x1, 0x4) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000380)=@random="be719bfe0f07ba2cf78c550deb6835cf28cc61792d39", 0x16, 0x2) r5 = semget$private(0x0, 0x1, 0x0) semctl$SEM_INFO(r5, 0x0, 0x13, &(0x7f0000000500)=""/234) semctl$SEM_STAT_ANY(r5, 0x0, 0x14, &(0x7f0000000300)=""/85) 10:59:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) [ 2842.562842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:59:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000040)=""/25, &(0x7f00000000c0)=0x19) syz_open_dev$vcsu(0x0, 0x7ff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) 10:59:30 executing program 6: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001300)) stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) r3 = geteuid() stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) setresuid(r3, r1, r4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x4, &(0x7f0000001200)=[{&(0x7f00000000c0)="6085ffb03b2e23a070d3c3c3bb8356e0d77aeaf84bbaa4d99937c9d1c0e9c4bce5b07bda5f95b16a544a6ee9497fd90810c7e1ff3340f74119fe7759c282852b1a78c6dc1a547fec82c5cfa85cf8256d797c4436b0061ff1e21430416ca881e79971660f07b744a0abc86cbb0428e024fbd50babcda0d3f93280cd9032a4e7f4bba59b45fcee89d6b8151068b98381", 0x8f, 0x1}, {&(0x7f0000000180)="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", 0x1000, 0x1}, {&(0x7f0000001180)="d7914bd8480230c32f4305a584e46d5ea145c3ca8ec87f159d7a8944", 0x1c, 0x5}, {&(0x7f00000011c0)="f77336d30a3ba8caf800f7", 0xb, 0x7}], 0x41, &(0x7f0000001280)={[{@utf8no}, {@fat=@nfs_nostale_ro}], [{@dont_appraise}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', 0xee00}}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) [ 2842.590885] FAULT_INJECTION: forcing a failure. [ 2842.590885] name failslab, interval 1, probability 0, space 0, times 0 [ 2842.593133] CPU: 1 PID: 15727 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2842.594463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2842.596109] Call Trace: [ 2842.596648] dump_stack+0x107/0x167 [ 2842.597380] should_fail.cold+0x5/0xa [ 2842.598143] ? create_object.isra.0+0x3a/0xa30 [ 2842.599031] should_failslab+0x5/0x20 [ 2842.599793] kmem_cache_alloc+0x5b/0x310 [ 2842.600610] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2842.601701] create_object.isra.0+0x3a/0xa30 [ 2842.602594] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2842.603595] kmem_cache_alloc+0x159/0x310 [ 2842.604432] security_file_alloc+0x34/0x170 [ 2842.605289] __alloc_file+0xb7/0x320 [ 2842.606028] alloc_empty_file+0x6d/0x170 [ 2842.606828] alloc_file+0x5e/0x5a0 [ 2842.607546] alloc_file_pseudo+0x16a/0x250 [ 2842.608377] ? alloc_file+0x5a0/0x5a0 [ 2842.609154] anon_inode_getfile+0xc8/0x1f0 [ 2842.610014] io_uring_setup+0x138b/0x2980 [ 2842.610851] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2842.611894] ? wait_for_completion_io+0x270/0x270 [ 2842.612849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2842.613900] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2842.614925] do_syscall_64+0x33/0x40 [ 2842.615650] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2842.616637] RIP: 0033:0x7feea834bb19 [ 2842.617351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2842.620958] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2842.622451] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2842.623881] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2842.625278] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2842.626677] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2842.628064] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 [ 2842.652146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2842.653992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2842.655980] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 10:59:30 executing program 6: io_setup(0x0, &(0x7f00000000c0)) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x0) io_cancel(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000000200), 0x0, 0xde, 0x0, 0x5}, &(0x7f0000000340)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x200, 0x4) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000380)={0x3}) mremap(&(0x7f000081b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) perf_event_open(&(0x7f0000001700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000410016a33ff364b310ca3e92a0b3f4e4ff98f3a452bfd0fdc392f98a7eb511ca1aacf59a3669e80936ddd0c0a6453f6841f98ea1d29d9bb2e7721e2fa97e082c591b7e1901a2998405d249aff93d6937ea160cc1646a9b1d0536a78a067334b833fe7381959029f83463099276e9b0a398b16174d51ed03d14d316d3db1599782e1ea432c9"]) mmap(&(0x7f000081b000/0x2000)=nil, 0x2000, 0x1, 0x8010, r2, 0x7d466000) socket$inet6_tcp(0xa, 0x1, 0x0) 10:59:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x900, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:59:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x4000000, 0x0}}], 0x1, 0x4890) 10:59:30 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="2f6465762f738fe5ad5c7a01e79bbde5a59254dd673000a9bd"], &(0x7f0000000240)='./file0/../file0/file0/../file0\x00', &(0x7f0000000280)='exofs\x00', 0x1000, &(0x7f00000002c0)='hfsplus\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mkdirat(r1, &(0x7f0000000300)='./file0/../file0/file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x88004, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2f6465762f6e756c6c9f29d3c837e2dd6bb759bf20623000"], &(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x200000, &(0x7f00000001c0)='hugetlbfs\x00') 10:59:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 10:59:30 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 27) 10:59:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0xa000000, 0x0}}], 0x1, 0x4890) 10:59:30 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004438cd0045040d60f44a0102030109021200010000000009040000002f737900"], 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x44e, 0x120b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc4, 0xa0, 0x40, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x7, 0x8, {0x9, 0x21, 0x1000, 0x80, 0x1, {0x22, 0x47c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x35, 0x7e}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1f, 0x3, 0xc4}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x4, 0x87, 0x0, 0x8, 0x3}, 0x3f, &(0x7f00000000c0)={0x5, 0xf, 0x3f, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0xd0, 0xba, 0x1, 0x0, 0xfc}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "49673f91693b1d24fc5ece593f65e55c"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0xde, 0x3, 0x7, 0xf, 0x2, [0x180, 0xffff00, 0x0]}]}, 0x9, [{0x31, &(0x7f0000000100)=@string={0x31, 0x3, "834798fb80e28f744d4d09ad335741296a1ac0f25b11f7af756943c59e20feebd51acc5bff3bb1782e153f18c54366"}}, {0x8, &(0x7f0000000140)=@string={0x8, 0x3, "81ba9335c498"}}, {0xd3, &(0x7f0000000180)=@string={0xd3, 0x3, "ca482c78e3ff8383316ee98b5419c69a41938e0cabc4ed3e341cda6e351d81d8ec394536f118b855ff4b7ea942f85c95e780d9efe0246a639248d1065e82d2993c1ba37d44ee3052c869e70da6cddbfc22c7224b1091af4c95bab6b5a13751ea17ffb86386694bbfe13e02959e6050b159523be86b4c94c1f45e58e1fa5299f158db91dd2888a20e07d62cb606adc9c4ae69d133f97db69de7503f6260e4c63cd8126490c74369009e9ccb182897a02d69d059baaed4ef60e10ebdd69780e1d3cb695b8acab51321b1c6b1242788912d31"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x807}}, {0x1a, &(0x7f0000000340)=ANY=[@ANYBLOB="1a03211673e4eabc68cef34730b8f58328a4dbed95d9c158f1d6"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x414}}]}) [ 2842.996192] FAULT_INJECTION: forcing a failure. [ 2842.996192] name failslab, interval 1, probability 0, space 0, times 0 [ 2842.998072] CPU: 1 PID: 15755 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2842.999174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2843.000485] Call Trace: [ 2843.000907] dump_stack+0x107/0x167 [ 2843.001492] should_fail.cold+0x5/0xa [ 2843.002082] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2843.002870] should_failslab+0x5/0x20 [ 2843.003479] kmem_cache_alloc_trace+0x55/0x320 [ 2843.004177] io_uring_alloc_task_context+0x99/0x6a0 [ 2843.004963] ? io_import_iovec+0x1120/0x1120 [ 2843.005640] ? lock_downgrade+0x6d0/0x6d0 [ 2843.006292] ? do_raw_spin_lock+0x121/0x260 [ 2843.006948] ? rwlock_bug.part.0+0x90/0x90 [ 2843.007644] __io_uring_add_tctx_node+0x2c6/0x520 [ 2843.008414] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2843.009246] ? alloc_fd+0x2e7/0x670 [ 2843.009831] io_uring_setup+0x1fbb/0x2980 [ 2843.010495] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2843.011291] ? wait_for_completion_io+0x270/0x270 [ 2843.012065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2843.012866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2843.013681] do_syscall_64+0x33/0x40 [ 2843.014247] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2843.015053] RIP: 0033:0x7feea834bb19 [ 2843.015607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2843.018417] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2843.019564] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2843.020654] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2843.021719] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2843.022806] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2843.023913] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:59:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xa00, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:59:30 executing program 4: ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)=ANY=[]) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @local, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="88587340a5faa4ddba838c854081e1b3569c3761dcdfc9168b25dedb", 0x1c}], 0x1, &(0x7f0000000140)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x2c, 0x10, 0x0, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x32}]}}}], 0x98}}], 0x1, 0x24000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000041500210c00"/20], 0x14}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x400000000000000) [ 2843.081843] udc-core: couldn't find an available UDC or it's busy [ 2843.083410] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 10:59:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 10:59:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0xe0000000, 0x0}}], 0x1, 0x4890) 10:59:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xb00, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 2843.598600] udc-core: couldn't find an available UDC or it's busy [ 2843.600083] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2858.840783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:59:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x98) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) fallocate(r0, 0x0, 0x0, 0x1) 10:59:46 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 28) 10:59:46 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(r1, &(0x7f0000000200)=@ocfs2={0xc, 0x1, {0x10000, 0x3, 0x1}}, 0x400000) dup(r0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x22) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4000010) pipe2(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001000010000000000004f8f0b5eacf3c1dd692a000096000009000500000000005391c3a20b8b47e916fb9975e61929cc33f5cf0971d4667086c582da0bd96d410322ebdcfcd65d6e8d92673fdb9ba42b436972a0a0c199fc6c1a29021f831a4fd1f0146e"], 0x24}}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000280)=ANY=[@ANYBLOB="ef00"/243]) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000001c0)=0x20) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x3f8, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x3f8}}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) 10:59:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xf00, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:59:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 10:59:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0xeffdffff, 0x0}}], 0x1, 0x4890) 10:59:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x0, 0x6, &(0x7f00000013c0)=[{&(0x7f0000001480)="24004021de627ec3ea0cd21a29c20a07a3d42291bf479c68dc49a878233da33ab866737a2da08ece12a88d4088ad91649a4aee105fb8dae5f54218229ca6ce580845c9fe5970594a", 0x48, 0x40}, {&(0x7f00000001c0)="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", 0x1000, 0x7ffe}, {&(0x7f00000011c0)="23815ede4eb108c3aae796125cd4d78a60c770a63be22bca72a6ee5c26a574276c47064ffedb844512f82f460133ebc97069fb7c5108c45ee03cfad4ef4d02a54c423a5f63", 0x45, 0x100000000}, {&(0x7f0000001240)="963703d819170c1717f9d97fbac123fb2a5d7ef9fa098f818785169a9cf07fca80862acaf683bdecf2ab8a3b81c5979ab4618683ed53de6125512c95644188bb93189745", 0x44, 0x3}, {&(0x7f00000012c0)="e8ced9c752d8a18c42d8b205b620fd6267628ab3c81fc9ed23368ebdac21ed089a4703dabd9672bda7955845af88f92621663fdaee50bcd2eed64a78276062b31b2f83275f25addb45f550e1906cae2d0c64", 0x52, 0x5}, {&(0x7f0000001340)="61d6b2fbf797621fd09eb8975492694430a7c484880c77275d34a37daaff09e099dcb1eb20d1b6c612ff7aa0565e67feaaa9ee", 0x33, 0x1f}], 0x570c4, &(0x7f0000001380)) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x40000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400c00, 0x105) pwrite64(r2, &(0x7f0000000140)="b6", 0x1, 0x0) 10:59:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000180)="ed41000000080000dff46552655f000000000000010000000189451aef2d7132b4c3c7f2812f0d0e30796f42f453628f162e02f41fb02f4d5d4d02d7bc76ad1fbe8c42b556fe46743a9cbd28564334db8ba80463559c3a11a0c3fccca2991d638d4daa9a85d0c7de108c57af34423a05393ea03d", 0x74, 0x2100}], 0x0, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101000, 0x8b) [ 2858.868979] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2858.880427] FAULT_INJECTION: forcing a failure. [ 2858.880427] name failslab, interval 1, probability 0, space 0, times 0 [ 2858.882992] CPU: 1 PID: 15791 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2858.884487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2858.886272] Call Trace: [ 2858.886854] dump_stack+0x107/0x167 [ 2858.887645] should_fail.cold+0x5/0xa [ 2858.888478] ? create_object.isra.0+0x3a/0xa30 [ 2858.889460] should_failslab+0x5/0x20 [ 2858.890283] kmem_cache_alloc+0x5b/0x310 [ 2858.891176] create_object.isra.0+0x3a/0xa30 [ 2858.892133] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2858.893231] kmem_cache_alloc_trace+0x151/0x320 [ 2858.894245] io_uring_alloc_task_context+0x99/0x6a0 [ 2858.895328] ? io_import_iovec+0x1120/0x1120 [ 2858.896274] ? lock_downgrade+0x6d0/0x6d0 [ 2858.897162] ? do_raw_spin_lock+0x121/0x260 [ 2858.898090] ? rwlock_bug.part.0+0x90/0x90 [ 2858.899026] __io_uring_add_tctx_node+0x2c6/0x520 [ 2858.900072] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2858.901204] ? alloc_fd+0x2e7/0x670 [ 2858.902008] io_uring_setup+0x1fbb/0x2980 [ 2858.902920] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2858.904010] ? wait_for_completion_io+0x270/0x270 [ 2858.905071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2858.906195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2858.907311] do_syscall_64+0x33/0x40 [ 2858.908110] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2858.909209] RIP: 0033:0x7feea834bb19 [ 2858.910011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2858.913975] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2858.915626] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2858.917150] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2858.918836] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2858.920641] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2858.922450] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 10:59:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x1100, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 10:59:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0xffff0000, 0x0}}], 0x1, 0x4890) 10:59:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pipe(&(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)=ANY=[]) 10:59:46 executing program 5: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "0c89b7f60dcf5503", "08e1983b686d6679ac656d2a23ec69ba", "952fc518", "39be235c0a62bd16"}, 0x28) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x43) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={'\x00', 0x7fff, 0x664b1286, 0x4, 0x0, 0x2}) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="af", 0x1, 0xffffff) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xc0001, 0x80, 0x7}, 0x18) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x14001, 0x6) write$P9_RREADDIR(r1, &(0x7f0000000580)=ANY=[], 0x122) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x501600, 0x0) dup2(r1, r4) 10:59:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 10:59:46 executing program 6: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001e00)={0x0, 0x0, "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", "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"}) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0x0, 0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0x13}, &(0x7f00000000c0)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000000000000010203040506070809191a1b1c1d1e1f202122232425262728292a2b2c2d2c2f303123333435363738393a3b3c3d7e3f40"], 0x48, 0xfffffffffffffff8) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000340)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffa, r4, 0x0) timer_gettime(r2, &(0x7f0000000140)) r5 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7d0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1a}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_gettime(r1, &(0x7f0000000280)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 10:59:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0xfffffdef, 0x0}}], 0x1, 0x4890) [ 2859.146520] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2859.167782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:00:02 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P', @ANYRES16=0x0, @ANYBLOB="9f4bc26f5493a845bf0051ec61c2e13f010a"], 0x50}, 0x1, 0x0, 0x0, 0xc000000}, 0x4040000) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) preadv2(r0, &(0x7f0000000640)=[{&(0x7f0000000480)=""/232, 0xe8}, {&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000340)=""/148, 0x94}, {&(0x7f0000000580)=""/184, 0xb8}], 0x4, 0x2, 0x264, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x109) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x6, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) lseek(0xffffffffffffffff, 0x8, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001a0011cd0000e3d8d72e2ae5870100f400000000400000002cfa2e64a4832dee3097ebf19100000c9637a684d7ae70fd46e4332d1a77ef235da3e793ac6aebdca94a7454c8d15e39453b4c73d421e5d9b53e35a6aaeaa8dbc46b0650c623ce1aac53d14f08ed4362da8390fddc40d57432841879755dbbb7bde6"], 0x14}}, 0x0) 11:00:02 executing program 2: r0 = syz_io_uring_setup(0x38cd, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x200000b, 0x13, r0, 0x8000000) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x400000000000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x490c, &(0x7f0000000140)={0x0, 0xa2be, 0x1, 0x1, 0x107, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 11:00:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 11:00:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0xffffff7f, 0x0}}], 0x1, 0x4890) 11:00:02 executing program 5: r0 = fork() ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bond_slave_0\x00', &(0x7f0000000040)=@ethtool_eee={0x45, 0x9, 0x7, 0x80000001, 0xffff0000, 0x5, 0x6, 0x3, [0x11f, 0xffff]}}) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) kcmp(r0, r0, 0x3, 0xffffffffffffffff, r1) 11:00:02 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x0, 0x1, 0x6}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}]) 11:00:02 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 29) 11:00:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x1300, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 2874.340887] FAULT_INJECTION: forcing a failure. [ 2874.340887] name failslab, interval 1, probability 0, space 0, times 0 [ 2874.343552] CPU: 0 PID: 15834 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2874.345035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2874.346789] Call Trace: [ 2874.347369] dump_stack+0x107/0x167 [ 2874.348146] should_fail.cold+0x5/0xa [ 2874.348963] ? create_object.isra.0+0x3a/0xa30 [ 2874.349935] should_failslab+0x5/0x20 [ 2874.350751] kmem_cache_alloc+0x5b/0x310 [ 2874.351643] create_object.isra.0+0x3a/0xa30 [ 2874.352583] kmemleak_alloc_percpu+0xa0/0x100 [ 2874.353546] pcpu_alloc+0x4e2/0x1240 [ 2874.354360] __percpu_counter_init+0x10d/0x2d0 [ 2874.355346] io_uring_alloc_task_context+0xcc/0x6a0 [ 2874.356413] ? io_import_iovec+0x1120/0x1120 [ 2874.357343] ? lock_downgrade+0x6d0/0x6d0 [ 2874.358224] ? do_raw_spin_lock+0x121/0x260 [ 2874.359155] ? rwlock_bug.part.0+0x90/0x90 [ 2874.360066] __io_uring_add_tctx_node+0x2c6/0x520 [ 2874.361093] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2874.362205] ? alloc_fd+0x2e7/0x670 [ 2874.363002] io_uring_setup+0x1fbb/0x2980 [ 2874.363900] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2874.364980] ? wait_for_completion_io+0x270/0x270 [ 2874.366028] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2874.367162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2874.368268] do_syscall_64+0x33/0x40 [ 2874.369069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2874.370158] RIP: 0033:0x7feea834bb19 [ 2874.370957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2874.374877] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2874.376512] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2874.378026] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2874.379545] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2874.381055] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2874.382565] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:00:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x2}}], 0x1, 0x4890) 11:00:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x2b00, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:00:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000000080)=""/89, 0x59) fcntl$dupfd(r5, 0x0, r1) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x300) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010001000000000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') pread64(r7, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0) sendfile(r4, r6, 0x0, 0x100000001) fallocate(r3, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000, 0x7ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r2}) 11:00:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 11:00:02 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 30) 11:00:02 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80, 0x100) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0, 0x0, 0x0, 0x400}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) [ 2874.576181] FAULT_INJECTION: forcing a failure. [ 2874.576181] name failslab, interval 1, probability 0, space 0, times 0 [ 2874.578641] CPU: 0 PID: 15862 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2874.580123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2874.581868] Call Trace: [ 2874.582424] dump_stack+0x107/0x167 [ 2874.583207] should_fail.cold+0x5/0xa [ 2874.584020] ? create_object.isra.0+0x3a/0xa30 [ 2874.584983] should_failslab+0x5/0x20 [ 2874.585788] kmem_cache_alloc+0x5b/0x310 [ 2874.586654] create_object.isra.0+0x3a/0xa30 [ 2874.587604] kmemleak_alloc_percpu+0xa0/0x100 [ 2874.588558] pcpu_alloc+0x4e2/0x1240 [ 2874.589365] __percpu_counter_init+0x10d/0x2d0 [ 2874.590339] io_uring_alloc_task_context+0xcc/0x6a0 [ 2874.591403] ? io_import_iovec+0x1120/0x1120 [ 2874.592333] ? lock_downgrade+0x6d0/0x6d0 [ 2874.593208] ? do_raw_spin_lock+0x121/0x260 [ 2874.594125] ? rwlock_bug.part.0+0x90/0x90 [ 2874.595032] __io_uring_add_tctx_node+0x2c6/0x520 [ 2874.596051] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2874.597156] ? alloc_fd+0x2e7/0x670 [ 2874.597941] io_uring_setup+0x1fbb/0x2980 [ 2874.598819] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2874.599900] ? wait_for_completion_io+0x270/0x270 [ 2874.600944] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2874.602054] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2874.603160] do_syscall_64+0x33/0x40 [ 2874.603955] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2874.605040] RIP: 0033:0x7feea834bb19 [ 2874.605831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2874.610015] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2874.611630] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2874.613146] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2874.614659] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2874.616177] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2874.617679] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:00:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0xa0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f0000000640)='./file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='mnt/encrypted_dir\x00', &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x8000}, 0x16, 0x0) 11:00:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x4}}], 0x1, 0x4890) 11:00:16 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000014000000fe4756c6bc3e68810c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', r3, 0x2f, 0x1, 0x9, 0x0, 0x4, @mcast2, @local, 0xa0, 0x80, 0x5, 0x8}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xf4, r4, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000001}, 0x4044040) 11:00:16 executing program 6: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x80000001}, 0x8) r0 = epoll_create1(0x0) r1 = epoll_create(0x3ff) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) 11:00:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x3200, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:00:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 11:00:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 31) 11:00:16 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000000040), 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x80010, r5, 0x8000000) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) fallocate(r6, 0x0, 0x0, 0x51) [ 2888.524788] FAULT_INJECTION: forcing a failure. [ 2888.524788] name failslab, interval 1, probability 0, space 0, times 0 [ 2888.526182] CPU: 1 PID: 15980 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2888.526983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2888.527946] Call Trace: [ 2888.528258] dump_stack+0x107/0x167 [ 2888.528680] should_fail.cold+0x5/0xa [ 2888.529128] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2888.529724] should_failslab+0x5/0x20 [ 2888.530164] kmem_cache_alloc_trace+0x55/0x320 [ 2888.530695] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2888.531299] ? io_import_iovec+0x1120/0x1120 [ 2888.531810] ? lock_downgrade+0x6d0/0x6d0 [ 2888.532287] ? do_raw_spin_lock+0x121/0x260 [ 2888.532780] ? rwlock_bug.part.0+0x90/0x90 [ 2888.533268] __io_uring_add_tctx_node+0x2c6/0x520 [ 2888.533816] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2888.534407] ? alloc_fd+0x2e7/0x670 [ 2888.534829] io_uring_setup+0x1fbb/0x2980 [ 2888.535314] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2888.535899] ? wait_for_completion_io+0x270/0x270 [ 2888.536467] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2888.537071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.537674] do_syscall_64+0x33/0x40 [ 2888.538103] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2888.538686] RIP: 0033:0x7feea834bb19 [ 2888.539114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2888.541228] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2888.542107] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2888.542923] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2888.543758] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2888.544592] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2888.545407] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:00:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xa}}], 0x1, 0x4890) 11:00:16 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) gettid() ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendfile(r2, r1, 0x0, 0x500000001) [ 2888.607158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:00:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x3300, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:00:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 32) [ 2888.640140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2888.640429] FAULT_INJECTION: forcing a failure. [ 2888.640429] name failslab, interval 1, probability 0, space 0, times 0 [ 2888.643453] CPU: 1 PID: 16001 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2888.644247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2888.645193] Call Trace: [ 2888.645500] dump_stack+0x107/0x167 [ 2888.645924] should_fail.cold+0x5/0xa [ 2888.646359] ? create_object.isra.0+0x3a/0xa30 [ 2888.646880] should_failslab+0x5/0x20 [ 2888.647318] kmem_cache_alloc+0x5b/0x310 [ 2888.647790] create_object.isra.0+0x3a/0xa30 [ 2888.648295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2888.648887] kmem_cache_alloc_trace+0x151/0x320 [ 2888.649431] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2888.650014] ? io_import_iovec+0x1120/0x1120 [ 2888.650520] ? lock_downgrade+0x6d0/0x6d0 [ 2888.650992] ? do_raw_spin_lock+0x121/0x260 [ 2888.651493] ? rwlock_bug.part.0+0x90/0x90 [ 2888.651993] __io_uring_add_tctx_node+0x2c6/0x520 [ 2888.652540] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2888.653142] ? alloc_fd+0x2e7/0x670 [ 2888.653567] io_uring_setup+0x1fbb/0x2980 [ 2888.654045] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2888.654626] ? wait_for_completion_io+0x270/0x270 [ 2888.655192] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2888.655792] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.656378] do_syscall_64+0x33/0x40 [ 2888.656806] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2888.657398] RIP: 0033:0x7feea834bb19 [ 2888.657828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2888.659932] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2888.660816] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2888.661636] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2888.662446] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2888.663260] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2888.664080] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:00:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x3c00, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:00:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd=r2, 0x40, 0x0, 0x0, 0xb, 0x0, {0x2}}, 0x85e0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 11:00:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000), 0x400005e, 0xe00) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000000)=0xfffffffffffffec9, 0x101000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 11:00:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x6c00, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:00:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x4890) 11:00:16 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001", 0x3d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {0x0}], 0x0, &(0x7f0000000100)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) 11:00:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 33) 11:00:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x200000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xea144c71714aab62}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5af}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x8044) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000f372cb471b05040c4e8b6703728942a727ba6b6b88197278c9d0116d0d5c91e2c296d66af670657cea1eb66a715cab1d7f477cf032cf3ab51c", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="4700330080000000080211000001080211000001505050505050000000000000000000000000000000000100030100040600000000000005030000002a01007606000000000000000800570000000000"], 0x6c}}, 0x0) 11:00:31 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x0, 0x100, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x28, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31343338373338393700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000441356bbe0d347458781d90fbb6137b4010040000c00000000000000d5f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000006100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d5f4655fd5f4655fd5f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000d5f4655fd6f4655fd6f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012700)="200000003c66c62a3c66c62a00000000d5f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012800)="8081000000180000d5f4655fd5f4655fd5f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4200}, {&(0x7f0000012900)="20000000000000000000000000000000d5f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012a00)="8081000000180000d5f4655fd5f4655fd5f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4300}, {&(0x7f0000012b00)="20000000000000000000000000000000d5f4655f00"/32, 0x20, 0x4380}, {&(0x7f0000012c00)="c041000000400000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4a00}, {&(0x7f0000012d00)="20000000000000000000000000000000d5f4655f00"/32, 0x20, 0x4a80}, {&(0x7f0000012e00)="ed41000000100000d6f4655fd6f4655fd6f4655f00000000000002008000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000429f33c7000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x4b00}, {&(0x7f0000012f00)="ed8100001a040000d6f4655fd6f4655fd6f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000652a4c1d000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x4c00}, {&(0x7f0000013000)="ffa1000026000000d6f4655fd6f4655fd6f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3134333837333839372f66696c65302f66696c653000000000000000000000000000000000000000000000d6db46a3000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x4d00}, {&(0x7f0000013100)="ed8100000a000000d6f4655fd6f4655fd6f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000070000000000000000000000000000000000000000000000000000000000000000000000000000000116ea814000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000000002ea06015400000000000600000000000000786174747231000006014c0000000000060000000000000078617474723200000000000000000000000000000000000000000000000000000000000078617474723200007861747472310000ed81000028230000d6f4655fd6f4655fd6f4655f00000000000002008000000000000800010000000af301000400000000000000000000000300000080000000020000000100000082000000020000000180000082000000000000000000000000000000cc766ded000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0x1a0, 0x4e00}, {&(0x7f0000013300)="ed81000064000000d6f4655fd6f4655fd6f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000256c47f5000000000000000000000000000000000000000000000000200000003c66c62a3c66c62a3c66c62ad6f4655f3c66c62a0000000000000000", 0xa0, 0x5000}, {&(0x7f0000013400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013500)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000013600)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x41400}, {&(0x7f0000014500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000014600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x90000}], 0x0, &(0x7f0000014d00)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x220, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7f, 0x4, 0x81, 0xfff, 0x5, 0xffffffc1, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x681}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffd}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x356}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x97}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ee}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8001]}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x8, 0x3ff, 0xffff, 0x4, 0x7, 0xfffeffff]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x3, 0x1, 0xef8, 0x7fffffff]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x6, 0x7a, 0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xc93}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffff80}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x32e}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x40, 0x4]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0x8, 0xfffffff9]}]}, @NL80211_ATTR_CQM={0x78, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x145}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x80, 0xc399, 0x98d, 0x5, 0x800, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x3, 0x7fffffff, 0x100, 0x6f4, 0x62b3, 0x5, 0x3, 0xd88, 0x10001]}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48b}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1, 0x4]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x18}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4e2}]}, @NL80211_ATTR_CQM={0x4}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000040}, 0x248d4) 11:00:31 executing program 4: keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000140)=@chain) timer_gettime(0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)=0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000280)) timer_create(0x6, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 11:00:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xb100, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:00:31 executing program 5: dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 11:00:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xa00}}], 0x1, 0x4890) 11:00:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) syz_io_uring_setup(0x7d00, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000400)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) [ 2904.122227] FAULT_INJECTION: forcing a failure. [ 2904.122227] name failslab, interval 1, probability 0, space 0, times 0 [ 2904.125131] CPU: 1 PID: 16129 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2904.126820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2904.128835] Call Trace: [ 2904.129491] dump_stack+0x107/0x167 [ 2904.130385] should_fail.cold+0x5/0xa [ 2904.131323] ? io_wq_create+0xeb/0xc00 [ 2904.132289] should_failslab+0x5/0x20 [ 2904.133216] __kmalloc+0x72/0x390 [ 2904.134079] io_wq_create+0xeb/0xc00 [ 2904.135000] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2904.136233] ? io_import_iovec+0x1120/0x1120 [ 2904.137124] ? io_apoll_task_func+0x2d0/0x2d0 [ 2904.138016] ? __io_req_find_next+0x300/0x300 [ 2904.138911] ? do_raw_spin_lock+0x121/0x260 [ 2904.139770] ? rwlock_bug.part.0+0x90/0x90 [ 2904.140623] __io_uring_add_tctx_node+0x2c6/0x520 [ 2904.141592] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2904.142652] ? alloc_fd+0x2e7/0x670 [ 2904.143425] io_uring_setup+0x1fbb/0x2980 [ 2904.144271] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2904.145287] ? wait_for_completion_io+0x270/0x270 [ 2904.146283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2904.147747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2904.148600] do_syscall_64+0x33/0x40 [ 2904.149194] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2904.150021] RIP: 0033:0x7feea834bb19 [ 2904.150644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2904.153616] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2904.154824] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2904.155995] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2904.157144] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2904.158292] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2904.159454] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:00:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x20048050}, 0x4000010) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0c000380"], 0x2c}}, 0x0) 11:00:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xe000}}], 0x1, 0x4890) 11:00:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000380)=0x7, 0x4) r1 = getpgrp(0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(r1, 0xe, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000180)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x2}, 0xf) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x7}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r3 = dup(r2) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x5, 0x14, 0x7f, 0x7, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000003c0), 0x5}, 0x40000, 0x100000000, 0x9, 0x4, 0x8, 0x80000001, 0x280, 0x0, 0x9, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x4) accept4$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c, 0x800) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r4, &(0x7f0000000280), 0x0) syz_open_procfs(r1, &(0x7f0000000140)='pagemap\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4307, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x5}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) 11:00:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xf000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:00:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r0, 0x1000004) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 11:00:31 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc4}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4}, &(0x7f00000003c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x40000000, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x4, &(0x7f0000000180)={0x0, 0x3, 0x4}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d2f4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000001182de0168a747c9ad124fbfbfe191f2010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0}, {&(0x7f0000010d00)="ed41000000040000d2f4655fd2f4655fd2f4655f000000000000040020", 0x1d, 0x1480}, {0x0}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[]) 11:00:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 34) 11:00:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x80000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:00:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) [ 2904.415960] FAULT_INJECTION: forcing a failure. [ 2904.415960] name failslab, interval 1, probability 0, space 0, times 0 [ 2904.418538] CPU: 0 PID: 16164 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2904.420102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2904.421963] Call Trace: [ 2904.422562] dump_stack+0x107/0x167 [ 2904.423397] should_fail.cold+0x5/0xa [ 2904.424260] ? io_wq_create+0xeb/0xc00 [ 2904.425134] should_failslab+0x5/0x20 [ 2904.425994] __kmalloc+0x72/0x390 [ 2904.426790] io_wq_create+0xeb/0xc00 [ 2904.427658] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2904.428809] ? io_import_iovec+0x1120/0x1120 [ 2904.429800] ? io_apoll_task_func+0x2d0/0x2d0 [ 2904.430805] ? __io_req_find_next+0x300/0x300 [ 2904.431816] ? do_raw_spin_lock+0x121/0x260 [ 2904.432783] ? rwlock_bug.part.0+0x90/0x90 [ 2904.433755] __io_uring_add_tctx_node+0x2c6/0x520 [ 2904.434840] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2904.436032] ? alloc_fd+0x2e7/0x670 [ 2904.436865] io_uring_setup+0x1fbb/0x2980 [ 2904.437807] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2904.438948] ? wait_for_completion_io+0x270/0x270 11:00:32 executing program 4: r0 = syz_io_uring_setup(0x7bae, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4007, @fd_index=0x2, 0x13861dd9, 0x0, 0x0, 0x1, 0x1, {0x3}}, 0x2) r3 = syz_io_uring_setup(0x7da8, &(0x7f00000003c0)={0x0, 0x10000, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd=r5, 0x6, &(0x7f0000000500)=""/226, 0xe2, 0x10, 0xcb4aa515c6654837}, 0xd6) ftruncate(0xffffffffffffffff, 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r8 = dup(r7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x0) ioctl$PTP_PIN_GETFUNC2(r8, 0xc0603d0f, &(0x7f0000000240)={'\x00', 0x7fff, 0x3, 0x7}) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) pread64(r3, &(0x7f0000000600)=""/178, 0xb2, 0xd84) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x100000d, 0x10, 0xffffffffffffffff, 0x10000000) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x7}, 0x8) syz_io_uring_submit(r1, r9, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) [ 2904.440071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2904.441463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2904.442630] do_syscall_64+0x33/0x40 [ 2904.443485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2904.444638] RIP: 0033:0x7feea834bb19 [ 2904.445477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2904.449695] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2904.451421] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2904.453031] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2904.454626] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2904.456234] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2904.457840] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 [ 2904.521737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2904.528040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 11:00:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 11:00:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x4890) 11:00:49 executing program 4: r0 = io_uring_setup(0x396d, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/90, 0x5a}], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1) r3 = pidfd_open(0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x40400200, 0x0, &(0x7f0000000180)=[r3, r1, r4]}, 0x3) fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/120) syz_io_uring_setup(0x3ffe, &(0x7f00000002c0)={0x0, 0x6c98, 0x8, 0x1, 0x90, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0, 0x40000040, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000007c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x2000, @fd=r1, 0x4, &(0x7f0000000740)=[{&(0x7f00000003c0)="f4c73f5f8a7878b004dfe8406a14f1959986fbf8809a15710d957702c6fb8dedea625f6b6ebf6d5cb72c3d20185309edfd209d0bd9790b8f2b5e53c078da046a182399c7b0bbc68da465512f13386c26eb472367123578f2431b6bb64a0e9430c5eedcae86ed6e1fd67b5e49d6f4d42a5a62a3188704a21f8f07dd2612739ace8480b5ff14aa5c14e376310b746f5d033e33ccb6", 0x94}, {&(0x7f0000000480)="10f1a7384ddba638f2b98d9d8986968de2f82888e2314e3a55efadd47e462c4e4bcafec500d038809ad46dde626415b9be6d5c5d327aef5ca583d5eae6f8531a1c362bb8ee6f15eb515932d2a1e0dde9d3d7b84bcc1d9cb1b1bdfefe8b37ae0232328a139be0626c21af4af73f2f471dc19aef93cca1cb71674baff7e44997dd5fa0224e62be313daca8d28b5b627c218249f2877894bf5d5b", 0x99}, {&(0x7f0000000540)="f492af5e5bc6a096a3ad72b9f00cafdf4f6d2b90eaa68e52e010c90d0b27ea025cfe812f", 0x24}, {&(0x7f0000000580)="7fe2bb6c460dfa5d4461816a8779b29cb28f27ba48dd6b5faff99ef40e45a14d44b0fa863382c6c21bcab170dd6fa31f6810a16623446dadca32ab7412dad979fd1b51962e65bc142d048f596b22f6acd0c99f9efdc9364ffb1de62d49ca8498b3a8f2", 0x63}, {&(0x7f0000000600)="67b1352e5f9b3c62eba28987dd7115c6ac12e39bb489b70ba2c9a3a9bcdd49bd00281f880b76fbf50adc06668312b37c4fd71b312105a28bd0135c4fca65", 0x3e}, {&(0x7f0000000640)="020dfe9f52d0ac353d9cff226937445224818647ed72d5fb7c1afeb97192d4c418ef8b24de4244c31630dfd49b2e549deddf9eca1921a04a1c4afe7f67bf3147b1cb5cb0597aa516dc27dd22ef0d1b2e9e82aed23a20345ffc99d23b475e02d366498cd47731346953a4eaf7ac02df93f555c5fc96dc940f2a9f798ab5a8333fcacb1eb90b51c572df6e5d03047330a363cef544bc0009cdf7e0e1eaa6d13c6706757aed7202b6402aa81154bdbc1aaddf7b403a08", 0xb5}, {&(0x7f0000000700)="61631bd833cec3b812fe810a544d1f46e2e1899cc6b311a10acabc3302bacb6ac9c89cfb783f9a466112f846119d9b82d4d5181919e188f1ccdf25fca4", 0x3d}], 0x7, 0x13, 0x1, {0x3, r7}}, 0x80000001) 11:00:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 35) 11:00:49 executing program 5: sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x80) syz_io_uring_setup(0x0, &(0x7f0000002d40), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 11:00:49 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) syz_io_uring_setup(0x5e4e, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000080)=""/89, 0x59) sendfile(r3, r0, 0x0, 0x6) 11:00:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x1) r3 = getpid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x1) ptrace$setopts(0x4206, r3, 0x2, 0x44) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x174}}, 0x2200c0c0) fcntl$setflags(r1, 0x2, 0x0) 11:00:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xf0ffff, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 2922.248087] netlink: 348 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2922.275230] FAULT_INJECTION: forcing a failure. [ 2922.275230] name failslab, interval 1, probability 0, space 0, times 0 [ 2922.276612] CPU: 1 PID: 16300 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2922.277402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2922.278355] Call Trace: [ 2922.278663] dump_stack+0x107/0x167 [ 2922.279079] should_fail.cold+0x5/0xa [ 2922.279529] ? io_wq_create+0x6ef/0xc00 [ 2922.279983] should_failslab+0x5/0x20 [ 2922.280420] kmem_cache_alloc_node_trace+0x59/0x340 [ 2922.280996] io_wq_create+0x6ef/0xc00 [ 2922.281439] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2922.282015] ? io_import_iovec+0x1120/0x1120 [ 2922.282520] ? io_apoll_task_func+0x2d0/0x2d0 [ 2922.283027] ? __io_req_find_next+0x300/0x300 [ 2922.283555] ? do_raw_spin_lock+0x121/0x260 [ 2922.284044] ? rwlock_bug.part.0+0x90/0x90 [ 2922.284536] __io_uring_add_tctx_node+0x2c6/0x520 [ 2922.285082] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2922.285675] ? alloc_fd+0x2e7/0x670 [ 2922.286096] io_uring_setup+0x1fbb/0x2980 [ 2922.286571] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2922.287149] ? wait_for_completion_io+0x270/0x270 [ 2922.287720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2922.288317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2922.288906] do_syscall_64+0x33/0x40 [ 2922.289333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2922.289916] RIP: 0033:0x7feea834bb19 [ 2922.290341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2922.292439] RSP: 002b:00007feea58a0108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2922.293308] RAX: ffffffffffffffda RBX: 00007feea845f020 RCX: 00007feea834bb19 [ 2922.294125] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2922.294940] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2922.295757] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2922.296566] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 [ 2936.484271] FAULT_INJECTION: forcing a failure. [ 2936.484271] name failslab, interval 1, probability 0, space 0, times 0 [ 2936.485636] CPU: 1 PID: 16311 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2936.486441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2936.487400] Call Trace: [ 2936.487720] dump_stack+0x107/0x167 [ 2936.488143] should_fail.cold+0x5/0xa [ 2936.488592] ? create_object.isra.0+0x3a/0xa30 [ 2936.489123] should_failslab+0x5/0x20 [ 2936.489569] kmem_cache_alloc+0x5b/0x310 [ 2936.490042] ? io_wq_create+0x114/0xc00 [ 2936.490513] create_object.isra.0+0x3a/0xa30 [ 2936.491024] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2936.491615] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2936.492216] io_wq_create+0x6ef/0xc00 [ 2936.492665] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2936.493253] ? io_import_iovec+0x1120/0x1120 [ 2936.493765] ? io_apoll_task_func+0x2d0/0x2d0 [ 2936.494284] ? __io_req_find_next+0x300/0x300 [ 2936.494800] ? do_raw_spin_lock+0x121/0x260 [ 2936.495301] ? rwlock_bug.part.0+0x90/0x90 [ 2936.495796] __io_uring_add_tctx_node+0x2c6/0x520 [ 2936.496370] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2936.496981] ? alloc_fd+0x2e7/0x670 [ 2936.497405] io_uring_setup+0x1fbb/0x2980 [ 2936.497893] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2936.498473] ? wait_for_completion_io+0x270/0x270 [ 2936.499044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2936.499669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2936.500273] do_syscall_64+0x33/0x40 [ 2936.500707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2936.501296] RIP: 0033:0x7feea834bb19 [ 2936.501734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2936.503910] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2936.504802] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2936.505631] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2936.506463] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2936.507290] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2936.508122] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:01:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 36) 11:01:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x1000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r1}, 0x401, 0x3, 0x1}, 0x0) 11:01:04 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:01:04 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4000, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file2\x00', 0x400000, 0xb0) bind$packet(r2, &(0x7f0000000240)={0x11, 0xc, 0x0, 0x1, 0x3f, 0x6, @remote}, 0x14) sendfile(r1, r2, 0x0, 0x10000000c) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r4 = getpid() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbff, {0x55, 0x1, 0x2, r4, 0x7, 0x3, 0x0, 0x6, 0x0, 0x4}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000804}, 0x41004) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x1, 0x0, 0x9, 0x0, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, r4, 0x10, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f00000001c0)={0x16, 0x17, 0x2, {0xd, './file1/file0'}}, 0x16) dup2(0xffffffffffffffff, 0xffffffffffffffff) futimesat(0xffffffffffffffff, &(0x7f0000000140)='./file2\x00', &(0x7f0000000180)={{0x0, 0xea60}}) syz_io_uring_setup(0x7700, &(0x7f00000002c0)={0x0, 0xa7bd, 0x4, 0x0, 0x325, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) fsync(0xffffffffffffffff) 11:01:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x4890) 11:01:04 executing program 4: keyctl$reject(0x13, 0x0, 0x20, 0x9, 0xfffffffffffffffa) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@broadcast, @broadcast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000db4", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "cad6a8", 0x0, 0x0, 0x0, @private2, @local}}}}}}}, 0x0) 11:01:04 executing program 2: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x230c, &(0x7f0000000200)={0x0, 0x7969, 0x26, 0x3, 0x34f}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="0350e6ea93d84aded58bf13c094d8a09a9fdb8d488278876bc77305dccfbb3bff0700cb55e9fb84db6bbd8e49bfd1f666e7a0d6550551c06f5d9c92bd92bd0b7bc856bd0427bc138dfaf1053fc92b2419b34ec0d68e193377b87eff4a58ba6aa", 0x60}, {&(0x7f0000000340)}, {&(0x7f0000000380)="87e72152997fde917486e63d8a9ff2b7f57ed688a188517a644fd811db692857c7aa272c706c9944cf1805f53ce5faaf2104d60e55a28ed143f0418b18", 0x3d}, {&(0x7f00000003c0)="0654682cd1f48f5f43851ca050cb365e31f56ac70b1d2b972235077a12d7f8cfa4fcd6192cf45449d79503d5325c7934cd967094ff7a", 0x36}, {&(0x7f0000000400)="c34861", 0x3}], 0x6, &(0x7f0000000580)=[{0x10, 0x1}, {0x40, 0x84, 0x200, "03384b3ac697ce68711538749e726aaf6ef7327809a060eb493a6be1c8217b97f87cbd4fdc4ea43be12bdb920d9e"}], 0x50}, 0x0, 0x2840, 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @loopback}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000001c0)=0xfffffff, 0xffffffffffffff29) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000100000018000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='./file1/file0\x00']) 11:01:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x2000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:04 executing program 6: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 11:01:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x4890) 11:01:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 11:01:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x3000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:04 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = timerfd_create(0x0, 0x0) r4 = socket(0x2c, 0x6, 0xef3) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000100)={@remote}, 0x14) timerfd_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000080)=""/89, 0x59) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00'}) dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, &(0x7f0000000140)={@mcast2}, 0x49) 11:01:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:01:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xa000000}}], 0x1, 0x4890) 11:01:04 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 37) [ 2936.695814] FAULT_INJECTION: forcing a failure. [ 2936.695814] name failslab, interval 1, probability 0, space 0, times 0 [ 2936.697206] CPU: 1 PID: 16341 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2936.697989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2936.698945] Call Trace: [ 2936.699264] dump_stack+0x107/0x167 [ 2936.699704] should_fail.cold+0x5/0xa [ 2936.700148] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2936.700730] should_failslab+0x5/0x20 [ 2936.701177] kmem_cache_alloc_trace+0x55/0x320 [ 2936.701721] __io_uring_add_tctx_node+0x15c/0x520 [ 2936.702277] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2936.702878] ? alloc_fd+0x2e7/0x670 [ 2936.703295] io_uring_setup+0x1fbb/0x2980 [ 2936.703788] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2936.704379] ? wait_for_completion_io+0x270/0x270 [ 2936.704956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2936.705557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2936.706162] do_syscall_64+0x33/0x40 [ 2936.706598] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2936.707195] RIP: 0033:0x7feea834bb19 [ 2936.707636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2936.709776] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2936.710671] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2936.711497] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2936.712332] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2936.713162] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2936.713990] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:01:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x4000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000100)={@desc={0x1, 0x0, @desc1}}) read(r2, &(0x7f0000000080)=""/89, 0x59) fallocate(r2, 0x2, 0x4, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff], 0x1}, 0x58) 11:01:04 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800e1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = openat(0xffffffffffffffff, &(0x7f0000001640)='./file0\x00', 0x100, 0xe3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0xc8010, r8, 0x8000000) syz_io_uring_submit(r2, r6, &(0x7f0000001600)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000015c0)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000001180)=""/124, 0x7c}, {&(0x7f0000001200)=""/242, 0xf2}, {&(0x7f0000001300)=""/109, 0x6d}, {&(0x7f0000001380)=""/113, 0x71}, {&(0x7f0000001400)=""/141, 0x8d}, {&(0x7f00000014c0)=""/55, 0x37}], 0x8, &(0x7f0000001580)=""/29, 0x1d}, 0x0, 0x1, 0x1}, 0x3) 11:01:16 executing program 0: ftruncate(0xffffffffffffffff, 0x1000004) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) [ 2948.735008] FAULT_INJECTION: forcing a failure. [ 2948.735008] name failslab, interval 1, probability 0, space 0, times 0 [ 2948.736420] CPU: 1 PID: 16372 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2948.737218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2948.738169] Call Trace: [ 2948.738481] dump_stack+0x107/0x167 [ 2948.738904] should_fail.cold+0x5/0xa [ 2948.739349] ? create_object.isra.0+0x3a/0xa30 [ 2948.739887] should_failslab+0x5/0x20 [ 2948.740343] kmem_cache_alloc+0x5b/0x310 [ 2948.740817] create_object.isra.0+0x3a/0xa30 [ 2948.741326] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2948.741908] kmem_cache_alloc_trace+0x151/0x320 [ 2948.742456] __io_uring_add_tctx_node+0x15c/0x520 [ 2948.743003] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2948.743594] ? alloc_fd+0x2e7/0x670 [ 2948.744031] io_uring_setup+0x1fbb/0x2980 [ 2948.744523] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2948.745115] ? wait_for_completion_io+0x270/0x270 [ 2948.745688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2948.746298] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2948.746898] do_syscall_64+0x33/0x40 [ 2948.747332] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2948.747932] RIP: 0033:0x7feea834bb19 [ 2948.748363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2948.750490] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2948.751350] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2948.752213] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2948.753015] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2948.753822] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2948.754626] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:01:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xe0000000}}], 0x1, 0x4890) 11:01:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x5000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:16 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x46e2, 0x89) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_setup(0x4aec, &(0x7f0000000300)={0x0, 0x3549, 0x6eb5f90b8b3d90e0, 0x0, 0x14f, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000200)) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_complete(r2) getpeername(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000000)=0x80) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000140)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) 11:01:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 38) 11:01:16 executing program 6: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000c40)=[{0x0}], 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038679de021f8c801000000000000009d1fa459d07100000000bc7ae631f7a54805ff070000000000093393d0e1c7391515c7ab7c8e0600"}, 0xffffff93, 0x0) r1 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$link(0x8, r1, r0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000001000000000000000000000000000000000000096fd60b8a0d3d34fecc85d9ff6d800000000000000000040000000", @ANYRES32=r0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"]) 11:01:16 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x2, 0x0, 0xfffffffd}, &(0x7f000061f000/0x1000)=nil, &(0x7f000080f000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) r5 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='(()//:/@\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000000140)=""/41, 0x29}], 0x3, 0x200, 0x7) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x8001) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x0, 0x0) io_uring_enter(r8, 0x923, 0x1843, 0x0, &(0x7f0000000080)={[0xc48]}, 0x8) r9 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r9, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000740)=ANY=[@ANYRES32=r7]) 11:01:16 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) setresuid(0x0, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f0000000080)=""/89, 0x59) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000006600), 0x400002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006640)={0xffffffffffffffff}) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000000080)=""/89, 0x59) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006680), 0x963040) stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) r8 = fcntl$getown(r0, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007400)=[{{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="79f974675950c7b013ee13b84e129f51615410671bd34cf69be018301c952bad6313c046d3dca040b2495d43897abc7bfbd9d991d5e4cc544e7bb58ba08c", 0x3e}, {&(0x7f00000001c0)="e810685103a98c8efc26d0788434a7f30022a883c943ebb5eac68d72a69a8c195be10a70f41843c2ab3436f765e7e8dcb47d4266492c565b978b6461ad70b21fe5902f8e407c0d3b245b0d9fcc3a6ba029e743773897e0a89975a836d8ba0c997db7d8b32316c7192af5b4b6b7fe2e610216247485adafa6ca6aae06", 0x7c}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000240)="c67d4109583740ecd28de61e352a324151e6e209", 0x14}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000340)="4f247677879f0a7f87909939abdd0d8cdb30ea73c0c4a07a276b6580f7a20fca34fe0ef25d2f0fe65355a03c0cdc8b9a7770c22941854fcb77e4ddfc33af9ff2c82dc2b20fe37153631fc206469b5e8ca63091deb6b92ba3115842752d9624c91799b244975051198489632c29da7d999ad2e2f9ba4f221bb5fb698a54cb57f727535eb7a8fcde5ecd1fa9a19339cabe389692f40373df96c656df8980de24c8bdad02109b4288bc11d6d11d133908de21c869552873cf742cbf5a5d53f21757ed3e4d01d7d6ddb3e8b4396012f78678f318684988024db4febd502460b10495b3155d45f8b1d0ae", 0xe8}], 0x6, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68, 0x4010}}, {{&(0x7f0000002740)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002a00)=[{&(0x7f00000027c0)="e68f8de25f8544f4b436f16cdae8709b15a84e4fc4b666d6e66444e9fcb3bdfa2ebbb1725483497bab11af2f50da68f81955087fa70283edecc3c831a2c09ffa06a0fb2926a6e60980b91a111ed2f351194c7741f08f52fc79a96b15e31fdb69ccc87670442917cf37cf0ac624c607c3b2dd97d4feed21b0f344c1bf71ac3b9d405e3d1bcdc576348459d0cb86", 0x8d}, {&(0x7f0000002880)="ce6e75e8a8a2d00dfa32dc21b08677b3550f57e9e8a14fcd27a595eae10d37811b4bd26248bfcce4164ce154054e5b54c5d5ee80a16174c36b2bed8e8e04a5ce9ada3adaea07ac6c3328f6d56f67bd5b6f62811813d70af46d812f26dfb6682b7b0a65caa35ee1e396b84fab4c2bd49780b7d0d930750028cd6a99a23604fcc945af120aa690d9bc07da55c2deb60b9b2a167078a6c32c382a3a0f873cdfc0f7", 0xa0}, {&(0x7f0000002940)="bbde261f3b866151ad81119ee385d33a3ce53944bb19c9841ef609942cd966e9a83429b97d630d049278b7fcbcade27b1eeb05ccb255443f9de9ccc65b", 0x3d}, {&(0x7f0000002980)="1864b1561edde6e2522b48d6ecb5791be469a567cc9aa22c774cea4f66803d154628f96ee690f8a5436e828ee3fb166f8cced58394efb0b8119ae6efe626c3393642f35958dbaa46e66c6877751ad13ff9b8fd85d6485330538755bd3ff9f6de63e04881c4f392f219b557f0e56abec958f7fcf26deaa7530d69f5", 0x7b}], 0x4, &(0x7f0000004380)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x128, 0x81}}, {{&(0x7f00000044c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004540)="7de29f8a19481ded088bc03312801e1948695be1757a8499c0a8737a4f70c8d436f063296f8874d94b35d9e8b02630a0467aabbcbca4654f0695ca99be053d085b8b329587b27ea38391f7e10758466895bf5b098b251f89bbbc2691d6104234707875316a73bd35317084a032b908642aa27cced777bb944e83d3d8af1c8efbb3cbecf63457ea3bfbf625710fd49d730b64cf12559f5dc90fa31c5636fc9269d9f0c23bc18b2dd9dc1775a0a822f42bcc0d32dadbe2f4c4d159dff3c09f8b1a35741bbf7e2cd8480a576dba2bbdae19ff39712eec0550965fed69113497cb9b356a88d1a006a9d41e880ab9b40d9f0a", 0xf0}, {&(0x7f0000004640)="79e6275c8a677608f14208484fe98151ab058af7c1d379c2821415f4c29cbaa850b414eed1705784ed063d1c8b23d77c78ab6294ee1ad13fff7cf33f61533b22ba1c0bfa4fd62536c248e2fc68568b", 0x4f}, {&(0x7f00000046c0)="07b7f455c9fd601af76ea65f095f86f380e14a38a2ddf6d2f57e0bc22a1b2e3fbb8bfe16c14da4f51aadb83678d33861d41fdb2f961b3ce91e96adf709d64ccb3ac6625e59939484c9ee802f92e549a947eeb229cf3fca8de792515f44d5e09db93c8f6be793db28eac0c4b20ecad9e96d8f77deb0909cdc51e462b7a0777bfe297fbcdd72592db278428a27561c0b71f10d4da0ddd6decfeeee9115dd787bc344e2f296d40d0cd33b646c3abdf9b16ecbd9c33bd357fe226a81ce0c0d3ac241a9ddf51234844ce3785c579a844c93b54dcf414ee2ee05387729f954a2b11d0ff56f02c3fd1634ab39464bb6a6167fde8343336a4938f3", 0xf7}], 0x3, 0x0, 0x0, 0x20000880}}, {{&(0x7f0000004800)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004880), 0x0, &(0x7f0000004d00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}], 0x100, 0xd8c320b467f40985}}, {{&(0x7f0000004e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000004e80)="170b9417cfd0650c36236f4755526dfba08b444c764299e62b0ca03febc0c7246a179d59faf94c7c0d2d8dd5cc", 0x2d}], 0x1, &(0x7f0000004f80)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c}}], 0x58, 0x1}}, {{&(0x7f0000005000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000062c0)=[{&(0x7f0000005080)="f002e12f8b46792bdbce8c5e217006c6f8f487eab1ce5efa6ef3094a3ec20d757947a836b63540c420447adc185d53f6159b5652447561488419bffa3acb2382799a0fbd815058009a10ea22d6a7027154101c6fd11fc08624cfbaec7b5933522dd244b06eb3c973db78db739cd9c9592de88faa1a8936d1129389cca213134eba7c133a4e2a8cf9131089ca2cef576e50154de63bc096b852522a0592c4167076c567d106ff70a3d83b", 0xaa}, {&(0x7f0000005140)="d3e24fce0888d6d7d13a61c3e4db45bb5c5033a7b8c2a2f1fffcbe00318b6a7030ba91535664a83a17038ba8beb63ca2d6a56fbe293f544cc791f3b3947c7d511726137eb42fe493225b5cc847e5e12c0701a53343279cf6e3f64f308761fa32aadd75e96734310fff55402e07ff1d0c8d07de2652ec6e50b185", 0x7a}, {&(0x7f00000051c0)="a6a27394b506efbccef63178bed7e0fe84fde61161c5f4ea0e40c3fe882f69085a1fee257189225b7777c00ff71a086c40cd3cc8686e6f1a5cfc75457f7b5c4ec550a167d78c8ef782e3ba418a94024cd9b29e3a1c9b5582bd0176d9355368f754d796f32e7697d60839f097f2c05b636e983ab0cea371d54a014b3768b9615f8933ba0564ff33444bb2e4d0661a2d7c9c58a63ef221d5655b843f4ab762a7d54b3d37fd60f8e1d9135075663b82405f7f238e26c1c73e8da9eff50eb5c350f41fb0", 0xc2}, {&(0x7f00000052c0)="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", 0x1000}], 0x4, &(0x7f0000006440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x40, 0x4000}}, {{&(0x7f0000006480)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000065c0)=[{&(0x7f0000006500)="ec3b434fcea45f20275bca12b19fd1fd9d5d87cb38e71ec14cd0cf989af112f71a805adf8dc03840ece04be71141279c028d3e75435bc1d36db8d765f1d6c6b346092d02d8dddd5d21cd0ff9eefdde4ab65bbd136b141040f8978a4e24046352813a1b986c5cc669c409fc79b4971f2e4da8e28be918e64f2fe6509152611e0edbba87e524d6aab07ae3cd8a6ef6fa3771a826ad72ff84aceb55ce9b7eac6fde28a97dd4f5193a5ed6", 0xa9}], 0x1, &(0x7f00000066c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="28000000400000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}}, {{0x0, 0x0, &(0x7f0000006880)=[{&(0x7f0000006780)="7053e3599270c06e27a01f4d2f93440e56addd049c0a9d07e63234b61baefff9d90a6dd6a4a8fb0a63c091d3fd92ab1807f52244400ba97e59011af5f2540193b80cd59e4e6871286850fb50f6e281751c2744b2497ca22ad9344ade2d218ff214e21219ddc648352d168745efc3ff50b8ee564e1138b2ccc39d97a42c0ff99b894a9e11b42e7d8f23a998200c5b8f2934fea67392d7cbea24dc044911179b37b161ea880bf3c015a51a5657e01de5fa7be5c20208e03e733f7525ef6306adeadb1bd233c2b6b6f9c47dab2d9b093277a21bbc3eb578ed8499fbdfef", 0xdc}], 0x1, 0x0, 0x0, 0x4}}, {{&(0x7f00000068c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000006ec0)=[{&(0x7f0000006940)="c5d5f77a27b3951a08b9ae2b3458a58979870a3352ab7434a4650160349c4b04ea194dbb3d167aa2555260fdeaea72e454de09459898b6bec90b586c63bae0d20ae138e94974d98bc1f4adf1161d8c3c1fbca45a44c116407d88dcc0a8a56c880b68087bf51ba0438a41043178ef00434de553bfcf3960e88bde33bcfb03f3b1b25462324d027356ac42c5bcf330f24c405f9c72562bb72b895fd80b6c7ee14f8cdf9030c5c2aac46305653cbd241c3c0c8e11fce1abab6d5f7af1ef316156b2f7eac196ca9d8aebfc3d", 0xca}, {&(0x7f0000006a40)="c53fb318a12e5018172f462067f123174917ff9be382ac8a9509c9904dee124c1c370a486c3982ca5a084048263ed1cb236bdfaae327097e077b25822ba93d29af66db3ae6bf922ea3e19a0f27c6d7912678db2b959d44ec699a98aaf7d55e73d74a0033392e65b92d167e93a3139f2ac7db110226a67b800e9fc25b5cdda0a2ef8223f97c288195fd225bf7a8c883e361b96d6e8859eb1600fff2b1d16c36", 0x9f}, {&(0x7f0000006b00)="dbafab8855aa895faf9a371e09ce828c072a7f1a0ada7e395ac1964c0961a4fefe1573e6362fe0ad8c5ea1650afcffda71a541799165ab2c4be396357659d5ef0ab8dddbe126a7431fe18b4a18863ac6471540d9f02a023b9e82418c0bccf8a98ce00e7207", 0x65}, {&(0x7f0000006b80)="dba3eb94fbf0d7780b76b638d37d2711cbd06a0603d746c7a722457ba2b9e52532fe8ef462a524e7212f24708393e2f63ff2aa11c7ddbfe48085c53a7fea9cec76a168eeab450aeed91ab00caef63551cb762afafa9947dd729fa840cadff69c123bc5b31313ecc5cf9a2e181e6a5ef44474bcd30bfc1a3d9ad41c696381b599dc6d25e18ba74bb947f8f0f74f352a182b14a6d4fcdc88eb33f479bb", 0x9c}, {&(0x7f0000006c40)="34a358b231a1d29e1d4ff4fd66c66b242bb501fa3508f34067e0e633c4b2a2903c02651a03b0c4427709df4e5c2faa086b6e810c937b27893bfa2e4a9cbe537cecaad3c056dd1bc65efa73c058d0fcc7eace61e5bcc207867e142d69ffa82a8bebc67db5fe880ec0aa5be04240bf09f9e4491d68a7872ce324b86b12288ffe35529b2aa8767381b9965486", 0x8b}, {&(0x7f0000006d00)="6563aa883863cbb186c260f4b04120522f3f5055bae39a42283472db6b465b041c7587e9b34e468e7184bd067b480024c6257c7133684d1143b14678552255cb60", 0x41}, {&(0x7f0000006d80)="6029d700304bf60d3bd3b1e378729e3d6bb38d9f2e67fae87efb26e86afcdb1c0817620b3b0e26f42eb78326f2", 0x2d}, {&(0x7f0000006dc0)="52da7d6523556417c891bda8153224de9b2d10a4781d9e508923621ff482a3be59149960d0ce5269", 0x28}, {&(0x7f0000006e00)="45c04252985f43baa59f4665708607cff12dcd646317498f76dde0f6aa828735b3bf526f9d7b40f6a9f681a10da5fb1502595b7685067fef8b45948da8944773da2763e5ac5dc9bf5f2c0dbebfcfc778709fb78642eb8372a4860654cafae5a48e3b2a8036315f1fd04971c34e3161949ce8a9838b13837b51ec4d09763589314b556bded39746ef663bd2c052eadd4ee192b9502bd5474a3766e99033bcb41b7d4cd7f14cdc396b25580a5869bed1", 0xaf}], 0x9, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000006f80)="2631ab5745c66fb290e77d7b6b5e13e77faeb87b108457727c84f7c2a81529e840a43a66795c43e23b524cd516ad00c804c0095c9d9eb2445fa34f4024913dec387fa242cc7de8c6187b2c20967a0e69278670f030fa5a1fc0bd41cf62f0588d5e617d56041c45f87809eb45", 0x6c}, {&(0x7f0000007000)="14ea233e33cd3ff3f6c750ace1c84713d1960a0cc281278511787f3b88e2ccad7574dc58f9166a64664ac6607984a2a4169d0d2bf623790b25074f7eff9a2dc200821496a4f80a27d554f6883d3a96a76b360f89329063d378e471d04683d76b6236e035325bd640315b8995cffd27e52ea1952b9c57da76026e937ccf771a8aa1fb46e54419b39f721cf452aceddfee5edf1c33122a735b0d55228706133f850c1d6752fd878416c46d7482c0a39fd0ef53c60abc97850c4126cbcb85332dd22f6389a45e2d9fd8b4", 0xc9}, {&(0x7f0000007100)="5e18c8f4791e2615d4bc875edfa5897b4f716f884b270c3085bb3f1c2532cb09cc4efd74f7e722ac585b2dd57627d7204c0a70164cbc16e4a4481be16d4b53865169c163e0dc7ce1e748ff63d291f560515ae5e6645aba6d2cb603ca436a8c199b59b11e177c018c9eba58bdfcc68d800519ca07149ca4dd1c23f1dd6f3d50def4dc7b246c83094a4a634b7ac45094ec3133bc38b41132248b8cecda587e6460", 0xa0}, {&(0x7f00000071c0)="6513f67d540f5abfbbec8e2449f5fb0be5a4fd680e9b3c", 0x17}, {&(0x7f0000007200)="edf10621557e6e549be0eb737f4433d5a47b1323f55ea23d8f41b0d0fbd4f6e621d89dd8f36148fc41a6989d53f262e95bb463e9fb766023d93014eb4e50d537166d1502eb1dbd06ec18a522aa049024904f0fc6b723215d37efeb248541a31d9cf915f97489dcae7cd364754b2af2ad0daf46742a61e5f3a59f9dbdddb29f52fa1f9ac962335857f0f67c5e008cfd1cc098289dfe6a8967a0e5d87f86fa44c376e13685e397d21ee3fdfc39aa9fc9e3bf97adaf16681a459d", 0xb9}, {&(0x7f00000072c0)="9914777eba085ce2f5715866761afbe23969e9567828964af3a58f0e8fc23c178957414214fd76b579468ecfbf1ef4a5b311fd52d8baed4327398cd9f04f776a7abe2506b3ef9ecd979f2282b2285e3214483467086bf0a14f177ff1693284e37ea71a88cc2cb84eba9ccad94c19744133cf4cdb58f21f20af5ec37fdc76d9f4749323be72f1836110e0a401b804cd6bc5c55243cb933c8c1c76beb84cd15cbfd54a77ac19e3fcfda5a682017a6b021697e04ff93f23ff2938f995f9", 0xbc}], 0x6, 0x0, 0x0, 0x8010}}], 0xa, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) 11:01:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x4890) 11:01:16 executing program 2: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0x9, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000180)='-\x00', &(0x7f00000001c0)="55e60fad5bda9924e6341d8400555190f8ee55c8265f9ddd5ea31db5a6fe568b6b91629aa931202d509c8aa5ff0e5c1b9815fa203df1d6af52ee69259f46d6ed6f6e22cd4a8c4ce45c85dc6e8c596752b1", 0x51) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="afc9", 0x2, 0xffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3ba4141e, 0x1000, 0x1549669773c55ba0}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f0000000080)=""/89, 0x59) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0xe, "9d"}, 0x3, 0x4) fallocate(r0, 0x8, 0x0, 0x8000) chmod(&(0x7f0000001940)='./file0\x00', 0x0) pread64(r1, &(0x7f0000000500)=""/253, 0xfd, 0x5) 11:01:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xffff0000}}], 0x1, 0x4890) 11:01:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 39) 11:01:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000002a00200020000000fedbdf2515000000de1407db9287c7a8d3e7b50051c48a797a72acd5b9a48c7b434b1a064a18ce9432517f1a2df68a57e01b4de3da0770719ad21c5929"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20c0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002e80)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000002f80)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003040)={'ip6_vti0\x00', &(0x7f0000002fc0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x1, 0x6, 0xb, @empty, @private0, 0x10, 0x1, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003140)={'syztnl1\x00', &(0x7f0000003080)={'gre0\x00', 0x0, 0x10, 0x1, 0x7842, 0x16f64dd3, {{0x28, 0x4, 0x3, 0x19, 0xa0, 0x67, 0x0, 0x4, 0x4, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x34, 0x24, 0x1, 0x6, [{@rand_addr=0x64010101, 0x2284}, {@rand_addr=0x64010102, 0x8000}, {@broadcast, 0xfffffff9}, {@loopback, 0x33000}, {@local, 0xd4f}, {@broadcast, 0x7}]}, @lsrr={0x83, 0xf, 0xdd, [@rand_addr=0x64010101, @private=0xa010100, @private=0xa010100]}, @lsrr={0x83, 0x7, 0x13, [@multicast1]}, @cipso={0x86, 0x14, 0x0, [{0x6, 0xe, "a27099884a4e3a9dc0b928b0"}]}, @timestamp_prespec={0x44, 0x2c, 0x6d, 0x3, 0x6, [{@rand_addr=0x64010100, 0x2}, {@multicast2, 0x8}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x6}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000033c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003380)={&(0x7f0000003180)={0x1c8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9188}}}]}}, {{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, 0x1e, 0xcd2781b960712dff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 11:01:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x6000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:16 executing program 0: ftruncate(0xffffffffffffffff, 0x1000004) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) [ 2948.913762] FAULT_INJECTION: forcing a failure. [ 2948.913762] name failslab, interval 1, probability 0, space 0, times 0 [ 2948.916728] CPU: 0 PID: 16432 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2948.918537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2948.920422] Call Trace: [ 2948.921027] dump_stack+0x107/0x167 [ 2948.921851] should_fail.cold+0x5/0xa [ 2948.922712] ? xas_alloc+0x336/0x440 [ 2948.923551] should_failslab+0x5/0x20 [ 2948.924419] kmem_cache_alloc+0x5b/0x310 [ 2948.925332] ? stack_trace_consume_entry+0x160/0x160 [ 2948.926485] xas_alloc+0x336/0x440 [ 2948.927288] xas_create+0x34a/0x10d0 [ 2948.928152] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2948.929346] xas_store+0x8c/0x1c40 [ 2948.930166] __xa_store+0x164/0x2d0 [ 2948.930988] ? xa_delete_node+0x280/0x280 [ 2948.931947] ? trace_hardirqs_on+0x5b/0x180 [ 2948.932927] xa_store+0x31/0x50 [ 2948.933679] __io_uring_add_tctx_node+0x1cf/0x520 [ 2948.934755] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2948.935937] ? alloc_fd+0x2e7/0x670 [ 2948.936772] io_uring_setup+0x1fbb/0x2980 [ 2948.937715] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2948.938865] ? wait_for_completion_io+0x270/0x270 [ 2948.939990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2948.941176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2948.942356] do_syscall_64+0x33/0x40 [ 2948.943195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2948.944361] RIP: 0033:0x7feea834bb19 [ 2948.945206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2948.949362] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2948.951074] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2948.952679] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2948.954284] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2948.955883] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2948.957478] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:01:16 executing program 2: io_setup(0xfffffffe, &(0x7f0000000000)=0x0) io_setup(0x38, &(0x7f0000000040)=0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f0000000080)=""/89, 0x59) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x101040, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r4, &(0x7f0000000080)=""/89, 0x59) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x5, r2, &(0x7f0000000080)="362a378f89f80c63100b0623b7b2b30e2d0c12c67f321d247e1fee5f84d2f0717da97db620ff9d12c5fbdd81b3f4570b62d8a91dd8be46049f53e6438b1465ab59b1e562fa3c5f98461b20963ed2d00f0a4b49", 0x53, 0x8fd5, 0x0, 0x0, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x7, r4, &(0x7f00000001c0)="07c5ecbbcd3ea7636733cbc84cc7af9672cdc44077af4e28b40819f3e09ef430fb5d4f6193c6847d12e7", 0x2a, 0x7fffffff, 0x0, 0x1}]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x22001) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000500)={{'\x00', 0x1}, {0x2}, 0x1, 0x0, 0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)="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", 0x190, 0x0, &(0x7f0000000680)={0x2, 0x1058, {0x1, 0xc, 0x1000, "594f775b883f2dbca1b628a53c4d2b9c5e9d5470c2e1b80cda5b3f77abd3d6e7b055f5d6b0d6cefd30b8f30c822e5132b2f8caac42f5b15d419560e122409e68808e1a65ac67556246f06f291842b1d6fa8f05a73cb0c88f62ac47a01d595a608796a03258ef440cf1f924f8ea6cd32586ea12b607b1055bccbd8a7225aa28d300fcee9186e84543d1cb21a345dfb158a81ba755b57abbc7cea337decde7f7086ab8a08208fc926d8ecd56aa4176e2f457aefda1c7bb6e7900e2176ea5d77c9434ab7b43ae94c37f51eded9260fcbe5bc6aeb2d65bf0047bc84c895deb0ca44403c5607dfb72e6806cf8889989d9ae00d60c0ca0ea59bb02152d095b31030a7d6a5da75aa862109755aa55cd741221b89852d75f0697f41bd673a58e5ba3a854b4b2228f9870a0f158ef6007acbc151e02a9c1932828bbaa4492919c1b13e2a3a19f778375c208748837987c6f859045c1e0b8f9e31a8b53ac3c2babee4c99ed9568479540b4c48c3eb90a098aed35f4823932ea9a2b56dbb07cc5c4e7a7268df151789d7bfa71ddf0d1787a488934af4846fa5760ed240b19bacc3a4d56ee849111b1f4b611119fc2a711fbc65faa4c31edc267120cd498b1e7c391820aac6a72483231943b6e536c227e4ddbd216567be0f10b1ab21b7522a12160c1ef762c419c26feb72ffdcc0e6becf2eca299d92cbfc22c49ba90e5f14e9c8787e4a01fabd0cdd1390176b80613be41e3f25daa403f3caf3d3a2e570be837963b1240fea7c79d6b2467e9d7023ef2aa3d8af2705d775ca390ccfb12849fd90842eed8f5f90693753eb10e85f678acac6593d92f7d7dda535e5e413cfa259332bfff03e994383c413811d72d0ad5e267f91ae8f78be9d80976f9c09ee77d31b5dd60d5e549780fe2c069298694a38948f238d9d885bbfdbb922c58b27251b29abbe6f2b53e63aca6bfb6506bfc89e4e57cfe2de81396b8eea57fa1734b09472f5421c032e3d21f1a565619c692d6e0aefe562f335584fe39e299973b11f795a4f703a61752697277f35ff6ed414345664072481f47e8f2db7872f6cb6f4649b9d9e3ab0492cd42ca28db271fb347f9defe69d8f8cea972948da87b779a1d8163185f869256bc82eb4400ba7f45f87a9892fa6e06ac5a9df85b28e3b1238b9cdeb6e1cef535bef55716764d680b0c3962e2f0efaf0106a77ecef9b323b300d4deb07011448c24d883b56ef597e64ff30845e1b79c3c6c9842d82c2dada0af633d0ba16e9daaad78717a17ea188d4885dd72f27fd78f0a0b380b7c136d192540a45bd5dc7a78fd3f737d9ba1e1ea0bce22204c2cb395f65c8fc14b0afca72734d33116ecc2515b2cf9a2690bdf2c5513d21d8a15426c15bcba45ac32c942579ac85524e32184cd217a345377880c8a72dd2d2bb3ee5e4cc1d364186b10a70d7d92bc2ef7da31f9dca9ed8912b872814110198430ddf1543454d7fd73d80776d97be8aad44b4000da06d0fcfce89a196b5c362fb6017248c79d9d5f76dc2166593c880926afa3d258552759f5f11c0f7e888150bbfbb5f8ea3f11a75c3eb6a894c14783109a80ced8e17f45b2ba367141b8d00d1b5283c9d415bde4c6007f1ee52f1b85df5f63d9d7bcaac1032feb9259a0c7fd11cc140751083d762a6fb86750c7cc4be778de238049e919010ae6c5d2a63835045af752509dd1bfd79b077d3e8d212435c0ecd23795a1987814d1898f2eed1a0d77ac2965a3f26208f35d5d0bf032f2705ebb7cf87d236e32c76dcc9f8d012ffd69dc8288b4a78c05eadabf252dc420e1f1510af38089b483689a8cf2fa91e9170b70e9e781298efc5dc2bab09631d9b613b0116e8babf0c306afe725d7d118de29cf3f3abca068370ddf2fbd6260dc46096be4bfbbfd944cb71f66cc99afd0296e9796aed1c81e24643866c8576c2d544dc9f7c3131a39c60f85af86922a207bde43f263658afabc4cd8b8d55918579f720f06b4181677630cf9fab77829898b8cba01d233e58d7227bb8870108296f3478a0a5e677f8bde367cf2ca32b8bbfbe97f86a14e439d3db50abba483174a79917ecfd5060cc756beebfa85836fd9c0722d841410c2ce4518c435c79acf5cb7b725249ae0bbdd7b963be23b7ee3b1caff69c6b403f937dc4becae70fb62dda975661cf50650486ef0f5a8e14579f0d376e8ae9ab4cb94b12b90ce5f24107dab68679de289eb356e29b3d58ccd20471c22296dcbb437deb9065d4aaf7bfbb43962f7f1b96e1017f04397510dea8e13caa5562cb724d469a4f4c49df988c7a6aa5a6774409c5adad697e67976e2dc9c0a46a2fe4c9a118e12cd865f2b6f3dff6bbbde1ef9346186e3566543140b88cf5912bad7a352788d54857253363f8250392f5f1357fa8cda7f8f363910f1613d92a83f7449700edbca95de10b311b5c9557bb857672093f55774274b747491339dfc5b53e593ead3c8d5ddd129a0084f39244b0540bed1c6fe31ab1ed58e98e128ccbe772dd856e54c34fd8baa07caca2aa922e9109d1dfb41c311bf55a9306738a1c7b6b9c7c528e4756d34360369afb1c0491f433b4d43a983b41ffd4c3e1df55792cd40d5ecf328cb86bfc6bfc091a6d79e21eaef236aa526d2fdd7b0aaf81d16e47fa660fb1501cb02bc7fd20b6f051caf49ac41d957d23e81b7988a72dfb21b434ff6692b573899529610a8bb92b0bb571189f78ad494c1b5ac36fd881b293bfa18da999c9893c28622a575e7cfd8c4f77993a1e6c54474ec3fede510abbed1c50de41f18b13eb7f6ff917d1eb58b5ba0028864a9d4eb504565a3de3231a7996e1bbcf11b50422f2cfca58ccc31a5ac02106cfb0b4edfc1cf944a532a94dcf3261d38264c44edb9b91b2f57258b28b2d71ddead64351bc926c7be63c2c5b4a92fc338533a5ab04c7fb6426cf3aaf8b6719dbdc68e1be6cf6ff3b7a6dd2a22df445d2f060a925c6db87cbacca8f6d51b7c2cadfbb3678a63aec13da9718b90109d5324e32700b692d543f9398e546d8433da85f6a86905f773e301f9c3dee6edca4afe77d68a82620de0dba8071e471ab826d9e19e9980eb6edf6431efd7b5d92823c6c1d644dbf20b652732b1c27e202cb387eab18ddb2a14940d3488b2742ef0af9e670b8bba0911e5c8b58cbb05264505a93ff9ee4925316ce16d1929fb2d59ec9c9af2bba271af70d5e1de9dec86b768501d77fea6a87341072e5b25435f83a663e5885fd3511506d3cca363c33b077d18c500cbd423f3ca0d9095b7346827218eed892ecafadadad9742c17406c0197e4cc4992cfd798f32bd49f91a7540a5730a79956f0c4a19994c0f5164f6de4851c01cc08c4078c8d0b52aed1c39492aa0504e1009c87ef59c807749b34b3f9aef041de69c4c8512aec29a0c6f6353aeda24b1e8dde732ba9e76ba9749f2f0c0e864bbb7f0d37820a2d19c6fd75d9e7f9fcc5d5c76506aa359f25c296ae54fb1213ea2b7b6badf0e316d22bcfd9639fd3148200b358dee7946618a38dce24789df077beddca3bc0a9703a943fd648753b6fd49632879cbb42149c00cae4533fe2e4276f877d581ee56d5dfd07d9e79f9202ecb60bc12dca19b6effd34ea3ad916484aabcdd3bf9102ebe37762348949eb9d30773f83ca2385472c452012d46bb08537c2747e0f5f7db90ba5d4b0af88bd88ff1c8bc2fbd33d80f705443daa6577523bf67918c058ebecbe55d209768b1cab6946b9c27e23bbe530ded7839bb270576a39fcc9c24faebd8bcc2845637732012b9c8eb5437e9496e0d4997d68d2f7b33166055d4e67e34fc496cb53e48d3c1490de18edc5b33dd7d6109c18f20695f4af2d5f2a14c8e8de10b053a64ca71ff53aeae20e40f0e91da42698530c3e25c9bceb06abccc2e88d29f7897b996e7615c6024040d71c9c527858db598f6f4f1d0d6e161df67c20730474b5a40c7605a3ba6b4a7989bd45171f207b27069b267db37a9236d6c1d84d3fa17263dbe9777d53d565d7e5a559b7789f7c897a8ef22b971fc164b43704f26156414d6cc0084a78f364e62e80345f97a9925b6817d8db00fec333353ddb6bdc1d48a4c151c85cdb9bc9cb2ec62cb79022190d10f4a3e2ac341addb548314b7ae7123faabc405ee09803f7a39d2823eaa20d9546fb5bfe4bbe6b664d37aa6936717bee88bf039f4d8857c9fee7fba445dae539376aaa3ee198a21f7953be8f85a7d431aa9c0c99d5afc9e71a6d91f052abe406a0fa9861d3a4afab606add13be6b1dce8ef9e071e74aca7ad675a954369e97b987a8f4c1d1460f78c2e24ab61975ceb441886b15f3d4d41dc82b1b45369a230a9f1f8aefcf36d6f76a6cd31743eff9dfc7d9afa87e67d2701d6a27f1f1cd7096db78daef3c319fa1988f15934bb876c5ffb6fdc7c1c9a75d20f64ba1f22c3a948d4ea52fb9ff71bd0414ee925c9f8279fafa19c5920cc0f0fe4ff4cb691107837dd8991207a96e895c30b2102ef357a256fc91d459ebb8e4003a905d919afae6ab5a41782055171357215733c9be53bc1d04835b1ad680673a8bb8a16e7aaf2553ff123f95c6a11722e9d4baf918e45cc4541613849b5b20433538ef6d5c2b6fe31bf476d2d2798c36c92b1cbd7bf1487dd2fcc4fe6259f22af501bde758e985a186ad12d7eda718e1bac56eea01f17b46c4bd85a0e933d52b00b921c6b58dc1bad67d1b4252ffe8e6b10a2cf5894170b2bf14c5dab24417e8538a783edb43061deda26c9484129f3206f750e97b480905518da1f17d7177bd34e18dec271105344ed40b36d8e69dda406a5015a8d0470b92f2609b0379fa7a4a2c0eb3d8c788152177cd3f244296b1d79c346cdc74e26df556ede86d80532eb5e82aafab7cd131492728f31a4f6c1c052df2b3d2e866a7b3a4b96c853b46948c80efdc5b19bcd4f5e0845ade0ab6a415f794beb71f71761c5cedda5f91cfde4ea165dc1225f5506837c2489e7810697480b3d7809cd52b2479d50fd5c91c2a5eec15bfca113743d9d047836ac8a72ad45e372f63467144a426fa9a2fb6a6ffdc5e0b48d03a29e5f0029e1e4209ac28ea8f3fc99ae6375ec66f53cb0c391a5677a15dd7da8fe16a4b21e869895da481c66748e35baad200fe5e8ab65effe914db5a2eee8034d0b2f9135fe701f5345908eafa02badc528ea063c7e00af6afc9f586a0eb39b36f679682c29672fbe3674d616ffdadb78f61c4caf53412946000d9c88d02dc724f5b48e4921f880e18e2444934e225707b872e11e9f29a786f6367a6201eee6776b54ce35db8dd42405a821edd8e5fd514b6edba72901ace090599e061a5c63a9c49102f649748e9ee00905fd05833b47cf2e23c90ad0083794bfad2124ed166472f6d9d992a27e9203d8191b5d313872e3bc734eb1e04d10233e275ccb2de889a7157e3bcc13b46d890d49657232d2cff7efb04863979634ce161d9fd9cf40aca52523d422544996fe381945ed9c9220db3670f1f4bc27c889a82834fa0cce14b59ad1036775e76e0a3da494530e0fb7a956f7fb4481ad621341329b1b0907b96290cbba619e0f2dc60d4217b292ca9652e7c5b5c74db89e437f2c5a04b41b3d57c04305e7a46b1c666f82ab2094be678a1e9e9d5109000cc4dc4d1355bf42ba5ca5b3a47c1d93852b0ceb8bcc9ee367308a7ac7f6132d8bc8a8690d2b655e7ea352ebafa96d3b080e0a2cd4d3d1aa9a8929ffe17d1179c17a3e8bb0f7bd504e5c51a0a30abfd6d9f7e78ec86e536380efbd427091e656d7dadbe706e11edcf5b24", 0x4b, "8ec929bb76182b773483d150ffb6cd45bd1c530a24273139736a49237d68b5be4c25b289cdc06214b17d39c935efcc274c18ef60c4ced0965328ea0066e684af9389146aa65cf8b9b3b2e7"}, 0x1000, "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"}, 0x2064}) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) 11:01:16 executing program 6: ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x4) syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) dup(0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x8600, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='coredump_filter\x00') openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x110) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f00000001c0)=""/153, 0x99) 11:01:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x7000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:16 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x110) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)={0x48501, 0x0, 0x4}, 0x18) sendfile(0xffffffffffffffff, r4, &(0x7f0000000540)=0xfffffffffffffffc, 0x10001) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) creat(&(0x7f0000000240)='\x00', 0x40) inotify_add_watch(r1, &(0x7f0000000100)='./file1/file0\x00', 0x50000204) write$P9_RREADLINK(r2, &(0x7f0000000480)=ANY=[@ANYRES16], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[@ANYRES16], 0xfdef) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000580)={0x3, &(0x7f0000000780)=[{0x2, 0x20, &(0x7f0000000400)="7e58cc5b4d1fc5e22c0aa13f55f9b761e449c5a510702513cdd465fab8da9b4f", 0x0, 0x1}, {0x7fffffff, 0x67, &(0x7f0000000680)="7c46e701ba895144734e3e08662df3e4dd14827f253d20039c873501290d513f07a87e920ebd7db41b6ca15e3e563de5291633608aa0df68e8006f17cc597f5ff137f5368e2c25e1fbf7846f627782e662b4ad8a595d69f8c20a435730f505af8a93bd7cfbe290", 0x1}, {0x3, 0x75, &(0x7f0000000700)="0c9d86a724d6ceef0bde7015670195f33bd90006bc3e305eece0c9d7af5570fce68e005b050923fa09361127a80c0ec7e15e5bd9aa1e3f078880b454310e2da822bd2a341ddd36388695c0c19f7dfd136d6d6bbfeab027226c4dba1ad6dc8500fddb6a0effb6c0fe0b1561b9c4b1fb46144bc42fdd", 0x1}]}) openat(r2, &(0x7f0000000280)='./file2\x00', 0x200, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x640c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 11:01:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x8000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xfffffdef}}], 0x1, 0x4890) 11:01:16 executing program 0: ftruncate(0xffffffffffffffff, 0x1000004) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:01:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x4890) 11:01:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x9000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:16 executing program 4: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x5, 0x8, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r5 = dup(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000400)={0x0, "2da047c5bacdc6eab1b4c0777726bb9c"}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001e00)={{}, 0x0, 0xa, @unused=[0x7f, 0xc919, 0x2, 0x3ff], @devid=r8}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r7, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x2e}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24005001}, 0x80) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x891) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x4, 0x21, 0xe8, 0x5, 0x1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x8000, 0xdff, 0x9}}) sendmsg$FOU_CMD_GET(r3, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x38, r0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x2048800) 11:01:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x4890) 11:01:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000100"/92]}) syz_mount_image$nfs(0x0, 0x0, 0x4, 0x2, &(0x7f0000001400)=[{&(0x7f00000011c0)="f5fb", 0x2, 0xfff}, {&(0x7f0000001280)='M', 0x1}], 0x0, 0x0) [ 2964.545184] tmpfs: Bad value for 'mpol' 11:01:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 40) 11:01:32 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}, 0x22}, {@nr_blocks}]}) creat(&(0x7f0000000000)='./file0\x00', 0x1) 11:01:32 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x50, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1008106}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000041) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xdc, r4, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x1}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xf}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xc}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x60, 0x30, 0x4, 0x5, 0x6c, 0x24, 0xc, 0xb, 0xb, 0xb, 0x1c]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1}, {0x0, 0x7}, {0x5, 0x6}, {0x7, 0x4}, {0x1, 0x2}, {0x1, 0x5}, {}, {0x7, 0xa}, {0x4, 0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x0, 0x4}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x5}, {0x4, 0x8}, {0x2, 0x8}, {0x4, 0x6}, {0x5, 0x3}, {0x3, 0x4}, {0x6, 0x7}, {0x5, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x4, 0x6}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x2, 0x8}, {0x2}, {0x0, 0x4}, {0x2, 0x7}, {0x6, 0x5}, {0x6, 0x9}, {0x2, 0x6}, {0x5, 0x9}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x3}, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0x1}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x4, 0xffff, 0xc4b4, 0x400, 0x739, 0xc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0xffff, 0x3f, 0x6fd, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20004800}, 0xd3630b67e3884e8) sendmsg$nl_generic(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@generic="a6dfc90789"]}, 0x1c}}, 0x0) [ 2964.566202] tmpfs: Bad value for 'mpol' 11:01:32 executing program 2: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f00000000c0)) r0 = semget(0x3, 0x4, 0x12) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000000)=""/151) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4307, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x0, 0x100000001}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) semctl$SEM_STAT(r0, 0x2, 0x12, &(0x7f0000000100)=""/27) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) 11:01:32 executing program 4: lookup_dcookie(0xf07b, &(0x7f0000000840)=""/188, 0xbc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$packet(0x11, 0x2, 0x300) accept(r1, &(0x7f00000002c0)=@generic, &(0x7f0000000140)=0xffffffffffffff40) lstat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_io_uring_setup(0x3c12, &(0x7f0000000340)={0x0, 0x9eee, 0x20, 0x1, 0x222, 0x0, r2}, &(0x7f0000ff5000/0x9000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000600)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r0, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="9c138a59fd2331eaf02912406cf141", 0xf}, {&(0x7f0000000580)="ab7084368358fa3ac8f7063e3f2ff9132afd6851e557d2e075b2414c405ebec534d6bba0894c1ce54c068354ad15f3a9754c5a95784da621ad3a4e1f701fd4b4bf8c2c4bd1fbd855e6f74a5d46ef2b297ac87c3a6f85da8f7b977b02fc9aafbf75a99c93c53b105af0f8aabe", 0x6c}], 0x2, &(0x7f0000000900)=[{0x30, 0x109, 0xffffffc0, "53700634acfef62c9f4944b0aa2f5e939955ef4a9f1d2ffc3a58c1"}, {0xf8, 0xff, 0xe3e, "cc8fd2c38d75c8beb908813376681192ad78b6d91bc86520bec01236c8a6553be7f81a3f46a72c039a6fb15c47f69666275c6f5cd297253a25878434eff2f7af0095573757c42c66181832e9f6c37e3f7997e3d635d426bfdb7ff3d0e5226113cc585d46a0df8f010530dee38f7f05bc2171b5163b0ab34c8990fc73aca47e64b91d2e98a609393d6619473ea7ca5b7e202dcd0cf18d4b089cc8ed6bd966d5e9c5379f32c29a589ed7d2d5796825f7c731cef7e7a2a0c7b4d77b4743640cc75da4f1543a535c954e54d842a42f0b47d613eb4182dde1eabc0ad5cadee17e6aeb7bd286868a"}, {0xf0, 0x84, 0x417e, "5421834a14cba2183c2b61d9e4593ebc194c6061ddf05be4e56f0df6984fe7676f220e535d6c916eb6f81933186af06119b5ea1826bf9425d6bbe14300deb585be7ed57460f499a02d08644a7862bf510b8d73376aef610890ebe0a15fee9d1763512870c32d002135c5d1ee7629547e1e19ab404f57ee50b8c664adb57ff6dc0c78b5e551794a1e1fff1bd047a095871959610199fc40faf58526c1af983e98549f3f9f2b34e7f81f53527abf46048447de1350721838db78c5d68906d3b660b2732e8b992d683f80eaed5c7b202c08c0dfa9df06e4d08e71"}, {0xa8, 0x107, 0x4, "a9d6ac129d767beaabd0222fd18e88613598d2fe7e402a3c13e23921f434c0d80f9f8883aaaa6e6d021d120a9dc04b6ce09004f7cc9305a79b496a33ce38b1c7625d789f1a5a8f0ca1bbd45f425767cdccd6d854b44468b6d170c6b5659e300f056c97c6c9d1d5b20de24922662feddc690db6e4e4404b376184d0235f3e956a7cfe919d1bb6ab0bc66defc061a4d81ae629cbaf33"}], 0x2c0}, 0x0, 0x40000}, 0x9) lookup_dcookie(0x1, &(0x7f00000000c0)=""/97, 0x61) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0x0, r4) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x212842, 0x112) creat(&(0x7f00000001c0)='./file0\x00', 0x100) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xf360, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00210c00000080000000ab0400020008000c00000000001b356e0b9af1"], 0x1c}}, 0x20040000) 11:01:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xa000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:32 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:01:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x200000000000000}}], 0x1, 0x4890) [ 2964.596133] FAULT_INJECTION: forcing a failure. [ 2964.596133] name failslab, interval 1, probability 0, space 0, times 0 [ 2964.598643] CPU: 1 PID: 16657 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2964.600119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2964.601888] Call Trace: [ 2964.602459] dump_stack+0x107/0x167 [ 2964.603238] should_fail.cold+0x5/0xa [ 2964.604058] ? create_object.isra.0+0x3a/0xa30 [ 2964.605018] should_failslab+0x5/0x20 [ 2964.605824] kmem_cache_alloc+0x5b/0x310 [ 2964.606692] create_object.isra.0+0x3a/0xa30 [ 2964.607612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2964.608701] kmem_cache_alloc+0x159/0x310 [ 2964.609585] xas_alloc+0x336/0x440 [ 2964.610337] xas_create+0x34a/0x10d0 [ 2964.611133] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2964.612284] xas_store+0x8c/0x1c40 [ 2964.613056] __xa_store+0x164/0x2d0 [ 2964.613834] ? xa_delete_node+0x280/0x280 [ 2964.614720] ? trace_hardirqs_on+0x5b/0x180 [ 2964.615642] xa_store+0x31/0x50 [ 2964.616360] __io_uring_add_tctx_node+0x1cf/0x520 [ 2964.617379] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2964.618485] ? alloc_fd+0x2e7/0x670 [ 2964.619262] io_uring_setup+0x1fbb/0x2980 [ 2964.620154] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2964.621218] ? wait_for_completion_io+0x270/0x270 [ 2964.622265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2964.623369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2964.624485] do_syscall_64+0x33/0x40 [ 2964.625291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2964.626396] RIP: 0033:0x7feea834bb19 [ 2964.627199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2964.631160] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2964.632796] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2964.634309] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2964.635827] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2964.637349] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2964.638861] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:01:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xb000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:32 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:01:32 executing program 6: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') 11:01:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, r0, 0x0) syncfs(r0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file1/file0\x00', 0x80100) syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 11:01:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x400000000000000}}], 0x1, 0x4890) [ 2964.865528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.866725] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2964.868818] Buffer I/O error on dev sr0, logical block 0, async page read [ 2964.870409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.871575] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2964.873682] Buffer I/O error on dev sr0, logical block 1, async page read [ 2964.877206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.878373] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2964.880442] Buffer I/O error on dev sr0, logical block 2, async page read [ 2964.885380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.886537] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2964.888885] Buffer I/O error on dev sr0, logical block 3, async page read [ 2964.890446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.891589] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2964.894062] Buffer I/O error on dev sr0, logical block 4, async page read [ 2964.895614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.896770] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2964.898959] Buffer I/O error on dev sr0, logical block 5, async page read [ 2964.900528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.901668] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2964.903789] Buffer I/O error on dev sr0, logical block 6, async page read [ 2964.905380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.906532] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2964.908637] Buffer I/O error on dev sr0, logical block 7, async page read [ 2964.910443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.911621] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2964.913669] Buffer I/O error on dev sr0, logical block 0, async page read [ 2964.915637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.916844] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2964.918861] Buffer I/O error on dev sr0, logical block 1, async page read [ 2964.920423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.921679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.922984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.924347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.925580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.926852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.928178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.929440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.930713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.931962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.933294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.934565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.935829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.937128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.938483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.939774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.941041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.942365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.943638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.944947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.946206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.947508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.948998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.950367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.951649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.952929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.954306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.955566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.956846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.958138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.960457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.961871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.963197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.964594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.966032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.967427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.968843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.970190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.971626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.973379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.974658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.976651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.979953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.981618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.982849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.984130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.985582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.986983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.988606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.989932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.991609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.992952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.994312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.995691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.997188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2964.998482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.000559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.001948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.003449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.005091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.006466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.007832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.009358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.010728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.012116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.013501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.014856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.016321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.017691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.019051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.020442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.021769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.023106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.024418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.025765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.027101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.028456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.029797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.031209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.032612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.033939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.035375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.036721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.038075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.039403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.040761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.043129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.044824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.046584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.048153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.049720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.051463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.053186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.054943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.056647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.058336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.059928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.063659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.065647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.067913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.069321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.070703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.072306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.073651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.075140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.076544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.077942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.079397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.080753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.082118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.083595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.084990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.086413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.087785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.089188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.090569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.091928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.093383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.094829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.096253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.097613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.098986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.100443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.101803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.103141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.104522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.105946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.107389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.108759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.110151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.111505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.112889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.114295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.115657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.117111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.118484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.119846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.121311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.122673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.124041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.125439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.126808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.128324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.129687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.131103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.132807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.134291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.135745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.137196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.138627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.140121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.141604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.143061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.144548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.146075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.147453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.148841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.150773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.152118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.153477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.154849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2965.156303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:01:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xf000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:01:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x109040b, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:etc_t:s0\x00', 0x1b, 0x1) rmdir(&(0x7f0000000140)='./file0/../file0\x00') truncate(&(0x7f0000000200)='./file0/file0\x00', 0xff) 11:01:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xa00000000000000}}], 0x1, 0x4890) 11:01:46 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:01:46 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x1000, 0x40006, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="014650cc6f5efc0c430c0000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'xfrm0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x8000, 0xb47}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @mcast1, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x0) 11:01:46 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x1}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x58, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000020e819b500"], 0x24}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x4e23, 0x3b, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5a4c2b39}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000740), 0x1, 0x0, 0x1}, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xcc, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x8e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0200009817a482ee0abcffdb5d068e99d9bcbea2481880cebeaa523cd601e16c9e7e6c82cf9da4b3044f2f7bb6a498a036016cb03f74c1d5650d9807217088238303ae2a31311a81e8a1686f1fda52842ed0760f22cdd334be1fc47f2522d9e073e122ad3ffa65c08c6551e50678b2361abc15188f", @ANYRES16=0x0, @ANYBLOB="010025bd71000000000003000000050005efff004b98bdcd7d209bc3dc695d2aa8ae534b20fbb35351142c7d3355a2791220bec7465cbbd3a4c603f0e19e35a3300d34f074008501d03c58a80414819ce31b0f1efdc88c2200"/101], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) pidfd_open(0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c, 0xa085f47c9e2b705b, 0xffffffffffffffff, 0xbdfdb000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r2, &(0x7f00000003c0)={0xffffffffffffffff, r3, 0x2}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="b0b29607f31b6400", @ANYRES64, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0400bf00"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80c0) 11:01:46 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 41) 11:01:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed000000000000ed66001c0000000000001c00080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c", 0xef, 0xe000}, {0x0}, {&(0x7f0000011a00)="4552ed", 0x3, 0x10000}], 0x0, &(0x7f0000012200)=ANY=[@ANYBLOB="02"]) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r0, 0x8000000) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x1, 0x6000, @fd=r2, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000280)="4244cb93f56896e0443b16bf3217cae30f78d326d210f0f4504541d668ccfef03bc31bd46ad261bf6a57a6ff25d91ad854b6ce1977e6725dfd13cf663533eb0af23f601220b80b4b3b31a0cd053f3abe6e22944616b636ba444965d7e2b4a716e22039528ad7aba33396c2d2a24c434d3bef8e6078b56181a80a8920c9402a237787b337f135afcf200fa2251cbac38d3cab9ef7476d5976838bc4a2a41555573083b22b7753bb3a652cb0d1efce8c51f9e384fea58c933440e0f9a21d7e4b3357b3f82805ac196258afca600ee4b8f51b7fcde9e98b", 0xd6}, {&(0x7f00000000c0)="60ca89ddc4605d53c718898fd4b8659c96", 0x11}, {&(0x7f0000000140)="bb49d547f4665c542a1a42c4d02648dc694c3c3d74b57654a8db3488b78be82b45ead1374a1274ef5e58cd2cf2a990d6ca61d76fcb566337aeb7725207f7e813a497bc95afd08338", 0x48}, {&(0x7f0000000580)="372f2e2f06f88f7a8ac8e559b2a44fb1dee8002be15660f4cbd2e93f1904899abc7bfefe7ab9b60c885bb73e1dc2c9d431bf3411a705e378a46b816e", 0x3c}, {&(0x7f0000000380)="2ae35dd2d6b5db6e3782fcc89e0001380c2b17788b3edc4bc7e3c3f494c8f62d7c6226b73d6e86ee91c5ed720155c00c74d01298655d787597af97507f0250a86f7fcee38242b683f2ef2af38a6a3c525c061692078467a1b16245906235bc90fda3a3e72ce5df071734b1ea4ae77b28a5e0bd6b90f7cc84c1012ce1ffb25b84ecfd3a6c236d389b776f2e73325b63953f5a23ecc6dd8a02815ff1196ef515d4824e41e16cc9db5a04cfa11b41f44e731e7abe47379ab4bbcc53507a5e29966ec8d6f67629b0ecd8ab3d541ea9973a8e14fed25618", 0xd5}, {&(0x7f0000000480)="8c7b1bcb15ea7cb09a80ded8aaa8ce2ca2399665dea8afe5cdd5d23b3016459dc5845b81894e0db71919", 0x2a}], 0x6, 0x4, 0x0, {0x3}}, 0x3f) [ 2978.941734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2978.970491] FAULT_INJECTION: forcing a failure. [ 2978.970491] name failslab, interval 1, probability 0, space 0, times 0 [ 2978.972534] CPU: 1 PID: 16833 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2978.973717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2978.975141] Call Trace: [ 2978.975599] dump_stack+0x107/0x167 [ 2978.976240] should_fail.cold+0x5/0xa [ 2978.976894] ? xas_alloc+0x336/0x440 [ 2978.977524] should_failslab+0x5/0x20 [ 2978.978170] kmem_cache_alloc+0x5b/0x310 [ 2978.978877] xas_alloc+0x336/0x440 [ 2978.979485] xas_create+0x34a/0x10d0 [ 2978.980134] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2978.981045] xas_store+0x8c/0x1c40 [ 2978.981289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2978.981658] __xa_store+0x164/0x2d0 [ 2978.983190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2978.983771] ? xa_delete_node+0x280/0x280 [ 2978.983801] ? trace_hardirqs_on+0x5b/0x180 [ 2978.983827] xa_store+0x31/0x50 [ 2978.987149] __io_uring_add_tctx_node+0x1cf/0x520 [ 2978.987967] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2978.988875] ? alloc_fd+0x2e7/0x670 [ 2978.989510] io_uring_setup+0x1fbb/0x2980 [ 2978.990130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2978.990213] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2978.992409] ? wait_for_completion_io+0x270/0x270 [ 2978.993248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2978.994133] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2978.995014] do_syscall_64+0x33/0x40 [ 2978.995648] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2978.996530] RIP: 0033:0x7feea834bb19 [ 2978.997161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2979.000301] RSP: 002b:00007feea58a0108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2979.001601] RAX: ffffffffffffffda RBX: 00007feea845f020 RCX: 00007feea834bb19 [ 2979.002817] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2979.004024] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2979.005236] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 2979.006447] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 [ 2979.009931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:02:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xe000000000000000}}], 0x1, 0x4890) [ 2992.997852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 11:02:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 42) 11:02:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000200001900000072566d3a0f0000000000000002000000060000000000080000800000080000000000005fe2f4655f0100ffff53ef010001000000e100655f001100000000000001000000000000cb8dae82000004000008000000d2c200001203b6", 0x67, 0x400}], 0x0, &(0x7f0000014a00)=ANY=[@ANYBLOB='@']) 11:02:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x46e2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x5421) r1 = getpid() r2 = perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x589040, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x58, 0xfe, 0x5, 0x40, 0x0, 0x6, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0xf}, 0x15a90, 0x48085cf8, 0x3, 0x0, 0x36bd, 0xf, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff7}, r1, 0x9, 0xffffffffffffffff, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) ptrace$peekuser(0x3, r5, 0x71c1f461) read(0xffffffffffffffff, &(0x7f0000000080)=""/89, 0x59) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r9, &(0x7f0000000080)=""/89, 0x59) r10 = timerfd_create(0x0, 0x0) timerfd_settime(r10, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r10, &(0x7f0000000080)=""/89, 0x59) r11 = inotify_init() r12 = pidfd_open(r1, 0x0) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="eeaee51b92efe6c99a777432dddf3538c9ae8b58b066a56e1cf54567175480f6d5095bc71727c5f130d79c10a1643960f4e6d315037538cb4a414a2fd62e47a5d05b7b1cb08870fe28506b31df5548b212a739d24ee7d6a329c6b7a282976e2865cae47a106645ea49f8774f95ff99797c", 0x71}], 0x1, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [r3, r0, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r6}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r4]}}, @rights={{0x38, 0x1, 0x1, [r4, r0, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r7, r4]}}, @rights={{0x2c, 0x1, 0x1, [r8, r9, r10, r3, r11, r0, r12]}}], 0xc8, 0x4044050}, 0x4000) 11:02:00 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbf7, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x810) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57ed, 0x4006) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 11:02:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x10000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:02:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:02:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f0000000080)=""/89, 0x59) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1], 0x5264}, 0x1, 0x0, 0x0, 0x8010}, 0x0) [ 2993.058286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2993.059326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:02:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) [ 2993.061798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:02:00 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1004, 0x0, 0x9, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = gettid() setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x30) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') fcntl$setsig(r4, 0xa, 0x28) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) clone3(&(0x7f0000000380)={0x40000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x34}, &(0x7f0000000200)=""/89, 0x59, &(0x7f0000000280)=""/66, &(0x7f0000000300)=[r2], 0x1, {r5}}, 0x58) [ 2993.085424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 11:02:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x11000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:02:00 executing program 4: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000fff000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000014c0)=""/4062, 0xfde}], 0x1) 11:02:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xeffdffff00000000}}], 0x1, 0x4890) [ 2993.118466] FAULT_INJECTION: forcing a failure. [ 2993.118466] name failslab, interval 1, probability 0, space 0, times 0 [ 2993.121168] CPU: 0 PID: 16922 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 2993.122759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2993.124682] Call Trace: [ 2993.125300] dump_stack+0x107/0x167 [ 2993.126153] should_fail.cold+0x5/0xa [ 2993.127052] ? create_object.isra.0+0x3a/0xa30 [ 2993.128120] should_failslab+0x5/0x20 [ 2993.129024] kmem_cache_alloc+0x5b/0x310 [ 2993.129970] ? mark_held_locks+0x9e/0xe0 [ 2993.130929] create_object.isra.0+0x3a/0xa30 [ 2993.131954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2993.133172] kmem_cache_alloc+0x159/0x310 [ 2993.134160] xas_alloc+0x336/0x440 [ 2993.134991] xas_create+0x34a/0x10d0 [ 2993.135860] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2993.137080] xas_store+0x8c/0x1c40 [ 2993.137919] __xa_store+0x164/0x2d0 [ 2993.138761] ? xa_delete_node+0x280/0x280 [ 2993.139721] ? trace_hardirqs_on+0x5b/0x180 [ 2993.140742] xa_store+0x31/0x50 [ 2993.141507] __io_uring_add_tctx_node+0x1cf/0x520 [ 2993.142623] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2993.143827] ? alloc_fd+0x2e7/0x670 [ 2993.144698] io_uring_setup+0x1fbb/0x2980 [ 2993.145661] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2993.146827] ? wait_for_completion_io+0x270/0x270 [ 2993.147986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2993.149219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2993.150416] do_syscall_64+0x33/0x40 [ 2993.151272] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2993.152465] RIP: 0033:0x7feea834bb19 [ 2993.153322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.157535] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 11:02:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) [ 2993.159266] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 2993.161034] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 2993.162666] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 2993.164300] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 11:02:00 executing program 6: r0 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000040)=0x0) r3 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000200)=@can={0x1d, r4}, 0x0, 0x0, 0x0, {0x0, r5}}, 0x100) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) pipe2(&(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r7, 0x6) ftruncate(r7, 0x1) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r9 = dup(r6) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="0202f84d65d10000fe0b040000000000000000000000aa006dfb6eda565e0b29719f017785fc9777195c89998022294b5f9133f7fd1357a311b7fea4dc03ddb7c8eff3e7d2c32e5aec8ae85901bc305cf432989d82cb046c51b3488a52d749d81bb266de94e24e390d6f31e47859b13937a5628ab56db0945300"/134], 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xc0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2993.165937] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:02:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x13000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:02:00 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x2a) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x63, 0x8, 0x2, 0x63, 0x0, 0x5, 0x2000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0xff, 0x4}, 0x10, 0x1ff, 0x1f, 0x1, 0x200, 0xfffffffa, 0x801, 0x0, 0xfff}, 0x0, 0xe, r0, 0x1) sync() r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000200)=0xfffffff9) 11:02:16 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x12, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x880) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000005}, 0x8054) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000001cc0)={{}, {}, [], {}, [{}, {}, {}, {}, {}, {}, {}]}, 0x5c, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x0) 11:02:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x1, 0x3, 0x8, 0x0, 0x2, 0xc4042, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x4008, 0x9, 0xfffffffa, 0x9, 0x8001, 0x80000000, 0x9, 0x0, 0x10000, 0x0, 0x8}, r0, 0xb, 0xffffffffffffffff, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r3 = timerfd_create(0x0, 0x0) dup2(r1, r3) 11:02:16 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000840)={{}, r2, 0x4, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000024a500070000000000006dc000b26e9690f7fad59a03000000cd000000000000000000000400000000000000000000b664f17b020000001d0000007eacf3177c4830dab89375770000ffff00000000000001000080000000080900000000328a00000004000048000000"]}, @devid}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$TIOCNOTTY(r3, 0x5422) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfdef) ftruncate(r3, 0x2) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000600)={0x0, 0x0, 0x6eaa4804, 0x401}) r4 = socket$inet(0x2, 0xa, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x8044}, {0xffffffffffffffff, 0x8000}], 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r0, 0x0) 11:02:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xffff000000000000}}], 0x1, 0x4890) 11:02:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(0xffffffffffffffff, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:02:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x2b000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:02:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 43) 11:02:16 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r3, 0x1, 0x37, 0x0, &(0x7f0000000100)) [ 3008.956193] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17061 comm=syz-executor.6 [ 3008.971930] FAULT_INJECTION: forcing a failure. [ 3008.971930] name failslab, interval 1, probability 0, space 0, times 0 [ 3008.971948] CPU: 1 PID: 17069 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3008.971957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 11:02:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x1, 0x4890) [ 3008.971963] Call Trace: 11:02:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x32000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 3008.971985] dump_stack+0x107/0x167 [ 3008.972004] should_fail.cold+0x5/0xa 11:02:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 44) [ 3008.972023] ? xas_alloc+0x336/0x440 [ 3008.972039] should_failslab+0x5/0x20 [ 3008.972055] kmem_cache_alloc+0x5b/0x310 11:02:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(0xffffffffffffffff, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) [ 3008.972077] xas_alloc+0x336/0x440 [ 3008.972096] xas_create+0x34a/0x10d0 [ 3008.972125] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3008.972144] xas_store+0x8c/0x1c40 11:02:16 executing program 4: syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0x234e, 0x0, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) ftruncate(r2, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) [ 3008.972175] __xa_store+0x164/0x2d0 [ 3008.972194] ? xa_delete_node+0x280/0x280 [ 3008.972225] ? trace_hardirqs_on+0x5b/0x180 [ 3008.972249] xa_store+0x31/0x50 11:02:16 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = dup3(r1, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="e20600639503c18903da29daca4c712c"]) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000240), 0x2, 0x0) dup(r3) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x401, 0x0, 0x1}, 0xb7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x100) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000200)={'team_slave_0\x00', {0x2, 0x0, @multicast2}}) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x3, 0x20000000}}, './file0\x00'}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 11:02:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, 0x4890) [ 3008.972267] __io_uring_add_tctx_node+0x1cf/0x520 [ 3008.972284] ? io_uring_alloc_task_context+0x6a0/0x6a0 11:02:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x33000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 3008.972299] ? alloc_fd+0x2e7/0x670 [ 3008.972326] io_uring_setup+0x1fbb/0x2980 [ 3008.972351] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3008.972364] ? wait_for_completion_io+0x270/0x270 [ 3008.972403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3008.972420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3008.972440] do_syscall_64+0x33/0x40 [ 3008.972457] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3008.972467] RIP: 0033:0x7feea834bb19 [ 3008.972481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3008.972490] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3008.972520] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3008.972530] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3008.972538] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3008.972547] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3008.972556] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 [ 3008.982661] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17061 comm=syz-executor.6 [ 3009.133505] FAULT_INJECTION: forcing a failure. [ 3009.133505] name failslab, interval 1, probability 0, space 0, times 0 [ 3009.133528] CPU: 1 PID: 17131 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3009.133539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3009.133546] Call Trace: [ 3009.133572] dump_stack+0x107/0x167 [ 3009.133596] should_fail.cold+0x5/0xa [ 3009.133619] ? create_object.isra.0+0x3a/0xa30 [ 3009.133638] should_failslab+0x5/0x20 [ 3009.133658] kmem_cache_alloc+0x5b/0x310 [ 3009.133678] ? mark_held_locks+0x9e/0xe0 [ 3009.133703] create_object.isra.0+0x3a/0xa30 [ 3009.133719] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3009.133746] kmem_cache_alloc+0x159/0x310 [ 3009.133775] xas_alloc+0x336/0x440 [ 3009.133798] xas_create+0x34a/0x10d0 [ 3009.133832] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3009.133856] xas_store+0x8c/0x1c40 [ 3009.133894] __xa_store+0x164/0x2d0 [ 3009.133917] ? xa_delete_node+0x280/0x280 [ 3009.133947] ? trace_hardirqs_on+0x5b/0x180 [ 3009.133976] xa_store+0x31/0x50 [ 3009.133999] __io_uring_add_tctx_node+0x1cf/0x520 [ 3009.134020] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3009.134037] ? alloc_fd+0x2e7/0x670 [ 3009.134071] io_uring_setup+0x1fbb/0x2980 [ 3009.134102] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3009.134119] ? wait_for_completion_io+0x270/0x270 [ 3009.134166] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3009.134188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3009.134221] do_syscall_64+0x33/0x40 [ 3009.134241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3009.134253] RIP: 0033:0x7feea834bb19 [ 3009.134272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3009.134283] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3009.134304] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3009.134315] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3009.134327] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3009.134337] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3009.134348] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:02:32 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 45) 11:02:32 executing program 2: r0 = fork() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xff}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20}, r0, 0x0, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1033) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f00000014c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="2d009900ffffffff7900000049006b001c02000008006b001c0200"/36], 0x40}}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r1, 0xa) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000013c0)='system.posix_acl_default\x00', &(0x7f0000001440)={{}, {}, [{}], {0x4, 0x7}, [{0x8, 0x6, 0xee01}, {}], {}, {0x20, 0x2}}, 0x3c, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file1\x00'}, 0x0) 11:02:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f00000011c0)=[{&(0x7f0000000080)="ca", 0x1}], 0x1) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r4, r5/1000+10000}}, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, @in_args={0x1}}, './file0\x00'}) fallocate(r6, 0x22, 0xe4, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 11:02:32 executing program 4: lookup_dcookie(0xf07b, &(0x7f0000000840)=""/188, 0xbc) r0 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@generic, &(0x7f0000000140)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x4000, 0x400, &(0x7f00000009c0)) getsockname$unix(0xffffffffffffffff, &(0x7f00000007c0)=@abs, &(0x7f0000000900)=0x6e) lookup_dcookie(0xffffffffffffffff, &(0x7f0000000ac0)=""/180, 0xb4) lstat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x4e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000280)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000002c0)=0x28) chown(&(0x7f0000000040)='./file0\x00', 0x0, r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="bfc8cd0efa5a49b1f74667c081324c6f5c46e5701ac6edb907f8cf552242d7ee7d9525af762b6bb19e1721e04c4d4435f321f10c57b1d7d608af9838ebabb211f4da72118100dc41b2e8efd8f33e3d49ee63011c94a380e580a14119bc"], 0x14}}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0x3a, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="b7dadca9bd42f6708c3a5af930daea623ca16b8179038df1062d3f70b15a6f3c4cf35710ce6e61d6bc9ad44c77a3a91d669098edb46080fcd706b1a7ba37f2bb665aa8b3648c2376c3f6a5b43ede2557604d245d507260f21c2081229e8ec8b4", @ANYRESOCT, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x24000806}, 0x10) tee(0xffffffffffffffff, r2, 0xf360, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x85089, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20040000) 11:02:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(0xffffffffffffffff, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:02:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x4890) 11:02:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) chown(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x10eecc3, 0x0) clock_gettime(0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000080)=""/89, 0x59) r1 = dup(0xffffffffffffffff) r2 = semget$private(0x0, 0x0, 0x202) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) semtimedop(r2, &(0x7f00000001c0)=[{0x2, 0x8, 0x800}], 0x1, &(0x7f0000000240)={r3, r4+60000000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r5 = semget$private(0x0, 0x6, 0x0) semop(r5, &(0x7f0000000000)=[{0x3, 0x7a}, {0x3}], 0x2) semctl$IPC_RMID(r5, 0x0, 0x0) semctl$SEM_STAT_ANY(r5, 0x3, 0x14, &(0x7f0000000280)=""/210) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{}, {0x77359400}}, 0x100) 11:02:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x3c000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 3024.712063] FAULT_INJECTION: forcing a failure. [ 3024.712063] name failslab, interval 1, probability 0, space 0, times 0 [ 3024.714554] CPU: 1 PID: 17225 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3024.716012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3024.717781] Call Trace: [ 3024.718346] dump_stack+0x107/0x167 [ 3024.719124] should_fail.cold+0x5/0xa [ 3024.719931] ? xas_alloc+0x336/0x440 [ 3024.720733] should_failslab+0x5/0x20 [ 3024.721539] kmem_cache_alloc+0x5b/0x310 [ 3024.722405] xas_alloc+0x336/0x440 [ 3024.723164] xas_create+0x34a/0x10d0 [ 3024.723969] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3024.725092] xas_store+0x8c/0x1c40 [ 3024.725864] __xa_store+0x164/0x2d0 [ 3024.726637] ? xa_delete_node+0x280/0x280 [ 3024.727526] ? trace_hardirqs_on+0x5b/0x180 [ 3024.728450] xa_store+0x31/0x50 [ 3024.729210] __io_uring_add_tctx_node+0x1cf/0x520 [ 3024.730234] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3024.731340] ? alloc_fd+0x2e7/0x670 [ 3024.732125] io_uring_setup+0x1fbb/0x2980 [ 3024.733022] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3024.734103] ? wait_for_completion_io+0x270/0x270 [ 3024.735149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3024.736257] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3024.737363] do_syscall_64+0x33/0x40 [ 3024.738149] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3024.739229] RIP: 0033:0x7feea834bb19 [ 3024.740012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3024.743896] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3024.745512] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3024.747012] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3024.748527] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3024.750040] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3024.751539] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:02:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x6c000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:02:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x1, 0x4890) 11:02:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:02:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa42e2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) writev(r1, &(0x7f00000011c0)=[{&(0x7f0000000080)="ca", 0x1}], 0x1) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r4, r5/1000+10000}}, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, @in_args={0x1}}, './file0\x00'}) fallocate(r6, 0x22, 0xe4, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 11:02:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000120001010000010000ff01000080"], 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4000014) 11:02:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x80ffffff, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:02:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 46) 11:02:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:02:47 executing program 4: socket$inet(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x203000, 0x0) io_uring_enter(r4, 0x7186, 0x3ac9, 0x0, &(0x7f0000000180)={[0x80]}, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x69024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = dup(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) getsockname(r6, &(0x7f0000000400)=@isdn, &(0x7f0000000280)=0x80) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r6, 0x0, &(0x7f0000000000)="ee186666564367d67b48887aeba490e045d4b554b937c164fdbfcfd3edaed1966b6d7834efae9b1c928cc0e37c997771034ceb438a20485fda71daa1199d732fb1532030c1279f4813b0975724617adca5bec6d4", 0x54, 0x48811, 0x1}, 0x1) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000001c0)=0x1) 11:02:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x9effffff, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:02:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x21114, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 11:02:47 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f00000003c0)='s{.\x00\a)\xe1\xc7\xe3\x00`&\x19\x1ezzG\xe4d\xf7+\x92\xb1\xda\xc52\xf7q\x9cU\xcep\xd3\xaf\xff\xc1\x87}\x00\xe6\a\x9f\xc6\xb2\xd7\v', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r2, 0x0, r0, 0x0, 0x300000003, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) ioctl$TUNSETLINK(r3, 0x400454cd, 0x108) 11:02:47 executing program 5: lookup_dcookie(0xf07e, &(0x7f0000000a40)=""/188, 0xbc) r0 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@generic, &(0x7f0000000140)=0x80) rmdir(&(0x7f0000000280)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000098000000c12a4c3e4ed380afb4bd2a30bdc9d1b194a276e77321655e0600a1de562a8fd691d1cdf0cc7a27087ccc43456f42ed0ef03478c20adbe74cc04457800d443ac289082a", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) getsockname$unix(0xffffffffffffffff, &(0x7f00000007c0)=@abs, &(0x7f0000000900)=0x6e) lstat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000580)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1}, 0x9) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000f70300082cbd7000ffdbdf2507000000070000000e2f66692c9f177a2d66696c6530000049a10d8f00cc820745f8b319d149801825bd4c7aa61e4b2970dc6f8349afece7d2b0b23f0a4072997ea0ca1588ff7d1a95417778b4e2f7f6416b4a0dae8f10a2ba0420277881185bb79c07e4c3e48bd08244b0b6e0149c5abdc2a1ba3ede044f4a5713047ee585c640fed999726e72657d9c04d4cf6b807eeba0ad019915f92f3ef36d64291f0a36e0d97d502898cb43c7a69d33a09dd0b5470c072de238477d9e221a8106f291201b8b3a41dd52d5efe3791eb94e8301b94fd22ba9514418967a82b1"], 0x28}, 0x1, 0x0, 0x0, 0x24000846}, 0x10) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000002c0)='./file0\x00', 0x0, r2) fchmodat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x20) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xf360, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x85089, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00210c00000000000000000400020008000c00000000009985b6974b451d211cf55e90b7ab0df62055fbf1fdee44b9a8b73a821fa1862cc7f4989436b6e78c11c60dc5d5f53ab7452a174aa15fb0cb276d92d13cb7f20f98dab8b4e7ab3206b8cd713419545d1542559720a63f92c023949d28"], 0x1c}}, 0x20040000) 11:02:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x4890) [ 3039.432584] FAULT_INJECTION: forcing a failure. [ 3039.432584] name failslab, interval 1, probability 0, space 0, times 0 [ 3039.435047] CPU: 1 PID: 17355 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3039.436509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3039.438244] Call Trace: [ 3039.438801] dump_stack+0x107/0x167 [ 3039.439575] should_fail.cold+0x5/0xa [ 3039.440374] ? ___slab_alloc+0x155/0x700 [ 3039.441240] ? create_object.isra.0+0x3a/0xa30 [ 3039.442207] should_failslab+0x5/0x20 [ 3039.442993] kmem_cache_alloc+0x5b/0x310 [ 3039.443832] create_object.isra.0+0x3a/0xa30 [ 3039.444755] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3039.445847] kmem_cache_alloc+0x159/0x310 [ 3039.446722] xas_alloc+0x336/0x440 [ 3039.447475] xas_create+0x34a/0x10d0 [ 3039.448278] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3039.449368] xas_store+0x8c/0x1c40 [ 3039.450136] __xa_store+0x164/0x2d0 [ 3039.450916] ? xa_delete_node+0x280/0x280 [ 3039.451802] ? trace_hardirqs_on+0x5b/0x180 [ 3039.452700] xa_store+0x31/0x50 [ 3039.453415] __io_uring_add_tctx_node+0x1cf/0x520 [ 3039.454402] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3039.455517] ? alloc_fd+0x2e7/0x670 [ 3039.456294] io_uring_setup+0x1fbb/0x2980 [ 3039.457182] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3039.458248] ? wait_for_completion_io+0x270/0x270 [ 3039.459259] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3039.460373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3039.461483] do_syscall_64+0x33/0x40 [ 3039.462277] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3039.463360] RIP: 0033:0x7feea834bb19 [ 3039.464144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3039.467972] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3039.469590] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3039.471099] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3039.472604] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3039.474114] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3039.475610] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:02:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xb1000000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:02:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:02:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}}], 0x1, 0x4890) 11:02:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xf0ffffff, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:02:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}}], 0x1, 0x4890) 11:02:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "17e6e4126c3e3e00"}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000440)={0x2, 0x0, 0xf, 0x16, 0x110, &(0x7f0000000040)="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"}) 11:02:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:02:47 executing program 5: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xffffffffffffff2e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x0, 0x102, 0xb91, 0x452}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x1) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f0000000080)=""/89, 0x59) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) kcmp(0x0, r1, 0x3, r2, r3) 11:02:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 47) 11:02:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xfffff000, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:02:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = memfd_create(&(0x7f0000000000)='oom_score\x00', 0x6) ftruncate(r1, 0xc7) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x21008, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}, {@posixacl}, {@access_user}, {@fscache}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x20}}, {@dfltuid}], [{@permit_directio}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_gt={'uid>', 0xee01}}, {@obj_role={'obj_role', 0x3d, '/proc/key-users\x00'}}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_gt}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x1000003) dup2(r0, r3) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40200004}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf25050000006b0003004c90880410ccd45c0b8de3fb92df7c5404d7a31013b382c968228c34bb07de68b954", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4004011) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x80009}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x80000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, r6, 0x0, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7d}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x73, 0xc5, "5ab6eb316480a3053a8ddf23b0da046e539a11d1bed3e8dd57c3fdeb7d737c66d05b89643abc92ffd41f8afe2757e3212f714713209e2a239d70aa3b2af52f71c4749ea76607d33b7360bdba032366d5f18ede4b08f6238e54b0a702c2541c61bf6e8f526b520a5da83eb285de74b4"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xccc0}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040084}, 0x40080c0) 11:02:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xffffff7f, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 3040.087166] FAULT_INJECTION: forcing a failure. [ 3040.087166] name failslab, interval 1, probability 0, space 0, times 0 [ 3040.089767] CPU: 1 PID: 17411 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3040.091225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3040.092978] Call Trace: [ 3040.093550] dump_stack+0x107/0x167 [ 3040.094332] should_fail.cold+0x5/0xa [ 3040.095157] ? xas_alloc+0x336/0x440 [ 3040.095947] should_failslab+0x5/0x20 [ 3040.096757] kmem_cache_alloc+0x5b/0x310 [ 3040.097642] xas_alloc+0x336/0x440 [ 3040.098406] xas_create+0x34a/0x10d0 [ 3040.099209] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3040.100329] xas_store+0x8c/0x1c40 [ 3040.101130] __xa_store+0x164/0x2d0 [ 3040.101912] ? xa_delete_node+0x280/0x280 [ 3040.102820] ? trace_hardirqs_on+0x5b/0x180 [ 3040.103748] xa_store+0x31/0x50 [ 3040.104450] __io_uring_add_tctx_node+0x1cf/0x520 [ 3040.105476] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3040.106593] ? alloc_fd+0x2e7/0x670 [ 3040.107381] io_uring_setup+0x1fbb/0x2980 [ 3040.108267] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3040.109354] ? wait_for_completion_io+0x270/0x270 [ 3040.110393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3040.111510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3040.112605] do_syscall_64+0x33/0x40 [ 3040.113406] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3040.114506] RIP: 0033:0x7feea834bb19 [ 3040.115279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3040.119184] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3040.120796] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3040.122327] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3040.123849] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3040.125377] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3040.126904] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:03:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x4890) 11:03:06 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 48) 11:03:06 executing program 5: syz_open_dev$vcsn(&(0x7f0000001d40), 0x2, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xc458, 0x10000) openat(r0, &(0x7f0000000040)='./file0\x00', 0x4e0002, 0x12c) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000080)=""/89, 0x59) dup(r3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r4, &(0x7f0000000100)='stack\x00') [ 3059.075009] FAULT_INJECTION: forcing a failure. [ 3059.075009] name failslab, interval 1, probability 0, space 0, times 0 [ 3059.077622] CPU: 1 PID: 17527 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3059.079252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3059.081269] Call Trace: [ 3059.081817] dump_stack+0x107/0x167 [ 3059.082552] should_fail.cold+0x5/0xa [ 3059.083311] ? ___slab_alloc+0x155/0x700 [ 3059.084115] ? create_object.isra.0+0x3a/0xa30 [ 3059.085010] should_failslab+0x5/0x20 [ 3059.085810] kmem_cache_alloc+0x5b/0x310 [ 3059.086649] create_object.isra.0+0x3a/0xa30 [ 3059.087936] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3059.089150] kmem_cache_alloc+0x159/0x310 [ 3059.090023] xas_alloc+0x336/0x440 [ 3059.090867] xas_create+0x34a/0x10d0 [ 3059.091774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3059.092839] xas_store+0x8c/0x1c40 11:03:06 executing program 6: fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cachetag={'cachetag', 0x3d, '}\\:*'}}, {@access_any}, {@nodevmap}, {@aname={'aname', 0x3d, '\\'}}], [{@uid_lt={'uid<', r2}}]}}) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cachetag={'cachetag', 0x3d, '}\\:*'}}, {@access_any}, {@nodevmap}, {@aname={'aname', 0x3d, '\\'}}], [{@uid_lt={'uid<', r4}}]}}) getgroups(0x4, &(0x7f0000000080)=[r0, r1, r3, 0x0]) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@private2, @in6=@local}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) 11:03:06 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x70bd2d, 0x3, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1c54}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x4004094) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', 0x0, &(0x7f0000000500), 0x21000a0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0/file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x200000c, 0x110, r5, 0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x400400, 0x0) signalfd4(r6, &(0x7f00000001c0), 0x8, 0x80000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000000c0)={0x4, 0x2}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11:03:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:03:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xffffff80, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:03:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef", 0x3a, 0x404}, {&(0x7f0000010300)="02000000030000000400000066000f0003000400000000000000", 0x1a, 0x403}], 0x0, &(0x7f0000012c00)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockname(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/video', 0x82c2, 0x89) [ 3059.093946] __xa_store+0x164/0x2d0 sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x224, 0x0, 0x600, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaf6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2919}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd3d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x100048d0}, 0x8000) [ 3059.094729] ? xa_delete_node+0x280/0x280 [ 3059.095812] ? trace_hardirqs_on+0x5b/0x180 [ 3059.096718] xa_store+0x31/0x50 [ 3059.097385] __io_uring_add_tctx_node+0x1cf/0x520 [ 3059.098365] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3059.099429] ? alloc_fd+0x2e7/0x670 [ 3059.100220] io_uring_setup+0x1fbb/0x2980 [ 3059.101278] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3059.102333] ? wait_for_completion_io+0x270/0x270 [ 3059.103519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3059.104802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3059.105894] do_syscall_64+0x33/0x40 [ 3059.106667] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3059.107831] RIP: 0033:0x7feea834bb19 [ 3059.108576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3059.112256] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3059.113766] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3059.115178] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3059.116584] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3059.118004] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3059.119415] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:03:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) 11:03:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xffffff9e, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:03:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x4890) 11:03:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:03:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x4}, 0x7) syz_open_procfs(0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) [ 3059.283757] 9pnet_virtio: no channels available for device ./file0 11:03:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x4890) 11:03:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:03:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xfffffff0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:03:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 49) 11:03:24 executing program 6: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x46e2, 0x89) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) clone3(&(0x7f00000004c0)={0x204201600, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)=0x0, {0x2a}, &(0x7f0000000300)=""/138, 0x8a, &(0x7f00000003c0)=""/168, &(0x7f0000000480)=[0x0], 0x1, {r3}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xcc, 0x0, 0x80, 0x4, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf4d1, 0x1, @perf_bp, 0x4240, 0x1000, 0x4, 0x6, 0x8, 0x7, 0xfff, 0x0, 0x5b4e, 0x0, 0xffffffffffffff20}, r4, 0xa, r5, 0x8) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) 11:03:24 executing program 4: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2}, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r0 = semget(0x0, 0x3, 0x754) semctl$IPC_RMID(0x0, 0x0, 0xb) semop(0x0, &(0x7f0000000000)=[{0x2, 0x0, 0x1800}], 0x1) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000002c0)=""/207) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000180)) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4, 0x3000}, {0x3, 0x8, 0x800}, {0x2, 0x7, 0x800}, {0x3, 0xfffb, 0x3000}, {0x1, 0x1, 0x1800}], 0xb, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x200}, {0x2, 0x200, 0x1800}, {0x4, 0x40, 0x1800}, {0x4, 0x1, 0x800}], 0x4, &(0x7f0000000040)={0x0, 0x989680}) semtimedop(0x0, &(0x7f00000000c0)=[{0x2, 0x7f, 0x1800}], 0x1, &(0x7f00000001c0)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000080), 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f0000001400)=""/4123) unshare(0x40000200) 11:03:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0xffffffff, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:03:24 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000040)='./file1/file0\x00', 0x1000004, 0x0, &(0x7f00000001c0), 0x800804, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES32, @ANYRES64, @ANYRES64=0x0, @ANYRES16]) r0 = creat(&(0x7f0000000140)='./file1/file0\x00', 0x4) r1 = timerfd_create(0x8, 0x80800) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000180)=""/123, 0xffffffffffffff80) clock_gettime(0x3, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000240)={{r3, r4+10000000}, {r5, r6+60000000}}, &(0x7f0000000280)) read(r1, &(0x7f0000000080)=""/89, 0x59) r7 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x44002, 0x8) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x1) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r9 = timerfd_create(0x0, 0x0) read(r9, &(0x7f0000000340)=""/90, 0x5a) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) semtimedop(0x0, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000}, {0x2, 0x2, 0x1000}, {0x2, 0x800, 0x1800}], 0x3, &(0x7f0000000300)) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x3, 0xfff, 0x7, 0x7, 0x0, 0x80}) 11:03:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}], 0x1, 0x4890) 11:03:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:03:24 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x7a}, {0x3}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000080)=""/16) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x105000, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x604002, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x2000003) sendfile(r1, r2, 0x0, 0x100000001) [ 3076.994859] FAULT_INJECTION: forcing a failure. [ 3076.994859] name failslab, interval 1, probability 0, space 0, times 0 [ 3076.996250] CPU: 1 PID: 17568 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3076.997047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3076.998070] Call Trace: [ 3076.998378] dump_stack+0x107/0x167 [ 3076.998807] should_fail.cold+0x5/0xa [ 3076.999266] ? xas_alloc+0x336/0x440 [ 3076.999698] should_failslab+0x5/0x20 [ 3077.000161] kmem_cache_alloc+0x5b/0x310 [ 3077.000648] xas_alloc+0x336/0x440 [ 3077.001065] xas_create+0x34a/0x10d0 [ 3077.001523] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3077.002130] xas_store+0x8c/0x1c40 [ 3077.002549] __xa_store+0x164/0x2d0 [ 3077.002968] ? xa_delete_node+0x280/0x280 [ 3077.003449] ? trace_hardirqs_on+0x5b/0x180 [ 3077.003960] xa_store+0x31/0x50 [ 3077.004353] __io_uring_add_tctx_node+0x1cf/0x520 [ 3077.004908] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3077.005527] ? alloc_fd+0x2e7/0x670 [ 3077.005952] io_uring_setup+0x1fbb/0x2980 [ 3077.006434] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3077.007018] ? wait_for_completion_io+0x270/0x270 [ 3077.007591] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3077.008193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3077.008789] do_syscall_64+0x33/0x40 [ 3077.009219] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3077.009824] RIP: 0033:0x7feea834bb19 [ 3077.010247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3077.012355] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3077.013246] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3077.014113] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3077.014955] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3077.015797] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3077.016633] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:03:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r2, 0x523, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1c0, 0x0, 0x303, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x7}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_IE={0x19, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10}}, @sec_chan_ofs={0x3e, 0x1}, @challenge={0x10, 0x1, 0xcf}, @erp={0x2a, 0x1, {0x1}}, @dsss={0x3, 0x1, 0x480139c3d2a87ffa}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x159, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x80, 0x3}}, @preq={0x82, 0x36, @ext={{0x0, 0x1}, 0x2, 0x8, 0x609, @device_b, 0x7, @device_a, 0xe5e9, 0x5, 0x2, [{{0x1}, @broadcast, 0x5}, {{}, @device_b, 0x3}]}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x19, "290f7d3c72e19e367e0218e6efd2bad3658d7b01bff48d09fd"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xd, 0xb5}}, @link_id={0x65, 0x12}, @measure_req={0x26, 0xd9, {0x9, 0x7f, 0x8, "2d7ed0840f80d8e03299521081ec3850afbfff72a350d50b0dfe3cff2e9a402df945ba4742e07e49982ebded915afac3a3fc9e7ec960e84fad3911d37eeaccdfc7ac1e33f8a7e9ed15528126890200b5781e23ec4040b22f2473b7147c19bbb0fccf813a2f74fb827f2718cbb16aa0566841fdddcee4b5f2ba79ccc1dcc57f9f671ea03ffb54ac7cdba621b6f9fe3f6f9288f8d46ffbfd47b8d8f95c89daaef811ca87a5e04e0339a47b7e21c5e1783aed0ee95ca5dfde86cb8e68da84effcc5d8bef802f57667a512c61a900d0d80606083fac869e7"}}]}, @NL80211_ATTR_MAC={0xa}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x200040d4}, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x77e6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000880}, 0x20000804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="2b0fd7a06f1cb3dabebbe63645390353ea407de55aa75b8db4b3bc79e72d77b602a870f2fbd1ab02a8f741ef434f021781eb9cf5170000000000000000d0c82b0835090255bc427767e1"], 0x1c}}, 0x0) 11:03:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}}], 0x1, 0x4890) 11:03:24 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 50) 11:03:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1=0xe0000006, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:03:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) [ 3077.268050] FAULT_INJECTION: forcing a failure. [ 3077.268050] name failslab, interval 1, probability 0, space 0, times 0 [ 3077.270595] CPU: 0 PID: 17589 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3077.272107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3077.273913] Call Trace: [ 3077.274500] dump_stack+0x107/0x167 [ 3077.275303] should_fail.cold+0x5/0xa [ 3077.276153] ? xas_alloc+0x336/0x440 [ 3077.276976] should_failslab+0x5/0x20 [ 3077.277826] kmem_cache_alloc+0x5b/0x310 [ 3077.278716] xas_alloc+0x336/0x440 [ 3077.279496] xas_create+0x34a/0x10d0 [ 3077.280330] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3077.281488] xas_store+0x8c/0x1c40 [ 3077.282280] __xa_store+0x164/0x2d0 [ 3077.283082] ? xa_delete_node+0x280/0x280 [ 3077.283997] ? trace_hardirqs_on+0x5b/0x180 [ 3077.284940] xa_store+0x31/0x50 [ 3077.285671] __io_uring_add_tctx_node+0x1cf/0x520 [ 3077.286738] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3077.287886] ? alloc_fd+0x2e7/0x670 [ 3077.288692] io_uring_setup+0x1fbb/0x2980 [ 3077.289612] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3077.290721] ? wait_for_completion_io+0x270/0x270 [ 3077.291800] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3077.292942] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3077.294074] do_syscall_64+0x33/0x40 [ 3077.294882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3077.295980] RIP: 0033:0x7feea834bb19 [ 3077.296779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3077.300723] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3077.302344] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3077.303901] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3077.305443] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3077.306973] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3077.308508] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:03:39 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x2167c5, 0x2) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/netconsole', 0x265d0ab297d9d38d, 0x130) write$P9_RVERSION(r0, &(0x7f0000000240)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.u'}, 0x15) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x110, r2, 0x8000000) r3 = pidfd_getfd(r2, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001440)=ANY=[@ANYBLOB="010000000100000089a67f1d", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) accept(r4, &(0x7f0000001480)=@in={0x2, 0x0, @dev}, &(0x7f0000001500)=0x80) r5 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0xfffffffd, 0x0, 0x3, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, r5, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000300)={0x0, 0xaa000000}) perf_event_open(&(0x7f0000000100)={0x1276432c233585c2, 0x80, 0x4, 0x0, 0x7f, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x417f, 0xaa82}, 0x1000, 0xff, 0xbd6e, 0x4, 0x0, 0x58ad41c0, 0x1ff, 0x0, 0x80000000, 0x0, 0x5}, 0xffffffffffffffff, 0x80c, 0xffffffffffffffff, 0x2) accept4$bt_l2cap(r3, 0x0, &(0x7f0000000280), 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) close(0xffffffffffffffff) accept$inet(r3, &(0x7f0000000180)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) syz_open_dev$vcsu(&(0x7f0000001400), 0x6, 0x0) 11:03:39 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000040)='./file1/file0\x00', 0x1000004, 0x0, &(0x7f00000001c0), 0x800804, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES32, @ANYRES64, @ANYRES64=0x0, @ANYRES16]) r0 = creat(&(0x7f0000000140)='./file1/file0\x00', 0x4) r1 = timerfd_create(0x8, 0x80800) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000180)=""/123, 0xffffffffffffff80) clock_gettime(0x3, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000240)={{r3, r4+10000000}, {r5, r6+60000000}}, &(0x7f0000000280)) read(r1, &(0x7f0000000080)=""/89, 0x59) r7 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x44002, 0x8) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x1) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r9 = timerfd_create(0x0, 0x0) read(r9, &(0x7f0000000340)=""/90, 0x5a) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) semtimedop(0x0, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000}, {0x2, 0x2, 0x1000}, {0x2, 0x800, 0x1800}], 0x3, &(0x7f0000000300)) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x3, 0xfff, 0x7, 0x7, 0x0, 0x80}) 11:03:39 executing program 6: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x6d}, 0x1, 0x0, 0x0, 0x4040}, 0x8004) 11:03:39 executing program 5: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2474) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0x575f, 0x2d8, 0x7f, 0x1}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000240)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0x4, 0x86, 0x7f, 0x1f, 0x0, 0x7f, 0x2000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x40080, 0x4, 0x6, 0x9, 0xffffffffffffffb8, 0x0, 0x5, 0x0, 0x3, 0x0, 0x3}) inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x40000001) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000180)={'batadv0\x00'}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) fork() syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) copy_file_range(0xffffffffffffffff, 0x0, r0, &(0x7f00000004c0)=0x4, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 11:03:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:03:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1=0xe0000008, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:03:39 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 51) 11:03:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x4890) [ 3092.112570] FAULT_INJECTION: forcing a failure. [ 3092.112570] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.115169] CPU: 1 PID: 17611 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3092.116721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3092.118593] Call Trace: [ 3092.119195] dump_stack+0x107/0x167 [ 3092.120020] should_fail.cold+0x5/0xa [ 3092.120872] ? create_object.isra.0+0x3a/0xa30 [ 3092.121902] should_failslab+0x5/0x20 [ 3092.122784] kmem_cache_alloc+0x5b/0x310 [ 3092.123706] ? mark_held_locks+0x9e/0xe0 [ 3092.124622] create_object.isra.0+0x3a/0xa30 [ 3092.125624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3092.126767] kmem_cache_alloc+0x159/0x310 [ 3092.127723] xas_alloc+0x336/0x440 [ 3092.128522] xas_create+0x34a/0x10d0 [ 3092.129389] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3092.130585] xas_store+0x8c/0x1c40 [ 3092.131409] __xa_store+0x164/0x2d0 [ 3092.132230] ? xa_delete_node+0x280/0x280 [ 3092.133180] ? trace_hardirqs_on+0x5b/0x180 [ 3092.134184] xa_store+0x31/0x50 [ 3092.134930] __io_uring_add_tctx_node+0x1cf/0x520 [ 3092.136012] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3092.137174] ? alloc_fd+0x2e7/0x670 [ 3092.138023] io_uring_setup+0x1fbb/0x2980 [ 3092.138973] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3092.140100] ? wait_for_completion_io+0x270/0x270 [ 3092.141211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3092.142404] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3092.143581] do_syscall_64+0x33/0x40 [ 3092.144435] entry_SYSCALL_64_after_hwframe+0x67/0xd1 11:03:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1=0xe0000019, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 3092.145599] RIP: 0033:0x7feea834bb19 [ 3092.146629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.150805] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 11:03:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) [ 3092.152514] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3092.154230] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3092.155813] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3092.157417] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3092.159035] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:03:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x1, 0x4890) 11:03:39 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x47e0, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ftruncate(r1, 0x1000003) dup2(r1, r2) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x80009}) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x82, 0x80000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000004576d357be97e8608befd0b34b83e6b060408d618be440bde64293cf3b3d7f8713974ffbf96eaa39ffd77c161e5f9ace471ddae74da68a83d76296729a9dedf4e4f1f0fafe2f93d5772f5f925f98685ca7f49367ef455fb1e62adce3885bc80f"], 0xb) mknodat$loop(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(r3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7, 0x3f, 0x0, 0x3, 0x0, 0x9, 0x2, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x3, 0x100000001}, 0x0, 0xf8a, 0x4, 0x2, 0x33, 0x3f, 0x9, 0x0, 0x6541389b, 0x0, 0x800}, 0x0, 0xd, r3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 11:03:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:03:57 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x2}, 0xf) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) r1 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x230c82, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="0100a7199d18f4c5a197876e411cd1910800", @ANYRES32=r1, @ANYBLOB="05430000000000002e2f66696c653000"]) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) 11:03:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x2, 0x100000000, 0x4}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc4}) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x19, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) 11:03:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:03:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}}], 0x1, 0x4890) 11:03:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 52) 11:03:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0, 0x40000040, 0x0, {0x0, r4}}, 0x0) syz_io_uring_setup(0x3ef1, &(0x7f0000000040)={0x0, 0x4e98, 0x20, 0x0, 0x3d6}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000700)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r6, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@xdp, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/156, 0x9c}, {&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x5, &(0x7f0000000640)=""/69, 0x45}, 0x0, 0x12020}, 0x80000001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) lseek(r0, 0x8001, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x278) sendfile(r2, r7, 0x0, 0x100000001) sendfile(r0, r1, 0x0, 0x100000001) 11:03:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1=0xe0000300, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:03:57 executing program 4: set_mempolicy(0x0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x100000001, 0x4347) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ptrace$peek(0x1, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mincore(&(0x7f0000400000/0xc00000)=nil, 0xc00000, &(0x7f00000002c0)=""/71) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x0, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000001b00), 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, &(0x7f0000001b40), 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wlan0\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={0x0}}, 0x4000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001e80), 0x4000, 0x0) set_mempolicy(0x4000, &(0x7f0000000040)=0x4, 0xff) [ 3109.532213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=17749 comm=syz-executor.2 [ 3109.544972] FAULT_INJECTION: forcing a failure. [ 3109.544972] name failslab, interval 1, probability 0, space 0, times 0 [ 3109.547928] CPU: 1 PID: 17750 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3109.549636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3109.551501] Call Trace: [ 3109.552062] dump_stack+0x107/0x167 [ 3109.553064] should_fail.cold+0x5/0xa [ 3109.553916] ? create_object.isra.0+0x3a/0xa30 [ 3109.554879] should_failslab+0x5/0x20 11:03:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1=0xe0001400, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 3109.555691] kmem_cache_alloc+0x5b/0x310 [ 3109.556699] ? mark_held_locks+0x9e/0xe0 [ 3109.557562] create_object.isra.0+0x3a/0xa30 [ 3109.558631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3109.559723] kmem_cache_alloc+0x159/0x310 [ 3109.560738] xas_alloc+0x336/0x440 [ 3109.561716] xas_create+0x34a/0x10d0 [ 3109.562545] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3109.563765] xas_store+0x8c/0x1c40 [ 3109.564702] __xa_store+0x164/0x2d0 [ 3109.565542] ? xa_delete_node+0x280/0x280 [ 3109.566510] ? trace_hardirqs_on+0x5b/0x180 [ 3109.567439] xa_store+0x31/0x50 [ 3109.568144] __io_uring_add_tctx_node+0x1cf/0x520 [ 3109.569162] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3109.570302] ? alloc_fd+0x2e7/0x670 [ 3109.571215] io_uring_setup+0x1fbb/0x2980 [ 3109.572289] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3109.573469] ? wait_for_completion_io+0x270/0x270 [ 3109.574843] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3109.576059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3109.577451] do_syscall_64+0x33/0x40 [ 3109.578276] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3109.579368] RIP: 0033:0x7feea834bb19 [ 3109.580155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3109.584433] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3109.586432] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3109.588101] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3109.589968] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3109.591791] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3109.593664] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:03:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x4890) [ 3109.623284] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=17749 comm=syz-executor.2 11:03:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:03:57 executing program 2: epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x80002000}) r2 = epoll_create(0x3ff) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x220, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x3}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffc, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x20000001}) dup2(r1, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000140)={0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000180)={0x61, 0xfffffff8, 0x8, 0x1f, 0x1}) r4 = timerfd_create(0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) timerfd_settime(r4, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r4, &(0x7f0000000080)=""/89, 0x59) preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/109, 0x6d}, {&(0x7f0000000240)=""/102, 0x66}], 0x2, 0x75, 0x1) 11:03:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:03:57 executing program 4: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x4, 0x4a0, [0x8000, 0x0, 0x0, 0x200006c6, 0x0, 0x1], 0x0, 0x0, &(0x7f0000000440)=ANY=[]}, 0x78) getdents64(0xffffffffffffffff, 0x0, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x72e8, &(0x7f00000005c0)={0x0, 0x40, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd=r4, 0x401, &(0x7f0000000300)="ebc8062e68d70a490311f0024722c27fecc4a05b0298983f12ac9ce33af99c28f3a3b5974e2eebc8673645fe85bccd08a108dd77f17c40a9b50dc5e732508eb1b45acb", 0x43, 0x6, 0x1}, 0x6) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000540)}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x108) r6 = signalfd4(r5, &(0x7f0000000380)={[0x7]}, 0x8, 0x0) futimesat(r6, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0x2710}, {0x0, 0x2710}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x420000) sendfile(r7, r1, 0x0, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x44000, 0x99, 0x12}, &(0x7f0000000580)='./file0\x00', 0x18, 0x0, 0x12345}, 0x80000001) io_uring_enter(r1, 0x800012d, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x4d15, 0x6630, 0x1, &(0x7f0000000440)={[0x9]}, 0x8) 11:03:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x4890) 11:03:57 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 53) [ 3109.836878] FAULT_INJECTION: forcing a failure. [ 3109.836878] name failslab, interval 1, probability 0, space 0, times 0 [ 3109.838336] CPU: 0 PID: 17878 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3109.839140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3109.840091] Call Trace: [ 3109.840403] dump_stack+0x107/0x167 [ 3109.840821] should_fail.cold+0x5/0xa [ 3109.841260] ? xas_alloc+0x336/0x440 [ 3109.841684] should_failslab+0x5/0x20 [ 3109.842126] kmem_cache_alloc+0x5b/0x310 [ 3109.842596] xas_alloc+0x336/0x440 [ 3109.843005] xas_create+0x34a/0x10d0 [ 3109.843439] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3109.844046] xas_store+0x8c/0x1c40 [ 3109.844472] __xa_store+0x164/0x2d0 [ 3109.844893] ? xa_delete_node+0x280/0x280 [ 3109.845380] ? trace_hardirqs_on+0x5b/0x180 [ 3109.845890] xa_store+0x31/0x50 [ 3109.846275] __io_uring_add_tctx_node+0x1cf/0x520 [ 3109.846829] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3109.847428] ? alloc_fd+0x2e7/0x670 [ 3109.847852] io_uring_setup+0x1fbb/0x2980 [ 3109.848333] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3109.848915] ? wait_for_completion_io+0x270/0x270 [ 3109.849485] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3109.850090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3109.850681] do_syscall_64+0x33/0x40 [ 3109.851107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3109.851693] RIP: 0033:0x7feea834bb19 [ 3109.852119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3109.854222] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3109.855091] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3109.855912] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3109.856725] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3109.857549] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3109.858399] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:04:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:04:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}], 0x1, 0x4890) 11:04:15 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000340)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/profiling', 0x98442, 0x1e8) r3 = pidfd_open(0xffffffffffffffff, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x10000, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) io_submit(r1, 0x4, &(0x7f0000000a00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xa0, r0, &(0x7f0000000100)="2d6c40a236fb02460c3bc36d806ca84ef0c95a855f3f19e035a941e60a300d4bc2a0812895005c0174f56ab673a43e8a3671035d0fd759cb5dbd863d8549d80f03281bf9fe637771d72c277adcdca99f4deee04b0cb278dd5699a986ce9a3787beb927f73d7076269939ae0c59d99af1190e623f1c4b4e7bb18f1b5eec41cac05d7ee3b0cdef5730dcefd1be7308d54a41ada31af99d25f29639a67a4e", 0x9d, 0x7ab, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x195, r0, &(0x7f0000000240)="7ef53bb71eb4afe5d1e18c90a54bc4debd3363b5fc6bee0783ed557479ac611fc264b00196facd6d4d6f22ef1d954765bedcb5", 0x33, 0x1, 0x0, 0x3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x3, r3, &(0x7f00000002c0)="68906bc7bc912274dfc58340409d4d1e67a56093043f51ffc73adcea538fa109971f5c5d23c5341515f30ac95078d9157ac2107c3496c4c2b8ff6ea9d666a7bc25dfea9cf3edb6ab15f6d64bfb675d508a98600c14ea804eaa196c30f612a3c9d0e26eae858bd403a693e4f6ea2865f4e7263317ab68fd460ffe", 0x7a, 0x7, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000940)="936a269d0ad49eed5d5ff61b698acd344b3b6e106c6b4fe2cf5d5a8ceff1d55fdbc4e086dd0c16a69881bfcd8f717ff85e6bb137b81a75b481cf7d0eac649cfd7475441f63caef9f60e94babbe", 0x4d, 0x4, 0x0, 0x2, r6}]) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r1, 0x0, &(0x7f0000000480)) r7 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) r8 = dup(r7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x0) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r9, &(0x7f0000000080)=""/89, 0x59) write$binfmt_elf32(r9, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x60, 0xc1, 0xf9, 0x4, 0x6, 0x2, 0x3, 0x4, 0x3bb, 0x38, 0x252, 0x6, 0x1ff, 0x20, 0x2, 0xfff, 0x8000, 0x40}, [{0x2, 0x6, 0x23b, 0x8, 0xf12, 0x5, 0xffffff3d, 0x5}, {0x60000000, 0x1ff, 0x3ff, 0x7, 0x1ff, 0xff, 0x4, 0x2c}], "5f94b903a12b41c5a95cb41030c62e72cd340ca31cb17c00e3a8588e5e740ec17b1c64351ff856d92b947812946469bab373d1d77e5a9f0285f74f7f4ce16d2197c2f0c25bc2ae0a77cb086814de34be73be7cb944c5e0f3788b9857a9d1d4ac981304b2cd98bdbad6cb53a149a623a95025aeee6524a1d6e3921117bd79d4b54d9b32e98b78ff5f4c8a9bfc06ad222810abb790fdd2781af8", ['\x00', '\x00', '\x00', '\x00']}, 0x511) 11:04:15 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4000010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000052d5b24206e22b8b618f687925cab0ffd000000"], 0x901440) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x400, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, 0x0, 0x1}, 0xff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x3f8, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x3f8}}, 0x0) 11:04:15 executing program 6: syz_mount_image$tmpfs(0xfffffffffffffffc, 0x0, 0x0, 0x1, &(0x7f0000001b80)=[{&(0x7f0000000b80)="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", 0x1000}], 0x0, 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)="30c0ba395b875c16818ca241a236d64e8d0e3bf100e02198368ac12694df72438e0235f4e9b520df0d08", 0x2a, 0x80000000}, {&(0x7f00000000c0)="f3d64452cd403c0c880dc58e40d1d8f837c54f13d150d32aa8aa4f09a67ea6fcd65eb958c3ad2a71d2c249ad894a6488dfbf419b2387ff812bbc57be1c1de30f0f5d5fa821bcd1fd8fe490f8857368a4196deaec7bac67e3193c2a06fe4dd1c74f1f0257d9fde7704c86d76052719cc95386e0c8bd76a4de3f0f", 0x7a, 0x7}], 0x404, &(0x7f0000000180)={[{}], [{@euid_lt={'euid<', 0xee00}}, {@subj_user}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x39, 0x31, 0x37, 0x64, 0x6, 0x36, 0x38], 0x2d, [0x35, 0x62, 0x63, 0x32], 0x2d, [0x65, 0x33, 0x30, 0x66], 0x2d, [0x64, 0x61, 0x39, 0x33], 0x2d, [0x35, 0x33, 0xc6d11346b88ede29, 0x37, 0x33, 0x35, 0x63, 0x38]}}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfsfloor}, {@fowner_lt={'fowner<', r0}}]}) 11:04:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x2, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:04:15 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x18342, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) openat(r0, &(0x7f0000000640)='./file0\x00', 0x2, 0x102) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)={0x45c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0xc}}}}, [@NL80211_ATTR_TID_CONFIG={0x34c, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x30, 0x60, 0xb, 0xb, 0x3, 0x1b, 0x4, 0x6c, 0xc, 0x16, 0x0, 0x18, 0x12, 0x1a, 0x3, 0x16, 0x2, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x5}, {0x0, 0x4}, {0x7, 0x7}, {0x2}, {0x3, 0x8}, {0x5}, {0x2, 0x8}, {0x1, 0x4}, {0x7, 0x8}, {0x1, 0x4}, {0x2, 0x2}, {0x7, 0x7}, {0x7, 0x8}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x4, 0xd}, {0x0, 0x7}, {0x7, 0x4}, {0x4, 0x8}, {0x7}, {0x6, 0x8}, {0x6, 0x6}, {0x6, 0x9}, {0x3, 0x5}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x48, 0x24, 0xb, 0x30, 0x3, 0x60, 0xb]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0xc, 0x2, 0x6c, 0x6c, 0x5, 0x1]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x2}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x1}, {0x5, 0x8}, {0x4, 0x8}, {0x5, 0x7}, {0x0, 0xa}, {0x1, 0x7}, {0x2}, {}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x5, 0x60, 0x12, 0x7b, 0x24, 0x18, 0x2, 0x0, 0xb, 0x36, 0x48, 0x5, 0x16, 0x2, 0x0, 0x30, 0x4, 0xb, 0x3, 0x30, 0x7, 0x2, 0x36, 0x1, 0x6c, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x7}, {0x1, 0x3}, {0x5, 0x2}, {0x3}, {0x2, 0x9}, {0x4, 0x8}, {0x4, 0xa}, {0x7, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x2, 0x1}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0xa}, {0x7, 0x4}, {0x0, 0x8}, {0x3, 0xa}, {0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x9}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x5}, {0x1, 0x6}, {0x1, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0xa}, {0x4, 0x6}, {0x3, 0x1}, {0x4, 0x7}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3a, 0x12, 0x6c, 0x6, 0x4, 0x2, 0x6, 0x61, 0xb, 0x2, 0x36, 0x2, 0x1, 0x9, 0x16, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x2}, {0x1, 0x8}, {0x4, 0x4}, {0x7, 0x2}, {0x5, 0x3}, {0x7, 0x5}, {0x3, 0x4}, {0x5, 0x1}, {0x2, 0x4}, {0x6, 0x2}, {0x7, 0x5}, {0x3, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x8}, {0x5, 0x5}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0x9}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x4}, {0x7, 0x6}, {0x7, 0x5}, {0x1, 0x2}, {0x6, 0x6}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x4}, {0x2, 0x2}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x7, 0x4}, {0x0, 0x7}, {0x4, 0x4}, {0x2, 0x2}, {0x7, 0x2}, {0x6, 0x8}, {0x5}, {0x6, 0x9}, {0x2, 0x7}, {0x1, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0x2}, {0x4, 0x7}, {0x0, 0x9}, {0x2, 0xa}]}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x20, 0x1b, 0x36, 0x18]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x6, 0x9}, {}, {0x3, 0x6}, {0x1, 0x6}, {0x5}, {0x3, 0x4}, {0x3, 0x2}, {0x4, 0xa}, {0x7, 0x3}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0x9}, {0x4, 0x5}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0xa}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0xe}, {0x0, 0x8}, {0x5, 0x4}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x1}, {0x3}, {0x2, 0x7}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x3}, {}, {0x3, 0xa}, {0x5, 0x9}, {0x1, 0x3}, {0x6, 0xa}, {0x3, 0x6}, {0x0, 0x6}, {0x4, 0x2}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x9}, {0x6, 0x6}, {0x5}, {0x5, 0x7}, {0x0, 0x9}, {0x5, 0x8}, {0x4, 0x4}, {0x4, 0x2}, {0x3, 0x8}, {0x4, 0x2}, {0x1}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0x2}, {0x1}, {0x2}, {0x3, 0x5}, {0x5, 0x8}, {0x4, 0x2}, {0x5, 0x8}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x2}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0xa}, {0x0, 0x9}, {0x4}, {0x7, 0x6}, {0x6, 0xd}, {0x1, 0xa}, {0x1, 0x1}, {0x6, 0x2}, {0x2, 0x1}, {0x6, 0x5}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x9}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x3}, {0x3, 0x3}, {0x6}, {0x6, 0x1}, {0x4, 0x5}, {0x7, 0x1}, {0x2, 0x2}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0x4}, {0x6, 0x2}, {0x6, 0x1d}, {0x7}, {0x7, 0xa}, {0x5, 0x9}, {0x6, 0xa}, {0x7, 0x8}, {0x7, 0x8}, {0x3, 0x6}, {}, {0x4, 0x3}, {0x2, 0x6}, {}, {0x3, 0x5}, {0x2, 0x8}, {0x6, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x3, 0x4}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0xa}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0x9}, {}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x6}, {0x1, 0x5}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x3, 0x8}, {0x5, 0xa}, {0x5, 0x3}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x6}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x2}, {0x3, 0x2}, {0x2, 0x5}, {0x2, 0x6}]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x0, 0x1, 0x1d7, 0x7ff, 0xc1f, 0x1f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x8}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x4, 0x5}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0x2}, {0x4}, {0x5, 0x5}, {0x6, 0x6}, {0x6, 0x5}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x5}, {0x2, 0x7}, {0x2, 0x3}, {0x1, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x3, 0x7}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x4, 0x5}, {0x5, 0x4}, {0x1, 0xa}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x6}, {}, {0x6, 0x5}, {0x6, 0x6}, {0x6, 0x5}, {0x0, 0x8}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x30e5ad7495a23500, 0x36, 0xb, 0x60, 0xc, 0x60, 0x48, 0x60, 0x12, 0x5, 0x60, 0x24, 0x3, 0x24, 0x68, 0x36, 0x1, 0x18, 0x9, 0x9, 0x5, 0x4, 0x2, 0x2, 0x30]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x33}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2d5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x13}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x45c}}, 0x20000801) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000080)='-*@!&\xa1!\\(\x00', &(0x7f00000000c0)='./file0/../file0\x00', r2) 11:04:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 54) [ 3127.600124] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.2'. 11:04:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}], 0x1, 0x4890) 11:04:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x3, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:04:15 executing program 6: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f611ffe7eb69443042b20100000000000000986b177f8bb47f31ee549b6a921e231ef07ee0f7eca620564faeeeafa44000", 0x16}, 0x48, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r2) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc1}, &(0x7f0000000600)={0x0, "5bdb879a2e143cf4899dc0210350c29ac9b26a5aa052793b178a8cc7763bb001626c3ce28e93cf06aa0519aa2efdeeb3d63c1cf2d5368560fdb2df9ffd8c0c3b"}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r3, 0x0) keyctl$link(0x8, 0x0, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000005c0)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "ed8032eaaa72d6ec87f643cab0c926e43e52b45be0718fa1bf8470d7984fa56fcfff09b72ebb3708a98b7788cc66f98aa46a9951ea7c382c2fedcc5dd5391b33", 0x1d}, 0x48, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x42) request_key(&(0x7f00000002c0)='.request_key_auth\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000540)='\xad%)#\x00', r1) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)='logon\x00', 0x0) keyctl$assume_authority(0x10, r0) [ 3127.701295] FAULT_INJECTION: forcing a failure. [ 3127.701295] name failslab, interval 1, probability 0, space 0, times 0 [ 3127.703728] CPU: 1 PID: 17903 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3127.705203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3127.706985] Call Trace: [ 3127.707554] dump_stack+0x107/0x167 [ 3127.708330] should_fail.cold+0x5/0xa [ 3127.709152] ? create_object.isra.0+0x3a/0xa30 [ 3127.710123] should_failslab+0x5/0x20 [ 3127.710928] kmem_cache_alloc+0x5b/0x310 [ 3127.711795] ? mark_held_locks+0x9e/0xe0 [ 3127.712679] create_object.isra.0+0x3a/0xa30 [ 3127.713617] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3127.714715] kmem_cache_alloc+0x159/0x310 [ 3127.715621] xas_alloc+0x336/0x440 [ 3127.716390] xas_create+0x34a/0x10d0 [ 3127.717201] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3127.718326] xas_store+0x8c/0x1c40 [ 3127.719113] __xa_store+0x164/0x2d0 [ 3127.719890] ? xa_delete_node+0x280/0x280 [ 3127.720791] ? trace_hardirqs_on+0x5b/0x180 [ 3127.721725] xa_store+0x31/0x50 [ 3127.722442] __io_uring_add_tctx_node+0x1cf/0x520 [ 3127.723478] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3127.724594] ? alloc_fd+0x2e7/0x670 [ 3127.725387] io_uring_setup+0x1fbb/0x2980 [ 3127.726292] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3127.727372] ? wait_for_completion_io+0x270/0x270 [ 3127.728428] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3127.729541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3127.730651] do_syscall_64+0x33/0x40 [ 3127.731448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3127.732533] RIP: 0033:0x7feea834bb19 [ 3127.733316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3127.737211] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3127.738844] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3127.740355] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3127.741871] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3127.743394] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3127.744906] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:04:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() perf_event_open(0x0, r5, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xcb, 0x6, 0x2, 0x9, 0x0, 0x4, 0x88, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040)}, 0x46ca5, 0x3, 0x1, 0x1, 0x100, 0x4, 0x0, 0x0, 0x9, 0x0, 0x3}, r5, 0x1, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x100000015) 11:04:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:04:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x4, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:04:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}}], 0x1, 0x4890) 11:04:15 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, @perf_config_ext={0x8998, 0x7}, 0x4d00, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r1 = syz_open_dev$vcsu(&(0x7f0000000440), 0x5707ea2d, 0x165001) faccessat(r1, &(0x7f0000000480)='./file0\x00', 0x82) syz_mount_image$nfs4(&(0x7f0000000240), &(0x7f00000002c0)='./file1/file0\x00', 0x8, 0x4, &(0x7f00000007c0)=[{&(0x7f00000004c0)="ac8fb5ae23848d2f15e937d3e232193aeba83acee275cf13387b824ca6b8135c0054dfdacc4cf23f0b79384d8feb58dbfdf6e2036c9eb9fa6d96ba3be9bbda4b2ed1fad3fdd60f6f88ee74bd47f6133fd5d23161781c767d7138e48827889c522516238669b51a01e399801fc5a232cb68fe84f4dbcfaabaeb44904114c0127190b154898c0bf7cd9268a09614b1193ae08e28e831b1340eb1aba51fdfc38e3b146ac61018de08826ae5f1492bcefd1a48e4cd992b5d2ad8fef691dbad6212a52609186db2fdb40d994543bc3935f32b3b893cdd2b7005d5d77e8a1be736226c", 0xe0, 0x9}, {&(0x7f00000005c0)="0e841562893464e65cf281f2546d261d5aeb00eb5a63d73e5d0c9fc8e75102aa2cef1cabcf8fffe21a9c3d209f030f103eaba328449dfbb67c04bac0e95b5d3e9738363d66b75f28494fc8e66d09d32d1a2ec079333c9ba4f80d4ce09f60182d8252e45bcc3f5dbfb912ab2d3c8e51dc6195c3a4f3a28f21feec09b671b08ed7a6a5c904e9d5d2aa24e820a5c2724e47901fecd12b6b3c16232d9a7df36977e875ff128c09bde76c4fcbe03a411b359d7ac3968e1d358c7835567684cf2b9510ba5ecc91ccb9e8990db9556f13d727f87ce426d12af59c4503853cec92a9077850c385d38dabe952486f045e623feb8fde50a8e4", 0xf4}, {&(0x7f0000000380)="a296d034c85b7f70eec741e7fa0246aa21b1c446efce897360e34768edaa0e9b755786de557c51ec2371803f8460d96c0f263803c0e6bc28312c8ce5cf78140351173e96b371b757e48e4cc83b2dbe9b0ebfabaf405ca4d3e06ee80ec86548d831cfa58e0867e77a33f95f837753a485c68d73b4fa023861a28f4fa33e6b48c85951c11b81f24bcd968725bbca0da627d799e67fa20f222715aba1e92eab78c8fa710f658e520a573a6117c318131a109de9922372560bba4d75c498339a20", 0xbf, 0x2fae}, {&(0x7f00000006c0)="1348cb4e0887d7fdeca21381f34255b854563abf23dcdcd9c8f128db16654596cc2867ae010a30c86154c1649554c7e84ebe5be3f9c48dea6d36b92146f03ff8aedc1b64491aa8d448044379062490ce8ad0220f6d0cba398fcdc959b37abd8cb14582358edc34a0b5b1b75473e2c8d0d393e4ab69f2d9c223ed115a2bffe56b627f100a0250e17d87436c8af04172ccc46f35915ed06fa7bc9fbdc572065c14d2cf6abbe73a2d9ff5c2e8f467d2d496d09de183f26c6c178f1de0ea1fe331318e31bedaa869685d61d15a2c9574123483dc37cec766", 0xd6, 0xee}], 0x1020, &(0x7f0000000840)={[{'/dev/vcsa#\x00'}, {'/dev/vcsu#\x00'}, {'@-!'}, {'[(#{\'-'}, {'-/'}], [{@fsmagic}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x1c}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@dont_hash}]}) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x3, 0x1c082) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000340)=0x7, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x54b403, 0x11a) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000300)=ANY=[], 0x78) 11:04:15 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 55) 11:04:15 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe2(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x0) read$rfkill(r1, 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000340)) r2 = syz_open_dev$vcsa(0x0, 0x3, 0x426240) write$binfmt_misc(r2, &(0x7f0000000080)={'syz1', "ba8fe5f6e76e6cfefc2603f0aa4383c8d214db38301f0fecba6f1c33286320695f23f30c5be01969040bdc067f3c6bfe9db6aed1fde143d6f3cd6014a9a4d9158d53be92f2685d573462294a85f50f77418e488cbdd24470a0e8d0b378ddeddf88d20c163755181d22ee0823f3b7fe12"}, 0x74) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x1) read$rfkill(r3, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000380)) read(0xffffffffffffffff, &(0x7f0000000080)=""/89, 0x59) write(0xffffffffffffffff, &(0x7f0000000140)="bf", 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x7fff, "f8dc1f", 0x0, 0x6}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xb) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x1000400, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@dont_measure}, {@fowner_gt}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syncfs(r4) 11:04:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:04:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0xddfd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3f, 0x6, 0xfc, 0x5, 0x0, 0x0, 0xa25d, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x412c, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x4800, 0x80000001, 0xfffffe00, 0x2, 0x3, 0x20, 0x7f, 0x0, 0xd, 0x0, 0x100000000}, 0x0, 0xd, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0xf1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@tipc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/121, 0x79}], 0x1, &(0x7f00000003c0)=""/94, 0x5e}, 0x0, 0x30102, 0x1}, 0x7) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat(0xffffffffffffffff, 0x0, 0x490a40, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x0) [ 3128.077153] FAULT_INJECTION: forcing a failure. [ 3128.077153] name failslab, interval 1, probability 0, space 0, times 0 [ 3128.079627] CPU: 1 PID: 18034 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3128.081164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3128.082840] Call Trace: [ 3128.083354] dump_stack+0x107/0x167 [ 3128.084123] should_fail.cold+0x5/0xa [ 3128.084899] ? xas_alloc+0x336/0x440 [ 3128.085644] should_failslab+0x5/0x20 [ 3128.086428] kmem_cache_alloc+0x5b/0x310 [ 3128.087299] xas_alloc+0x336/0x440 [ 3128.088077] xas_create+0x34a/0x10d0 [ 3128.088795] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3128.089796] xas_store+0x8c/0x1c40 [ 3128.090506] __xa_store+0x164/0x2d0 [ 3128.091198] ? xa_delete_node+0x280/0x280 [ 3128.091996] ? trace_hardirqs_on+0x5b/0x180 [ 3128.092821] xa_store+0x31/0x50 [ 3128.093585] __io_uring_add_tctx_node+0x1cf/0x520 [ 3128.094636] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3128.095628] ? alloc_fd+0x2e7/0x670 [ 3128.096373] io_uring_setup+0x1fbb/0x2980 [ 3128.097243] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3128.098290] ? wait_for_completion_io+0x270/0x270 [ 3128.099224] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3128.100217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3128.101192] do_syscall_64+0x33/0x40 [ 3128.101891] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3128.102865] RIP: 0033:0x7feea834bb19 [ 3128.103566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3128.107029] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3128.108454] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3128.109775] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3128.111098] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3128.112423] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3128.113752] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:04:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000}}], 0x1, 0x4890) 11:04:31 executing program 2: r0 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x10, r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a00)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x220}}, 0x9645) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x0) fallocate(r3, 0x7e, 0x7, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80a00000}, 0xc, &(0x7f0000000080)={&(0x7f0000000a40)={0x1024, 0x12, 0x300, 0x70bd2a, 0x25dfdbff, {0x5}, [@typed={0xb, 0x8a, 0x0, 0x0, @str='/\'-*-E\x00'}, @nested={0x1004, 0x25, 0x0, 0x1, [@generic="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"]}]}, 0x1024}, 0x1, 0x0, 0x0, 0x15}, 0x40000) io_uring_enter(r0, 0x58aa, 0xfffffffc, 0x0, 0x0, 0x0) 11:04:31 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x3}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, '\x00', [{0xff, 0x48, 0x10000, 0x7ff, 0x8001, 0x100000001}, {0x101, 0x9, 0x3ff, 0x10001, 0x2, 0xca}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000080)={@local, @random="a5e2bfbc5563", @void, {@x25={0x805, {0x1, 0x0, 0xf7, "a5daf8201f50bcc1"}}}}, &(0x7f0000000180)={0x0, 0x4, [0x7e7, 0x61f, 0x175, 0xbd8]}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}, 0x1c) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f0000000080)=""/89, 0x59) pread64(r2, &(0x7f00000004c0)=""/198, 0xc6, 0x800) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x280080, 0x101) 11:04:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="52c96c68d72946a31ac4afbd3461c34d8b49c6d01166bcbb2b8f0c20dc69f34887155fe4ae9a4fab54e269df66fe9d6c1406af94b4f6fafbba841e1d516b8a6d812cf6758b4c494b56496f6816a953182620e3dfe2f7256589ca4317407c7f3b6b42ab66c13a7286b72c6fe15b784b1fedc97f3982294b50d69172d3f8b86784c2", 0x81, 0x3ff}, {&(0x7f0000000240)="1332997adc32662f6774", 0xa, 0x1}], 0x18012, &(0x7f00000002c0)={[{@dots}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@debug}, {@dots}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_eq={'euid', 0x3d, r0}}, {@obj_role={'obj_role', 0x3d, '{'}}]}) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@fat=@check_normal}]}) 11:04:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:04:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x5, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:04:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 56) 11:04:31 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x20, 0x7f, 0x4, 0x12, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2, 0x7800, 0x80, 0x20, 0x9}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000300)={@local, 0x60, r1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000340)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4008, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8923, &(0x7f0000000140)={'lo\x00'}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') pread64(r5, &(0x7f0000002100)=""/4083, 0xff3, 0x0) syz_io_uring_setup(0x7a9d, &(0x7f0000000040)={0x0, 0x79b8, 0x4, 0x0, 0x0, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000527090ef9b60900050000000000000005000080480000006fe88400f11ac8f1810d0dc931b7fb93d044584e3ddf303ed7320b364ab5ef9768d0c5507780518151ccc61d149f11066c74aac60fe6c08807000000dc52bd82bf6bf32663c39fa8149906de0b66ab27ee35c4b72f3cc384ac9229d3268893de6ae6ffddc580b76c84f15cab0e9b1e9a5d7d3ec58c5cee455aea64df2fb45a6ae10a71acfa9c"], 0x24}}, 0x0) 11:04:31 executing program 2: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cgroup.controllers\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000380)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4000010) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @mcast2, 0x3548}, 0x1c) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000826bd7000080000000a00000008000300", @ANYRES32=0x0, @ANYBLOB="050400ee3bc8a7e800b6f5335900"], 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x40080) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004a80)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000006b00000008000300", @ANYRES32=0x0, @ANYBLOB="2d9d874a9f093c08b7bdc453f80d092b3e39635ecf95b70c89294e0d5cce44d681b38a90c139e6"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, 0x0, 0x4040) openat$incfs(r0, 0x0, 0x5d3e02, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000126bd7000ff29000000000500370000000000179311bad9fa54ba583787951cc1d2afdf11a4589f8ac8cabab4f6eff4fbd72e888d6bf76395e3bf64b0a03fbd502d363114a3b4ab94c8e2"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000580)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)) 11:04:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000}}], 0x1, 0x4890) [ 3143.540751] : renamed from lo [ 3143.549805] FAULT_INJECTION: forcing a failure. [ 3143.549805] name failslab, interval 1, probability 0, space 0, times 0 [ 3143.552676] CPU: 0 PID: 18157 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3143.554440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3143.556523] Call Trace: [ 3143.557193] dump_stack+0x107/0x167 [ 3143.558132] should_fail.cold+0x5/0xa [ 3143.559097] ? ___slab_alloc+0x155/0x700 [ 3143.560130] ? create_object.isra.0+0x3a/0xa30 [ 3143.561288] should_failslab+0x5/0x20 [ 3143.562273] kmem_cache_alloc+0x5b/0x310 [ 3143.563315] create_object.isra.0+0x3a/0xa30 [ 3143.564425] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3143.565720] kmem_cache_alloc+0x159/0x310 [ 3143.566790] xas_alloc+0x336/0x440 [ 3143.567698] xas_create+0x34a/0x10d0 [ 3143.568661] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 11:04:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffff000000000000}}], 0x1, 0x4890) [ 3143.569990] xas_store+0x8c/0x1c40 [ 3143.571092] __xa_store+0x164/0x2d0 [ 3143.572026] ? xa_delete_node+0x280/0x280 [ 3143.573096] ? trace_hardirqs_on+0x5b/0x180 [ 3143.574232] xa_store+0x31/0x50 [ 3143.575079] __io_uring_add_tctx_node+0x1cf/0x520 [ 3143.576312] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3143.577638] ? alloc_fd+0x2e7/0x670 [ 3143.578581] io_uring_setup+0x1fbb/0x2980 [ 3143.579539] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3143.580676] ? wait_for_completion_io+0x270/0x270 [ 3143.581796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3143.582979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3143.584142] do_syscall_64+0x33/0x40 [ 3143.585005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3143.586191] RIP: 0033:0x7feea834bb19 [ 3143.587050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3143.591334] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3143.593083] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3143.594757] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3143.596423] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3143.598108] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3143.599782] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 [ 3143.646176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 11:04:47 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0xf989}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) fallocate(r0, 0x40, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$snapshot(r2, &(0x7f00000004c0)=""/149, 0x95) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000200)={{}, {0x1000}, 0x0, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)="67f74459307dfe7afecf9745e8eb7abf1a354eea630859", 0x17, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x10de}) 11:04:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x1, 0x4890) 11:04:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 57) 11:04:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:04:47 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11011}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = fork() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x8, 0x6df1, 0x0, 0x7, 0x0, 0x8, 0x8}, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa84c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000140)={&(0x7f0000001280)=""/4096, 0x1000}) ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x0, 0x1, 0x6}, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}]) 11:04:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x6, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:04:47 executing program 5: r0 = io_uring_setup(0x690a, &(0x7f0000000b00)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 11:04:47 executing program 2: r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, r0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "2a6d9d1c520894d9d6f22f5bbebc840681133c00d3935cadfd1ff210f5d5551f429c01ac500cbfa79d553278efa64c05bbf45be97172d9b645210718a2870520", 0x28}, 0x48, r0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20182, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) readv(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4089, 0xff9}], 0x1) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'veth1_vlan\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) [ 3159.672640] FAULT_INJECTION: forcing a failure. [ 3159.672640] name failslab, interval 1, probability 0, space 0, times 0 [ 3159.675218] CPU: 1 PID: 18301 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3159.676837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3159.678688] Call Trace: [ 3159.679287] dump_stack+0x107/0x167 [ 3159.680099] should_fail.cold+0x5/0xa [ 3159.680949] ? xas_alloc+0x336/0x440 [ 3159.681778] should_failslab+0x5/0x20 [ 3159.682647] kmem_cache_alloc+0x5b/0x310 [ 3159.683558] xas_alloc+0x336/0x440 [ 3159.684441] xas_create+0x34a/0x10d0 [ 3159.685332] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3159.686505] xas_store+0x8c/0x1c40 [ 3159.687306] __xa_store+0x164/0x2d0 [ 3159.688106] ? xa_delete_node+0x280/0x280 [ 3159.689027] ? trace_hardirqs_on+0x5b/0x180 [ 3159.689988] xa_store+0x31/0x50 [ 3159.690735] __io_uring_add_tctx_node+0x1cf/0x520 [ 3159.691791] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3159.692937] ? alloc_fd+0x2e7/0x670 [ 3159.693752] io_uring_setup+0x1fbb/0x2980 [ 3159.694684] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3159.695792] ? wait_for_completion_io+0x270/0x270 [ 3159.696877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3159.698029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3159.699180] do_syscall_64+0x33/0x40 [ 3159.700005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3159.701140] RIP: 0033:0x7feea834bb19 [ 3159.701964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3159.706055] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3159.707745] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3159.709323] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3159.710916] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3159.712502] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3159.714093] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:04:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:04:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x7, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:04:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4890) 11:04:47 executing program 5: r0 = semget$private(0x0, 0x4, 0x481) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x1a180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r1 = semget(0x0, 0x3, 0x707) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000002c0)=""/207) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000180)) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x3, 0x8, 0x1800}, {0x2, 0x7}, {0x3, 0x2, 0x3000}], 0x9, &(0x7f0000000200)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000080)=[{0x2, 0x80}], 0x1) unshare(0x48020200) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000000)=[{0x3, 0x7a}, {0x3}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x1800}, {0x2, 0x1, 0x1800}, {0x0, 0xff32, 0x1000}, {0x0, 0x9, 0x800}, {0x2, 0x3fb8, 0x400}, {0x2, 0x40, 0x1800}, {0x4, 0x8001, 0x1000}], 0x7, &(0x7f0000000100)) 11:04:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, 0x4890) 11:04:47 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 58) 11:04:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x8, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:04:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:04:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x59) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) close(r1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x10000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x12) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x4100, 0x41) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="10e4ffff01330000ba5606a21937ed2c8714d2856cb893188d609877b885648d845313a60a09a4fd1cd7482c44fae4b3550ccac260145635b9a0b7bc53cadb04b1a00de4b526003cb222444b2415e77144c1c78af82e0305809245578f031fcf4dd7ff0a3ba4d8dc14a4ccaf2ae7de288578d328db6b9cd8cb1b18060c0a892de24d6048eaa250361e861021684eb7e60be6624ec91b961b6d2700"/187], 0x300) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010001000000000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00\x002.\x00\x00\x00\x00\x00']) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000040)={0x10000, 0x7, 0x1}) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') sendfile(r5, r6, 0x0, 0x100000001) fallocate(r4, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000, 0x7ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r3}) 11:04:47 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x1}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x58, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000020e819b500"], 0x24}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)={0x1d0, 0x3a, 0x200, 0x70bd27, 0x25dfdbfd, {0x7}, [@typed={0xc, 0x65, 0x0, 0x0, @u64=0x6}, @nested={0xeb, 0x63, 0x0, 0x1, [@generic="e52cf8e0feed49f617a8e1613e7410ff3b8f6d00dd31899298d7d81c0666fd8853b670c7304a87f701fba5ecc01c721bb99a36ca0b17aeb471daca94c684d03e1eb6067d83406ebd91d89b581a22d8bba9a4c269bba06570947ec4369529c0495d88ebe814556fda52cae77dab6f5f6d1f204a6a8ae9979d2d7357aa2dc4a92b14f35b67a2f5f35ac7a26e852628ec725ebb10d290ff8664d45ba2a1cf18d25b5e3e6725f765d77e91b2074087eb57193a4ef0090c91cf6471830c5ea325f7826e00598f15a2762838a7d4998a023b6194fea4ce6dc5e6f727336c56973ebaf43030b2ab4910bc"]}, @generic="b2eb76833953be3e27ef8a9b6b8435208858924e0e7b134e53ec6ff5175f1985286de75163612a1d7db49437b90b74ec1c851e9303084d11a7d6daa4c9bdfc7620fe324b7bfd0ffc989d34b5babd52b2788c52a29dccd0eed18f1b9257ea902e49626ae1052662832b5e81d0e23d29693667ecb78b29bb51199c2f28a98533dd9ec4cb3b02b84a8e50f4ed86aafd4d73075056d30328129c300e4d0a7fcc578970e29c63ce2845fac24368d973fcbca84e2d01b8b06f31a7bbbd52c79eaa80c88880"]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000000) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x4e23, 0x3b, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5a4c2b39}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000740), 0x1, 0x0, 0x1}, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xcc, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x8e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010025bd71000000000003000000050005efff004b98bdcd7d209bc3dc695d2aa8ae534b20fbb35351142c7d3355a2791220bec7465cbbd3a4c603f0e19e0000000034f074408501d03c58a80414819ce31b0f1efdc88c2200000000000000000000000000086f2746cfc8c3709e533ff92b558fd6d257fb30de5abd162bbb48dff9b2815de8dc5eb35442c2e4c9833ca24be98da98ce9aaea91b03234b097541978876fb7b30654ef4506f8ab205df62923db49ae8f174dd67f8e1e28447c5b1e8adc84ee09cfb6"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r2, &(0x7f00000003c0)={0xffffffffffffffff, r3, 0x2}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="b0b29607f31b6400", @ANYRES64, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0400bf00"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x80c0) [ 3160.005994] FAULT_INJECTION: forcing a failure. [ 3160.005994] name failslab, interval 1, probability 0, space 0, times 0 [ 3160.008660] CPU: 1 PID: 18428 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3160.010452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3160.012552] Call Trace: [ 3160.013224] dump_stack+0x107/0x167 [ 3160.014167] should_fail.cold+0x5/0xa [ 3160.015155] ? create_object.isra.0+0x3a/0xa30 [ 3160.016325] should_failslab+0x5/0x20 [ 3160.017298] kmem_cache_alloc+0x5b/0x310 [ 3160.018354] ? mark_held_locks+0x9e/0xe0 [ 3160.019410] create_object.isra.0+0x3a/0xa30 [ 3160.020540] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3160.021857] kmem_cache_alloc+0x159/0x310 [ 3160.022950] xas_alloc+0x336/0x440 [ 3160.023732] xas_create+0x34a/0x10d0 [ 3160.024694] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3160.026063] xas_store+0x8c/0x1c40 [ 3160.027013] __xa_store+0x164/0x2d0 [ 3160.027938] ? xa_delete_node+0x280/0x280 [ 3160.029029] ? trace_hardirqs_on+0x5b/0x180 [ 3160.030143] xa_store+0x31/0x50 [ 3160.031009] __io_uring_add_tctx_node+0x1cf/0x520 [ 3160.032242] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3160.033574] ? alloc_fd+0x2e7/0x670 [ 3160.034459] io_uring_setup+0x1fbb/0x2980 [ 3160.035377] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3160.036468] ? wait_for_completion_io+0x270/0x270 [ 3160.037536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3160.038683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3160.039805] do_syscall_64+0x33/0x40 [ 3160.040618] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3160.041714] RIP: 0033:0x7feea834bb19 [ 3160.042527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3160.046418] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3160.048027] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3160.049547] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3160.051072] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3160.052582] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3160.054099] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:04:47 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x68) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 11:04:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x4890) 11:04:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x9, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 3160.210497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3160.215864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3160.217859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3160.294251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:05:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x3, 0x2000) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xff, 0x9, 0x6, 0x1, 0x0, 0xffffffffffffffec, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0xf4b2418e7273fc60, 0x8000, 0x6, 0x5, 0x1ff, 0xfffffff8, 0xab2, 0x0, 0x9, 0x0, 0x100000001}, 0x0, 0x9, r0, 0x0) 11:05:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:05:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x20, 0x8, 0x9, 0x81, 0x0, 0x80, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x200, 0x6, 0x7fffffff, 0x7, 0x6, 0x8, 0x8, 0x0, 0x1, 0x0, 0x2}, r2, 0x10, r1, 0x0) r3 = dup(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast2, 0xff}, 0x1c) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3f, 0x7, 0x1, 0x1, 0x0, 0xa817, 0x400, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000140), 0xd}, 0x8000, 0x2636, 0x9, 0x0, 0x7, 0xfffff07d, 0x7, 0x0, 0x9, 0x0, 0x7}, 0xffffffffffffffff, 0xa, r5, 0x9) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="cf", 0x1}, {&(0x7f0000000080)='Z', 0x1}], 0x2}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) 11:05:07 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 59) 11:05:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x1, 0x4890) 11:05:07 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000140)='./file1\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open$dir(0x0, 0x400000, 0xb0) bind$packet(r2, &(0x7f0000000240)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendfile(r1, r2, 0x0, 0x10000000c) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mknodat(r3, &(0x7f0000000080)='./file2\x00', 0x8000, 0xa7c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000280)=ANY=[@ANYBLOB="3febd5dfee8aca4e5e3fe5b610049b1ddde8907c222ff77345a3f1a55d2bbb13fa6ac2a0876837f6af85bffa798891c1473d7444f642618303358faa3b897e573279bc211245fa014edb2a095abcf5e6b12aaf57eeb04c74a9dc061f5ea92fe0b8e9cbfb47e555102b987b37cfa6a816e97e1af31b80e01b2ff1c75696ceb6f0258f390815477bf72e9779349d3ceb62cfabba5d34849cb84e", @ANYRESOCT=r1]) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x4) 11:05:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0xa, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:05:07 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4000010) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000052d5b24206e22b8b618f687925cab0ffd000000"], 0x901440) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)={0xdf, ""/223}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xff) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x61}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x303b}], @NL80211_ATTR_OPER_CLASS={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x50) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f000000b9c0), &(0x7f000000ba00)=0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x400, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, 0x0, 0x1}, 0xff) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x1ff, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000a40)={{r6}, 0x0, 0x16, @inherit={0x58, &(0x7f00000006c0)={0x0, 0x2, 0x400, 0x101, {0x20, 0x0, 0xffffffff00000001, 0x100000000, 0x579}, [0x4, 0x63]}}, @subvolid=0x7fff}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x3f8, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x3f8}}, 0x0) [ 3179.323006] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.4'. 11:05:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0xb, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:05:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0x4890) [ 3179.428741] FAULT_INJECTION: forcing a failure. [ 3179.428741] name failslab, interval 1, probability 0, space 0, times 0 [ 3179.431301] CPU: 0 PID: 18611 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3179.432800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3179.434612] Call Trace: [ 3179.435191] dump_stack+0x107/0x167 [ 3179.435989] should_fail.cold+0x5/0xa [ 3179.436821] ? create_object.isra.0+0x3a/0xa30 [ 3179.437816] should_failslab+0x5/0x20 [ 3179.438654] kmem_cache_alloc+0x5b/0x310 [ 3179.439537] ? mark_held_locks+0x9e/0xe0 [ 3179.440418] create_object.isra.0+0x3a/0xa30 [ 3179.441363] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3179.442470] kmem_cache_alloc+0x159/0x310 [ 3179.443397] xas_alloc+0x336/0x440 [ 3179.444172] xas_create+0x34a/0x10d0 [ 3179.444994] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3179.446134] xas_store+0x8c/0x1c40 [ 3179.446938] __xa_store+0x164/0x2d0 [ 3179.447735] ? xa_delete_node+0x280/0x280 [ 3179.448639] ? trace_hardirqs_on+0x5b/0x180 [ 3179.449589] xa_store+0x31/0x50 [ 3179.450316] __io_uring_add_tctx_node+0x1cf/0x520 [ 3179.451370] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3179.452503] ? alloc_fd+0x2e7/0x670 [ 3179.453307] io_uring_setup+0x1fbb/0x2980 [ 3179.454215] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3179.455322] ? wait_for_completion_io+0x270/0x270 [ 3179.456396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3179.457539] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3179.458670] do_syscall_64+0x33/0x40 [ 3179.459474] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3179.460584] RIP: 0033:0x7feea834bb19 [ 3179.461391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3179.465402] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3179.467061] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3179.468609] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3179.470151] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3179.471705] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3179.473257] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:05:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7c02, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) pipe(&(0x7f0000000080)) 11:05:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0xf, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:05:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:05:07 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xf36, @private2, 0x2f}, 0x1c) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) syz_io_uring_setup(0x3545, &(0x7f00000002c0)={0x0, 0xb47, 0x0, 0x0, 0x39d}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) socket$inet(0x2, 0x3, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x4) write$tun(r5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private1, 0x9}, 0x1c) bind$802154_dgram(r5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 11:05:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1c}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000280)={0x24, @short}, 0xffffffffffffffa7) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000002c0)=""/9, &(0x7f0000000200)=0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00') pread64(r2, &(0x7f0000000000)=""/105, 0x69, 0x2dd) connect$802154_dgram(r2, &(0x7f0000000140)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x6d00, 0x0}}], 0x324, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x410900) prctl$PR_GET_FPEMU(0x9, &(0x7f00000001c0)) connect$802154_dgram(r3, 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x24, @none={0x0, 0x1}}, 0x14) r4 = creat(&(0x7f0000000300)='./file1\x00', 0x0) write$P9_RREADDIR(r4, &(0x7f0000000040)={0xb}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={0x24, @short={0x2, 0x1}}, 0x14) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), 0x0) 11:05:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x1, 0x0, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) pipe(&(0x7f0000000280)) r3 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x3608, 0x10, 0x2000, 0xffffffff}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x27913, 0xffffffffffffffff, 0x8000000) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r4, &(0x7f0000000000), 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) io_uring_enter(r3, 0x58ab, 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000500)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) 11:05:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x10, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:05:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:05:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}}], 0x1, 0x4890) 11:05:30 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, r0, r0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) syz_io_uring_setup(0x710b, &(0x7f0000000e40)={0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000ec0), &(0x7f0000000000)) 11:05:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:05:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x11, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:05:30 executing program 6: r0 = epoll_create1(0x80000) r1 = epoll_create(0x3fd) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x20000001}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) dup2(r3, r1) 11:05:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x1, 0x0, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) pipe(&(0x7f0000000280)) r3 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x3608, 0x10, 0x2000, 0xffffffff}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x27913, 0xffffffffffffffff, 0x8000000) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r4, &(0x7f0000000000), 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) io_uring_enter(r3, 0x58ab, 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000500)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) 11:05:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}}], 0x1, 0x4890) 11:05:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 60) [ 3203.322213] FAULT_INJECTION: forcing a failure. [ 3203.322213] name failslab, interval 1, probability 0, space 0, times 0 [ 3203.324445] CPU: 1 PID: 18823 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3203.325743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3203.327300] Call Trace: [ 3203.327790] dump_stack+0x107/0x167 [ 3203.328470] should_fail.cold+0x5/0xa [ 3203.329187] ? create_object.isra.0+0x3a/0xa30 [ 3203.330027] should_failslab+0x5/0x20 [ 3203.330731] kmem_cache_alloc+0x5b/0x310 [ 3203.331500] ? mark_held_locks+0x9e/0xe0 [ 3203.332250] create_object.isra.0+0x3a/0xa30 [ 3203.333061] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3203.334017] kmem_cache_alloc+0x159/0x310 [ 3203.334810] xas_alloc+0x336/0x440 [ 3203.335477] xas_create+0x34a/0x10d0 [ 3203.336186] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3203.337168] xas_store+0x8c/0x1c40 [ 3203.337839] __xa_store+0x164/0x2d0 [ 3203.338522] ? xa_delete_node+0x280/0x280 [ 3203.339304] ? trace_hardirqs_on+0x5b/0x180 [ 3203.340114] xa_store+0x31/0x50 [ 3203.340721] __io_uring_add_tctx_node+0x1cf/0x520 [ 3203.341611] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3203.342570] ? alloc_fd+0x2e7/0x670 [ 3203.343267] io_uring_setup+0x1fbb/0x2980 [ 3203.344043] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3203.344967] ? wait_for_completion_io+0x270/0x270 [ 3203.345875] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3203.346839] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3203.347776] do_syscall_64+0x33/0x40 [ 3203.348459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3203.349398] RIP: 0033:0x7feea834bb19 [ 3203.350077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3203.353452] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3203.354845] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3203.356141] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3203.357446] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3203.358750] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3203.360063] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:05:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x13, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:05:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:05:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x1, 0x0, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) pipe(&(0x7f0000000280)) r3 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x3608, 0x10, 0x2000, 0xffffffff}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x27913, 0xffffffffffffffff, 0x8000000) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r4, &(0x7f0000000000), 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) io_uring_enter(r3, 0x58ab, 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000500)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) 11:05:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) r0 = syz_open_procfs(0x0, &(0x7f0000001100)='limits\x00') pread64(r0, &(0x7f0000000080)=""/4074, 0x52, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1, 0x3, 0x5, 0x20, 0x0, 0x0, 0x200, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc7ef, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x58200, 0x7, 0x3f, 0x9, 0x7, 0x100, 0x0, 0x0, 0x7fff, 0x0, 0x7837}, 0x0, 0xe, r0, 0x2) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1c082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) timer_gettime(r1, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 11:05:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x4890) 11:05:31 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2201, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {@fscache}, {@uname={'uname', 0x3d, '/dev/sr0\x00'}}, {@cache_fscache}, {@cache_fscache}, {@version_u}, {@privport}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) 11:05:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x1, 0x0, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) pipe(&(0x7f0000000280)) r3 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x3608, 0x10, 0x2000, 0xffffffff}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x27913, 0xffffffffffffffff, 0x8000000) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r4, &(0x7f0000000000), 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) io_uring_enter(r3, 0x58ab, 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000500)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) 11:05:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x2b, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:05:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:05:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 61) 11:05:45 executing program 6: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000000040), 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/locks\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 11:05:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) recvmsg$unix(r3, &(0x7f0000000480)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000380)=""/117, 0x75}], 0x2, &(0x7f0000000400)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x0) syz_open_procfs(r4, &(0x7f00000004c0)='attr/sockcreate\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x70a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240088c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000068400000800030046dfc6bfe879958dfb2eee34e8dade21f921e310eb7c7228d4ef", @ANYRES32=r5, @ANYBLOB="0500530000000000"], 0x24}}, 0x0) 11:05:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x4890) 11:05:45 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffd, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r2 = socket$inet_icmp(0x2, 0x2, 0x1) openat(r1, &(0x7f0000000040)='./file0\x00', 0x322a02, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x3, 0x800) ioctl$FIOCLEX(r3, 0x5451) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x2cf04, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="6772657461703000000000e82c1572af362d88df95644ca90000010000000000000000917f597e1f1619e7b34734550a4b0653470204b5ac3e26b0a6724d5a8c2d6897294e2a5259fe941ae8fbba0af26f15f5a7e22b2f58f5636f06718962dcceec337db4d3ac6adfe91853dab6da881c65079e087a484f2ffafe4bcba47b122834cf06d8c79d397a36fb4af50ed944317b5640271c5ee5cbe6e00c4229e52ad0606998b0e921df4981e98a7480b1028fcf435173a6e0b3c25d791a93ed2ca00357f35e11a7f685e667501cfc80ed5c9cc5bc6d128fdcaab931fb39f7ab558a37487d84a902e819bebd629e3c540aa13a95101bc086abe316e6f1868aaae7", @ANYRES32=r4]}) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x7}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46f70708d001000000000000000200030000000000190100000000000040000000000000000402000000000000020000000000380001002efa010003000000006000200000f3000000000000000500000000000000000200000000000009000000000000000200000000000000ae06000000000000d140469f63d9f2e980d471b624707a7e4d2c8d9c0d0d133436e3c1bedc8c875d976bf0265f6ec96114795875e1697a51cc904ec654b469524567c8a243317b2e529794af0a37290e955cc58656e2a09ff4cca13df766ad3b1f7ff51d2a3d626fd7e82ca26af6c65118f8fa6c428cd468d8d800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/490], 0x1ea) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 11:05:45 executing program 4: r0 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xbc, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x2}, @enter_looper, @increfs_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fd, @fda={0x66646185, 0x9, 0x1, 0x1000000000009}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0xa, 0x2, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000c00)=""/4096, 0x1000, 0x1, 0x37}, @ptr={0x70742a85, 0x1, &(0x7f0000001c00)=""/4096, 0x1000, 0x0, 0x30}}, &(0x7f0000000200)={0x0, 0x20, 0x48}}, 0x1000}, @exit_looper], 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x20, 0x8}, 0x18) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4020, &(0x7f0000000380)={0x0, 0x3131, 0x0, 0x0, 0x4}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/tty/ldiscs\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1000004, 0x1010, 0xffffffffffffffff, 0x10000000) syncfs(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) [ 3217.776476] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 11:05:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) [ 3217.834623] FAULT_INJECTION: forcing a failure. [ 3217.834623] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.837189] CPU: 1 PID: 19065 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3217.838721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3217.840569] Call Trace: [ 3217.841157] dump_stack+0x107/0x167 [ 3217.841968] should_fail.cold+0x5/0xa [ 3217.842815] ? create_object.isra.0+0x3a/0xa30 [ 3217.843834] should_failslab+0x5/0x20 [ 3217.844678] kmem_cache_alloc+0x5b/0x310 [ 3217.845576] ? mark_held_locks+0x9e/0xe0 [ 3217.846481] create_object.isra.0+0x3a/0xa30 [ 3217.847462] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3217.848592] kmem_cache_alloc+0x159/0x310 [ 3217.849520] xas_alloc+0x336/0x440 [ 3217.850309] xas_create+0x34a/0x10d0 [ 3217.851151] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3217.852314] xas_store+0x8c/0x1c40 [ 3217.853115] __xa_store+0x164/0x2d0 [ 3217.853922] ? xa_delete_node+0x280/0x280 [ 3217.854845] ? trace_hardirqs_on+0x5b/0x180 [ 3217.855813] xa_store+0x31/0x50 [ 3217.856544] __io_uring_add_tctx_node+0x1cf/0x520 [ 3217.857603] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3217.858755] ? alloc_fd+0x2e7/0x670 [ 3217.859632] io_uring_setup+0x1fbb/0x2980 [ 3217.860564] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3217.861682] ? wait_for_completion_io+0x270/0x270 [ 3217.862773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3217.863950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3217.865096] do_syscall_64+0x33/0x40 [ 3217.865913] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3217.867051] RIP: 0033:0x7feea834bb19 [ 3217.867871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3217.871950] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3217.873637] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3217.875223] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3217.876801] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3217.878382] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3217.879975] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:05:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x4890) 11:05:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x32, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:05:45 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x0, 0xa72bcca4ebc018e6, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpd_var_run_t:s0\x00'}]}, 0x54}}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x12d343, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r0) lremovexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=@random={'security.', '/\x10\x00'}) 11:05:45 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x0, 0x0) execveat(r1, &(0x7f0000000240)='./file0/file0\x00', 0x0, &(0x7f0000000400)=[0x0, &(0x7f0000000340)='\x00', &(0x7f0000000380)='obj_user'], 0x800) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x9) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', 0x0, &(0x7f0000000500), 0x21000a0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) fchown(r4, r5, 0xee01) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'tunl0\x00', 0x40}) 11:05:45 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x33, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:06:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:06:03 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) fallocate(0xffffffffffffffff, 0x3f, 0x80, 0x2) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x1000, 0x0, &(0x7f0000001300)) syz_mount_image$iso9660(&(0x7f0000001900), &(0x7f0000001940)='./file0/file0\x00', 0x0, 0x3, &(0x7f0000001b80)=[{&(0x7f0000001980)="f64f8b40c57755d4a43929b9e158c79467e354fc03df022dfeef4df704514ee38d2e5286fd487fbe2c42ff9370d7edd218c174fab3de9313938499d56b9a08f94a24ca5b2042f95e9dbf81201f19f1e10b3104f46c5085bde6", 0x59, 0xda3c}, {&(0x7f0000001a00)}, {&(0x7f0000001ac0), 0x0, 0xce0a}], 0x1, &(0x7f0000001c00)={[{@check_strict}, {@cruft}, {@map_normal}, {}, {@block={'block', 0x3d, 0x686e3593e7524d39}}, {@overriderock}, {@unhide}], [{@uid_gt}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 11:06:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 62) 11:06:03 executing program 5: lookup_dcookie(0xf07b, &(0x7f0000000840)=""/188, 0xbc) r0 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@generic, &(0x7f0000000140)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) statx(r1, &(0x7f0000000500)='./file0\x00', 0x0, 0x400, &(0x7f00000009c0)) getsockname$unix(0xffffffffffffffff, &(0x7f00000007c0)=@abs, &(0x7f0000000900)=0x6e) lstat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000580)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x4e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0x0, r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="bf12240efa5a49b1f74667c081324c6f5c46e5701ac6edb907f8cf552242d7ee7d9525af762b6bb19e1721e04c4d4435f321f10c57b1d7d608af9838ebabb211f4da7211d583dc80e580a14119bc45a2baccd4a409da319bc5190b9af9"], 0x14}}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='\a\x00\x00\x00\a\x00\x00\x00./file0./file0\x00'/40], 0x28}, 0x1, 0x0, 0x0, 0x24000846}, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000280)={0x1, 0x4000000000000, 0x8}) tee(0xffffffffffffffff, r2, 0xf360, 0x4) recvmsg$unix(r3, &(0x7f0000000400)={&(0x7f00000002c0), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x40000000) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001ac0)={0x16, 0x1, {0x4, @struct={0x5, 0x66}, 0x0, 0x100000000, 0x7, 0xffffffff, 0x4, 0x6, 0x40, @struct={0x6, 0x10}, 0x5, 0x80000001, [0x75, 0x6, 0x3, 0x4, 0x4, 0x1]}, {0x7, @usage=0x40, 0x0, 0x8000, 0x7, 0x8, 0x3, 0x2, 0x428, @usage=0x2, 0x7, 0x2, [0x0, 0x8, 0x9, 0x0, 0x6, 0x10000]}, {0x10001, @usage=0x1, 0x0, 0x9, 0xfffffffffffff7cd, 0x1, 0x1, 0x598f, 0x2, @struct={0x7, 0x5}, 0x9, 0x7, [0x81, 0x1, 0x3, 0x6, 0x9, 0x1]}, {0x1ff, 0x882d, 0x9}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20040000) 11:06:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x3c, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:06:03 executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42401, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) r1 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000240)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = semget(0x2, 0x4, 0x650) semctl$SEM_STAT_ANY(r6, 0x1, 0x14, &(0x7f0000000340)=""/194) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x3f, 0x6, 0x4, 0x1f, 0x0, 0x9, 0x400, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x202, 0x0, @perf_config_ext={0x78f7e8e4, 0x9}, 0x0, 0x400, 0xfffffff8, 0x0, 0x100000000, 0x6c47, 0x6, 0x0, 0x5, 0x0, 0x400}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r7, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x6) 11:06:03 executing program 6: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0, 0x40000040, 0x0, {0x0, r3}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)="65c53ae82bb6d3d055d7c27fd87881ab879137ac533ecbeedcd6f1c85afc443954d3f15c7faa4ba4f6d39f8a426729c725717c85647feb92f6fc107f8c745cba4e0d8f371ca5ad4fa76ecbbbad7e2f19c953963ec44fe4061e0d26d1671af95db3dcf203078e016cf075006a20d044499bfed65930989b719262429fa4b4ddaf908de96514db1f7ea83ca09ee2e198cc50d21aeea7", 0x95, 0x2000, 0x1, {0x0, r1}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="d212fcc0e4e32be56152c5f858b7cd00e6cf5d327f6f40b45987f723", 0x1c, 0x20000001}, 0x4) 11:06:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}], 0x1, 0x4890) [ 3236.045387] FAULT_INJECTION: forcing a failure. [ 3236.045387] name failslab, interval 1, probability 0, space 0, times 0 [ 3236.047031] CPU: 1 PID: 19193 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3236.048045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3236.049209] Call Trace: [ 3236.049588] dump_stack+0x107/0x167 [ 3236.050098] should_fail.cold+0x5/0xa [ 3236.050647] ? create_object.isra.0+0x3a/0xa30 [ 3236.051297] should_failslab+0x5/0x20 [ 3236.051838] kmem_cache_alloc+0x5b/0x310 [ 3236.052408] ? mark_held_locks+0x9e/0xe0 [ 3236.052978] create_object.isra.0+0x3a/0xa30 [ 3236.053591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3236.054310] kmem_cache_alloc+0x159/0x310 [ 3236.054896] xas_alloc+0x336/0x440 [ 3236.055418] xas_create+0x34a/0x10d0 [ 3236.055950] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3236.056687] xas_store+0x8c/0x1c40 [ 3236.057195] __xa_store+0x164/0x2d0 [ 3236.057715] ? xa_delete_node+0x280/0x280 [ 3236.058298] ? trace_hardirqs_on+0x5b/0x180 [ 3236.058908] xa_store+0x31/0x50 [ 3236.059384] __io_uring_add_tctx_node+0x1cf/0x520 [ 3236.060063] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 3236.060790] ? alloc_fd+0x2e7/0x670 [ 3236.061302] io_uring_setup+0x1fbb/0x2980 [ 3236.061886] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 3236.062589] ? wait_for_completion_io+0x270/0x270 [ 3236.063280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3236.064004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3236.064724] do_syscall_64+0x33/0x40 [ 3236.065243] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3236.065960] RIP: 0033:0x7feea834bb19 [ 3236.066475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3236.069054] RSP: 002b:00007feea58c1108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3236.070111] RAX: ffffffffffffffda RBX: 00007feea845ef60 RCX: 00007feea834bb19 [ 3236.071105] RDX: 0000000020ffc000 RSI: 0000000020000000 RDI: 0000000000006275 [ 3236.072129] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 3236.073149] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 3236.074162] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:06:03 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x0) keyctl$join(0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000c40)={0x108c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1078, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30cc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^*\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}]}]}, 0x108c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socketpair(0x10, 0x2, 0x9, &(0x7f0000000c00)) 11:06:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}}], 0x1, 0x4890) 11:06:03 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4146e2, 0x0) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x0, 0xea60}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0x1}}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\x00', 0x0, r1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x5421) 11:06:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x6c, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:06:03 executing program 2: r0 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0), &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x54e5, &(0x7f00000003c0), &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) pipe2(&(0x7f0000000180), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r4, 0x6) ftruncate(r4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) io_uring_enter(r0, 0x56c6, 0x0, 0x7, 0x0, 0x0) sendfile(r5, r0, &(0x7f00000000c0)=0x6dbf6bf0, 0xfa0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x50, r5, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff2000/0x2000)=nil, 0x2000, 0x8, 0x50, r3, 0x0) r7 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r6, r9, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r5, 0x80, &(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "326d93078b3122ebad40e53d97759381"}, 0x0, 0x0, 0x1}, 0x1) 11:06:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:06:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 63) 11:06:03 executing program 6: r0 = syz_io_uring_setup(0x10004d51, &(0x7f00000002c0)={0x0, 0x43bc, 0x19}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x800000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:06:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) [ 3236.319467] FAULT_INJECTION: forcing a failure. [ 3236.319467] name failslab, interval 1, probability 0, space 0, times 0 [ 3236.320914] CPU: 1 PID: 19302 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3236.321745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3236.322741] Call Trace: [ 3236.323062] dump_stack+0x107/0x167 [ 3236.323516] should_fail.cold+0x5/0xa [ 3236.323973] ? anon_vma_clone+0xdc/0x590 [ 3236.324463] should_failslab+0x5/0x20 [ 3236.324923] kmem_cache_alloc+0x5b/0x310 [ 3236.325420] anon_vma_clone+0xdc/0x590 [ 3236.325899] __split_vma+0x17c/0x4e0 [ 3236.326354] __do_munmap+0x365/0x1260 [ 3236.326814] ? arch_get_unmapped_area+0x450/0x450 [ 3236.327399] ? lock_release+0x680/0x680 [ 3236.327875] mmap_region+0x7cc/0x1500 [ 3236.328344] do_mmap+0x868/0x1370 [ 3236.328774] vm_mmap_pgoff+0x198/0x1f0 [ 3236.329244] ? randomize_page+0xb0/0xb0 [ 3236.329731] ksys_mmap_pgoff+0x41c/0x560 [ 3236.330221] ? find_mergeable_anon_vma+0x250/0x250 [ 3236.330815] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3236.331460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3236.332076] do_syscall_64+0x33/0x40 [ 3236.332524] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3236.333134] RIP: 0033:0x7feea834bb62 [ 3236.333580] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3236.335784] RSP: 002b:00007feea58c10f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3236.336697] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feea834bb62 [ 3236.337553] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020fef000 [ 3236.338409] RBP: 0000000020fef000 R08: 0000000000000008 R09: 0000000000000000 [ 3236.339272] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 3236.340115] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:06:22 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000580)="01434430303101004c494e55582020202028202020202020202020202020202020202020202020204344524f4d2020202020202020052020202020202020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000020000000000000000000000000000000000000100000101000001000808001800000000000018140000000000feffffffff150000000022001cdf", 0xa0, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}], 0x0, &(0x7f0000012200)) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000000) 11:06:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0xb1, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:06:22 executing program 6: ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000200)={0xcb16, 0x81, 0x9, 0x4, 0x20, 0x1}) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@cache_mmap}, {@cache_mmap}, {@noextend}], [{@seclabel}, {@obj_type={'obj_type', 0x3d, '\''}}]}}) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)=""/239) 11:06:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) 11:06:22 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000010680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 11:06:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x20}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRES64, @ANYRESHEX, @ANYRESDEC=r1, @ANYRES64]) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x2000002, 0x10, 0xffffffffffffffff, 0x3f93c000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000b40)="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", 0x410}], 0x3}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:06:22 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 64) 11:06:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x4890) 11:06:22 executing program 6: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x40014317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x2000, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040), 0x0) r0 = semget(0x1, 0x1, 0x754) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x9, 0x81, 0x1f, 0x2, 0x0, 0x7b, 0x101, 0x17, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x346a271f, 0x80000000}, 0x12420, 0x653, 0x6, 0x2, 0x5, 0x1, 0x6, 0x0, 0xfff, 0x0, 0x79}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) semctl$IPC_RMID(0x0, 0x0, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x0]) semop(0x0, &(0x7f0000000000)=[{}], 0x16) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f00000004c0)=""/184) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000180)) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0x7}, {0x4, 0x4, 0x1000}, {0x0, 0x9, 0x1800}, {0x2, 0x7, 0x800}, {0x0, 0x1}, {0x4, 0x1, 0x1800}, {0x1, 0x4, 0x3000}, {0x3, 0x8, 0x1800}, {0x2, 0x7, 0x800}, {0x3, 0xfffb, 0x3000}, {0x1, 0x1, 0x1800}], 0xb, &(0x7f0000000200)) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x200}, {0x2, 0x200, 0x1800}, {0x4, 0x40, 0x1800}, {0x4, 0x1, 0x800}], 0x4, &(0x7f0000000040)={0x0, 0x989680}) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000080), 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f0000001400)=""/4123) unshare(0x48020200) 11:06:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0xf0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:06:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x1, 0x4890) 11:06:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) [ 3254.683170] FAULT_INJECTION: forcing a failure. [ 3254.683170] name failslab, interval 1, probability 0, space 0, times 0 [ 3254.685117] CPU: 0 PID: 19360 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3254.686228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3254.687572] Call Trace: [ 3254.688007] dump_stack+0x107/0x167 [ 3254.688597] should_fail.cold+0x5/0xa [ 3254.689212] ? create_object.isra.0+0x3a/0xa30 [ 3254.689944] should_failslab+0x5/0x20 [ 3254.690555] kmem_cache_alloc+0x5b/0x310 [ 3254.691221] create_object.isra.0+0x3a/0xa30 [ 3254.691931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3254.692751] kmem_cache_alloc+0x159/0x310 [ 3254.693426] anon_vma_clone+0xdc/0x590 [ 3254.694064] __split_vma+0x17c/0x4e0 [ 3254.694705] __do_munmap+0x365/0x1260 [ 3254.695369] ? arch_get_unmapped_area+0x450/0x450 [ 3254.696207] ? lock_release+0x680/0x680 [ 3254.696892] mmap_region+0x7cc/0x1500 [ 3254.697568] do_mmap+0x868/0x1370 [ 3254.698176] vm_mmap_pgoff+0x198/0x1f0 [ 3254.698852] ? randomize_page+0xb0/0xb0 [ 3254.699560] ksys_mmap_pgoff+0x41c/0x560 [ 3254.700253] ? find_mergeable_anon_vma+0x250/0x250 [ 3254.701104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3254.702004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3254.702887] do_syscall_64+0x33/0x40 [ 3254.703527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3254.704401] RIP: 0033:0x7feea834bb62 [ 3254.705015] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3254.708145] RSP: 002b:00007feea58c10f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3254.709436] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feea834bb62 [ 3254.710719] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020fef000 [ 3254.712091] RBP: 0000000020fef000 R08: 0000000000000007 R09: 0000000000000000 [ 3254.713311] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 3254.714529] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:06:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = inotify_init() dup(r1) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) write$P9_RXATTRWALK(r0, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0xfff}, 0xf) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x4, 0x400080) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={0x0, @llc={0x1a, 0x20, 0x9, 0x8, 0x25, 0x9, @local}, @rc={0x1f, @none, 0x8}, @qipcrtr={0x2a, 0x0, 0x2}, 0x9d1d, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)='veth0\x00', 0xfffffffffffffff7, 0x4, 0x3}) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000080)=""/89, 0x59) copy_file_range(r3, 0x0, r2, &(0x7f0000000180)=0x2, 0xffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) 11:06:22 executing program 4: io_setup(0x8001, &(0x7f0000000080)=0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f0000000080)=""/89, 0x59) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001140), 0x1a82823023f77387, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x40, 0x1) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000000080)=""/89, 0x59) r6 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = dup(r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r8, &(0x7f0000000080)=""/89, 0x59) r9 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = dup(r9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r10, 0x0) io_submit(r0, 0x9, &(0x7f00000017c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f00000000c0)="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", 0x1000, 0x1ff, 0x0, 0x2}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x6, r2, &(0x7f00000010c0)="4260a917e729f55921f6fd5a0a92f70ab241c9676b6c7a05ad5b729d60b5f7b26f168fdf9ba1231073b4b1ef58428f887f8291464be664", 0x37, 0x100000001, 0x0, 0x3}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x6, 0x30, r3, &(0x7f0000001180)="b3ce2dcaee30ce097e9fd0ec2cf73d373ff8579f", 0x14, 0x7, 0x0, 0x2}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000001200)="bbd3e55384b1a2d67bab126d11acae3f74e5eb696020c619891ef80ffe983d6fd7d972fa21ac8d714b0122daf972f901f7e2cf6c3904105e7ffaf88b8801ec3c431ce248e7e6c489bd99762249050e50ec63024b0a9ce812a0de5da2b2a1dae8bd1f3dd6426780d23edfeab03045342f5a5a6b5aff2c3b0cae248f9ce3cec0d8fab9f31fc15ba4506d3f92c4099489d0e16f8582", 0x94, 0x6, 0x0, 0x0, r4}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x5, r5, &(0x7f0000001340)="993eb096c8e25d9e1d106fa9a352aa49f5c9ba19c6fa72acd9cde8fc759fe723a334ffb10d73ea8003e3ef6a828424c2ef02bc4eeaac1d3fff78e7a021a55a88377fa2853c7c33341c5e624ed32a98b163f0c6189754d5b636adc683a0d44598f2caafbe13eb12c1e3d0de9a011f42f522515a2bb7f64e9eecef48c7cf22fe014717c260fed5fb4067f089ea501f04787930df4e07951552d1826ff4e3a65da89c5c5e009690393ea3150e67db56ead911c6c4cbe7310bce3ef919d568ba803418d507889281390e3b26734ccf970b996347a7d2dbbbe2b41e094ad621274760b260734c6918ac6e42a0ce4080b54ef1f04f003ab530", 0xf6, 0x5, 0x0, 0x1}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000001480)="7f9e6628ef7f7e0be7f4dde3da2391c884a4dea37f001e", 0x17, 0x200, 0x0, 0x1}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000001500)="5c84f55ab4c91251cf8200672f8ba04b0c2c8474d3ccd09d5648375db64bf0d8b7837e415d0b12aeba6ef620f2c75a488b07d10861d0b043b8196f687fe38aca5bd4b57ec30b34664cb2caca", 0x4c, 0x7, 0x0, 0x3, r7}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x3, 0x2, r8, &(0x7f00000015c0)="7d081f3ba0a1d6ccd6866e83829ef8ec871598317a61d67bb1250ee83342ba1cc2764d1503baff4177835ac16dbd70647ca1114fdbbd3e85c4d9e0f7cbc01e1b3da021927f6917f22cfc280f5d7f32e4e70336950af9f661fc2f410850c4dd1c3be451c889caa8fa7ec382af57939614ef7e36c2cb5ed1425debe1b6d967427fa8fa4ea1176cc052a0f12174e60108f5ffe231f8db33228bbfbf5d96c4ca35ede508a7d5a2299d57179a5c3b7d8907cb889372b278e7929279c740010d", 0xbd, 0x8, 0x0, 0x3, r10}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0xf, 0x400, 0xffffffffffffffff, &(0x7f00000016c0)="23d2b11ef4255f5156a370db03fd49389e70f17ff5f0a14b7e9c537bd54a849acfc7f4367ca8540d34d95e2429aca8d9570b4aed7431d128dd4849dac875183eb6a66cc6f4ebf73e204539a795f433f99c67466d7ff5fd0fabd1fa98b3c74a13cf96dd5d50c449e91a4cf80661bb2f9f3b1f75e6b381c9139b3e5c199d06654e22af967aae34c26277b750fa99acbb036ae7618d671642060353e0d512268863bd2f208ded390ccda21d2137f60e665c0765405f70ff3c91", 0xb8, 0x455e, 0x0, 0x2}]) 11:06:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x300, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:06:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, 0x1a, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x6, 0x0, 0x0, 0x1, [@generic='l[']}]}, 0x1c}}, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) r3 = getpid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x1) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={r3, 0xee01}, 0xc) 11:06:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:06:42 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454ca, &(0x7f0000000040)) 11:06:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x340, 0xfffffffffffffffe, 0xfffffffe, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000480)=ANY=[], 0x10) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f0000000080)=""/89, 0x59) fremovexattr(r3, &(0x7f0000000040)=@random={'osx.', '\x00'}) creat(&(0x7f0000000000)='./file1\x00', 0x83) socket$unix(0x1, 0x5, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x100000001) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES32=r4, @ANYBLOB="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"]) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r5, 0xa1c24000) sendfile(r0, r4, 0x0, 0x100000001) 11:06:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}}], 0x1, 0x4890) 11:06:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x6, {}, 0x401, 0x3, 0x1}, 0x0) 11:06:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 65) 11:06:42 executing program 4: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xffffffffffffff2e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x80, 0x102, 0xb91, 0x452, 0x7ffffbff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x40, 0x8, 0x6, 0x0, 0x8001, 0x80602, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x1, @perf_config_ext={0x9, 0x2a}, 0x44110, 0x7, 0x1000, 0x0, 0x6, 0x6, 0x3f, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/8250', 0x460800, 0x8) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl(r3, 0x5, &(0x7f00000001c0)="bdf4f077e455229f724a2d8604fc09d41f6a8ce58af58ed567fa443dcf4ef44390945e448a94fc78b94dfad58aa627c8c6358d33430dce7f371c742dcad85fab36a698e758d2243c877cd99bb253096155de344983b2e4096ced3f1989b0d7b687852f034aca54c5c57781ba5bffee2353ef0b601fd44110") r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f00000004c0)={{r4}, "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"}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000180)={0xb0, 0x0, 0x0, 0x400}) 11:06:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x500, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:06:42 executing program 5: unshare(0xe020080) r0 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) semctl$IPC_SET(r0, 0x0, 0x1, 0x0) [ 3274.486850] FAULT_INJECTION: forcing a failure. [ 3274.486850] name failslab, interval 1, probability 0, space 0, times 0 [ 3274.489721] CPU: 1 PID: 19599 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3274.491285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3274.493174] Call Trace: [ 3274.493775] dump_stack+0x107/0x167 [ 3274.494616] should_fail.cold+0x5/0xa [ 3274.495480] ? vm_area_alloc+0x1c/0x110 [ 3274.496393] should_failslab+0x5/0x20 [ 3274.497259] kmem_cache_alloc+0x5b/0x310 [ 3274.498191] vm_area_alloc+0x1c/0x110 [ 3274.499065] mmap_region+0x982/0x1500 [ 3274.499977] do_mmap+0x868/0x1370 [ 3274.500782] vm_mmap_pgoff+0x198/0x1f0 [ 3274.501670] ? randomize_page+0xb0/0xb0 [ 3274.502612] ksys_mmap_pgoff+0x41c/0x560 [ 3274.503531] ? find_mergeable_anon_vma+0x250/0x250 [ 3274.504653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3274.505831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3274.507009] do_syscall_64+0x33/0x40 [ 3274.507861] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3274.509019] RIP: 0033:0x7feea834bb62 [ 3274.509859] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3274.514016] RSP: 002b:00007feea58c10f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3274.515749] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feea834bb62 [ 3274.517351] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020fef000 [ 3274.518943] RBP: 0000000020fef000 R08: 0000000000000008 R09: 0000000000000000 [ 3274.520574] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 3274.522153] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:06:42 executing program 2: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x53}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:sysfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x440) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x58}}, 0x4000) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x9800) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x3, 0x1, 0x204, 0x0, 0x0, {0x69bd9b5b4ecc9495, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040811}, 0x80) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000740)=0xe8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x300, 0x8001, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x40040c5) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xbf}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x86400, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20044000) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x820, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c840}, 0x20040890) r3 = openat2(r2, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x80400, 0x20}, 0x18) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000c80)={{0x7f, 0xfb}, 0x0, 0x3ff, 0xf43b, {0x2, 0x6}, 0x5, 0xeb}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1204}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb8}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe41}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4008045) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xec, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb1, 0xa8, @random="2f0305ebb4e7bcb66c9ae759c337e21e48a5984e299999fea1f186c404f29a014aaccc17f25b6b2998d3edc6ad458f0db5f96b0b80b53e16ee504fad13f77e051c274d782099a8d01fd4808d06cb4c290bd79c8978b9f918fdd1375eb4d427b31811e34ca6ccc73977f031a433cf013edc13ccabad9229746c80646758ca0d96db4e4adfa6ead5cc2a9edf367f9e86e79b715c1b79acbd34ca1069874387e0cb61480b0beb7ef87315c771d052"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000) r5 = fsmount(r2, 0x1, 0x71) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x88020200}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x44, r6, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x800) 11:06:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x4890) 11:06:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x401, 0x3, 0x1}, 0x0) 11:06:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x600, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 3274.677468] blktrace: Concurrent blktraces are not allowed on loop8 11:06:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0x3, 0x1}, 0x0) 11:06:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000001b80)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001b7f27107bf71b4798833b656", 0x66, 0x400}], 0x8e1840, &(0x7f0000000100)) 11:06:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 66) [ 3274.897857] FAULT_INJECTION: forcing a failure. [ 3274.897857] name failslab, interval 1, probability 0, space 0, times 0 [ 3274.900342] CPU: 0 PID: 19724 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3274.901815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3274.903589] Call Trace: [ 3274.904166] dump_stack+0x107/0x167 [ 3274.904945] should_fail.cold+0x5/0xa [ 3274.905765] ? create_object.isra.0+0x3a/0xa30 [ 3274.906731] should_failslab+0x5/0x20 [ 3274.907545] kmem_cache_alloc+0x5b/0x310 [ 3274.908417] create_object.isra.0+0x3a/0xa30 [ 3274.909345] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3274.910421] kmem_cache_alloc+0x159/0x310 [ 3274.911308] anon_vma_clone+0xdc/0x590 [ 3274.912158] __split_vma+0x17c/0x4e0 [ 3274.912954] __do_munmap+0x365/0x1260 [ 3274.913777] ? arch_get_unmapped_area+0x450/0x450 [ 3274.914814] ? lock_release+0x680/0x680 [ 3274.915673] mmap_region+0x7cc/0x1500 [ 3274.916506] do_mmap+0x868/0x1370 [ 3274.917255] vm_mmap_pgoff+0x198/0x1f0 [ 3274.918091] ? randomize_page+0xb0/0xb0 [ 3274.918950] ksys_mmap_pgoff+0x41c/0x560 [ 3274.919831] ? find_mergeable_anon_vma+0x250/0x250 [ 3274.920877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3274.921974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3274.923065] do_syscall_64+0x33/0x40 [ 3274.923871] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3274.924963] RIP: 0033:0x7feea834bb62 [ 3274.925754] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3274.929643] RSP: 002b:00007feea58c10f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3274.931267] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feea834bb62 [ 3274.932781] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020fef000 [ 3274.934288] RBP: 0000000020fef000 R08: 0000000000000008 R09: 0000000000000000 [ 3274.935803] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 3274.937319] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:06:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0x0, 0x1}, 0x0) 11:06:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4890) 11:06:59 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 67) 11:06:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1811c1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000200)) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x31) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fallocate(r6, 0x0, 0xffff, 0x8000) sendfile(r4, r5, 0x0, 0x100000001) fallocate(r3, 0x0, 0x0, 0x8000) sendmsg$nl_generic(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000003100020028bd7000fddbdf250d000000f4adc41c4a567d6404c876b53f2d8760c6c868f9b8884bbb765489e56d91d161ca60a221918ebd07c88255e7ac4be4d3af05e5e24d0949f6411709893faa6b483f841eb85a7d3d4d6c89b3bb79f2085f24a0a7c3185f8ad13fec04cf0c8f262d072c5d09b305cf667a183f8c4103626e2823ef11733c415f87b9f5d8976d43f579ccedba8c513f7dedc623fd10a10ef78c9ee769595a1de39d68b7dbcb4396e10638536a9019b873d45540aad604270388cc35cba4190d090239ea00"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 11:06:59 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffcd}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000380)={&(0x7f0000000100), 0xc, 0x0}, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x3f8, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x3f8}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000080), 0x100, 0x208481) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f00000000c0)=0x3, 0x4) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f0000000080)=""/89, 0x59) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0x5, 0x40, 0x2b90, 0x3, 0x401}) r6 = openat$cgroup_int(r4, &(0x7f0000000180)='cpuset.cpus\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f00000001c0)) 11:06:59 executing program 4: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[{&(0x7f0000000000)="2d1d1918125cf8a28c689b67a87290468827c44c70557052d9aecdc3d8751aab0557d4d0c8c4a562b3c971e3ddbce111007eb609c331923f708d", 0x3a}, {&(0x7f0000000200)="a9", 0x1}, {&(0x7f0000000300)='\\', 0x1}, {&(0x7f0000000400)="c4", 0x1}], 0x0, 0x0) 11:06:59 executing program 2: r0 = syz_io_uring_setup(0x4c7f, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x9b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, r7, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r0, 0x10000}, 0x829c) 11:06:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x700, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) [ 3292.072694] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.5'. 11:06:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE, 0x0) 11:06:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x4890) 11:06:59 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) recvmmsg$unix(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000000600)=""/254, 0xfe}], 0x7, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, &(0x7f0000001880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}}], 0x2, 0x40002021, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7f, 0x1, 0x3, 0xf, 0x0, 0x40, 0x80082, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xdab4, 0x2, @perf_config_ext={0x7, 0x8}, 0x20, 0x7, 0xfffffffa, 0x5, 0x10001, 0xe6d, 0x7ff, 0x0, 0xaad7, 0x0, 0x40}, r1, 0x6, 0xffffffffffffffff, 0xb) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x105000, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) signalfd(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x951, 0x0, 0x0}, 0x0) sendfile(r0, r2, 0x0, 0x100000001) 11:06:59 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000340)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4008, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r4 = accept4(r2, 0x0, &(0x7f0000000200), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip6gre0\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x5e, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20800) mknodat$loop(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', 0x0, 0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) 11:06:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x900, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:06:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x4890) [ 3292.231523] FAULT_INJECTION: forcing a failure. [ 3292.231523] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3292.234496] CPU: 0 PID: 19730 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3292.236148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.237926] Call Trace: [ 3292.238502] dump_stack+0x107/0x167 [ 3292.239289] should_fail.cold+0x5/0xa [ 3292.240132] __alloc_pages_nodemask+0x182/0x600 [ 3292.241143] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3292.242433] ? walk_mem_res+0x170/0x170 [ 3292.243300] alloc_pages_current+0x187/0x280 [ 3292.244234] pte_alloc_one+0x16/0x1a0 [ 3292.245043] __pte_alloc+0x1d/0x330 [ 3292.245817] remap_pfn_range_internal+0x9a3/0xf60 [ 3292.246850] ? lookup_memtype+0x5b/0x200 [ 3292.247739] ? apply_to_existing_page_range+0x40/0x40 [ 3292.248869] remap_pfn_range+0xcd/0x160 [ 3292.249702] ? remap_pfn_range_notrack+0x70/0x70 [ 3292.250725] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3292.251854] io_uring_mmap+0x398/0x530 [ 3292.252695] mmap_file+0x5e/0xe0 [ 3292.253420] mmap_region+0xc4d/0x1500 [ 3292.254258] do_mmap+0x868/0x1370 [ 3292.255023] vm_mmap_pgoff+0x198/0x1f0 [ 3292.255983] ? randomize_page+0xb0/0xb0 [ 3292.256857] ksys_mmap_pgoff+0x41c/0x560 [ 3292.257732] ? find_mergeable_anon_vma+0x250/0x250 [ 3292.258794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3292.259943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3292.261053] do_syscall_64+0x33/0x40 [ 3292.261851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3292.262929] RIP: 0033:0x7feea834bb62 [ 3292.263717] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3292.267681] RSP: 002b:00007feea58c10f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3292.269310] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feea834bb62 [ 3292.270833] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020fef000 [ 3292.272383] RBP: 0000000020fef000 R08: 0000000000000007 R09: 0000000000000000 [ 3292.273893] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 3292.275408] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 [ 3292.292000] ------------[ cut here ]------------ [ 3292.292832] WARNING: CPU: 1 PID: 19730 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 3292.293910] Modules linked in: [ 3292.294324] CPU: 1 PID: 19730 Comm: syz-executor.7 Not tainted 5.10.258 #1 [ 3292.295111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.296101] RIP: 0010:get_pat_info+0x216/0x270 [ 3292.296663] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 21 8b 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 0a 8b 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 c5 ae 5a 00 e9 [ 3292.298768] RSP: 0018:ffff8880496f7890 EFLAGS: 00010212 [ 3292.299394] RAX: 0000000000013f7b RBX: ffff88800ed0dd00 RCX: ffffc90011a79000 [ 3292.300273] RDX: 0000000000040000 RSI: ffffffff811255f6 RDI: 0000000000000007 [ 3292.302532] RBP: ffff8880496f7948 R08: 0000000000000000 R09: ffff8880496f7818 [ 3292.304480] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 3292.306769] R13: 1ffff110092def12 R14: 0000000000000000 R15: ffff88800ed0dd50 [ 3292.308662] FS: 00007feea58c1700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 3292.310319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3292.310983] CR2: 00007f69f5ac38c0 CR3: 000000004b82c000 CR4: 0000000000350ee0 [ 3292.311822] Call Trace: [ 3292.312142] ? pgprot_writethrough+0xc0/0xc0 [ 3292.312665] ? finish_task_switch+0x126/0x5d0 [ 3292.313173] ? finish_task_switch+0xef/0x5d0 [ 3292.313702] untrack_pfn+0xdc/0x240 [ 3292.314129] ? track_pfn_insert+0x150/0x150 [ 3292.314644] ? lock_downgrade+0x6d0/0x6d0 [ 3292.315115] ? uprobe_munmap+0x95/0x670 [ 3292.315594] unmap_single_vma+0x1bc/0x300 [ 3292.316077] zap_page_range_single+0x2ce/0x450 [ 3292.316617] ? unmap_single_vma+0x300/0x300 [ 3292.317111] ? remap_pfn_range_internal+0xc56/0xf60 [ 3292.317702] ? lookup_memtype+0x5b/0x200 [ 3292.318176] ? apply_to_existing_page_range+0x40/0x40 [ 3292.318815] remap_pfn_range+0x139/0x160 [ 3292.319312] ? remap_pfn_range_notrack+0x70/0x70 [ 3292.319866] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3292.320477] io_uring_mmap+0x398/0x530 [ 3292.320926] mmap_file+0x5e/0xe0 [ 3292.321339] mmap_region+0xc4d/0x1500 [ 3292.321810] do_mmap+0x868/0x1370 [ 3292.322227] vm_mmap_pgoff+0x198/0x1f0 [ 3292.322684] ? randomize_page+0xb0/0xb0 [ 3292.323146] ksys_mmap_pgoff+0x41c/0x560 [ 3292.323645] ? find_mergeable_anon_vma+0x250/0x250 [ 3292.324247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3292.324849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3292.325457] do_syscall_64+0x33/0x40 [ 3292.325901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3292.326521] RIP: 0033:0x7feea834bb62 [ 3292.326957] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3292.329094] RSP: 002b:00007feea58c10f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3292.329984] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feea834bb62 [ 3292.330818] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020fef000 [ 3292.331659] RBP: 0000000020fef000 R08: 0000000000000007 R09: 0000000000000000 [ 3292.332548] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 3292.333426] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 [ 3292.334303] irq event stamp: 1897 [ 3292.334711] hardirqs last enabled at (1905): [] console_unlock+0x92d/0xb40 [ 3292.335742] hardirqs last disabled at (1914): [] console_unlock+0x839/0xb40 [ 3292.336810] softirqs last enabled at (1762): [] asm_call_irq_on_stack+0x12/0x20 [ 3292.337939] softirqs last disabled at (1757): [] asm_call_irq_on_stack+0x12/0x20 [ 3292.339006] ---[ end trace 26a16452221043bf ]--- 11:07:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x4890) 11:07:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0xa00, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:07:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE, 0x0) (fail_nth: 1) [ 3292.418834] FAULT_INJECTION: forcing a failure. [ 3292.418834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3292.420543] CPU: 1 PID: 19874 Comm: syz-executor.0 Tainted: G W 5.10.258 #1 [ 3292.421476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.422410] Call Trace: [ 3292.422723] dump_stack+0x107/0x167 [ 3292.423133] should_fail.cold+0x5/0xa [ 3292.423575] __alloc_pages_nodemask+0x182/0x600 [ 3292.424122] ? xa_load+0x12d/0x2c0 [ 3292.424535] ? lock_downgrade+0x6d0/0x6d0 [ 3292.425000] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3292.425701] alloc_pages_current+0x187/0x280 [ 3292.426203] __page_cache_alloc+0x2d2/0x360 [ 3292.426696] ? reacquire_held_locks+0x229/0x4e0 [ 3292.427226] ? ext4_filemap_fault+0x7f/0xc0 [ 3292.427724] page_cache_ra_unbounded+0x207/0x6f0 [ 3292.428278] ? read_pages+0xbc0/0xbc0 [ 3292.428726] do_page_cache_ra+0xf9/0x140 [ 3292.429191] filemap_fault+0x1716/0x2210 [ 3292.429675] ? read_cache_page_gfp+0x30/0x30 [ 3292.430178] ? replace_page_cache_page+0x1200/0x1200 [ 3292.430762] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3292.431378] ext4_filemap_fault+0x87/0xc0 [ 3292.431858] __do_fault+0x113/0x410 [ 3292.432274] handle_mm_fault+0x1e53/0x3500 [ 3292.432762] ? ksys_write+0x12d/0x260 [ 3292.433205] ? __pmd_alloc+0x630/0x630 [ 3292.433659] ? vmacache_find+0x55/0x2a0 [ 3292.434110] ? vmacache_update+0xce/0x140 [ 3292.434593] do_user_addr_fault+0x626/0x1070 [ 3292.435096] exc_page_fault+0xa2/0x1a0 [ 3292.435541] ? asm_exc_page_fault+0x8/0x30 [ 3292.436037] asm_exc_page_fault+0x1e/0x30 [ 3292.436512] RIP: 0033:0x7f2125d3ba93 [ 3292.436936] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 3292.439100] RSP: 002b:00007f2123312178 EFLAGS: 00010212 [ 3292.439729] RAX: 00007f2125d3ba70 RBX: 00007f2125eaff60 RCX: 0000000020ffb000 [ 3292.440546] RDX: 0000000020000180 RSI: 0000000020ffc000 RDI: 0000000020ffb000 [ 3292.441544] RBP: 00007f21233121d0 R08: 0000000020000180 R09: 0000000000000000 [ 3292.442653] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 3292.443580] R13: 00007fffeb457adf R14: 00007f2123312300 R15: 0000000000022000 11:07:00 executing program 6: r0 = semget$private(0x0, 0x3, 0x10) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006ffffff7f0000000080000020000000d6f4655fd6f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000014d00)) 11:07:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) syz_io_uring_setup(0x6275, &(0x7f0000000000), &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) (fail_nth: 68) 11:07:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002080)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0xb00, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@empty}, 0x0, @in=@remote}]}]}, 0xfc}}, 0x0) 11:07:00 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/170, 0xaa, 0x1ff) ioctl$int_in(r0, 0x5452, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x4300, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001980)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000002000000002e2f666960653000d66006801f917ae1775c9088fbc53092777379fe812aabf1e04ee0d1d62cd8969e"]) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000280)={0x30000008}) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000580)={{r0}, "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"}) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = dup(r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) recvmmsg(r6, &(0x7f00000018c0)=[{{&(0x7f00000002c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/125, 0x7d}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000000440)=""/52, 0x34}], 0x4, &(0x7f0000001580)=""/119, 0x77}, 0x6}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/183, 0xb7}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/121, 0x79}, {&(0x7f0000001740)=""/127, 0x7f}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x5, &(0x7f0000001840)=""/69, 0x45}, 0x4}], 0x2, 0x40000020, &(0x7f0000001940)={r7, r8+10000000}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00'}) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) 11:07:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE, 0x0) (fail_nth: 2) 11:07:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x2c4102}, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x18, 0x0, 0x23456}, 0x10000) r2 = dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000001700)=@v1={0x1000000, [{0xbd, 0x7}]}, 0xc, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup(r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) openat(r5, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x80, 0x10) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x80000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f6367726f75702f6367726f83702e70726f63730a"], 0x19) openat$hpet(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r6 = getpid() perf_event_open(0x0, r6, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x5, 0x6, 0x6a, 0x1f, 0x0, 0xff, 0x1000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4cc, 0x0, @perf_config_ext, 0x80, 0x20, 0x2, 0x5, 0x100000001, 0x0, 0xdde, 0x0, 0x9}, r6, 0xffffffffffffffff, r2, 0x3) 11:07:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0xe0}], 0x1, 0x4890) 11:07:00 executing program 5: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x3, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x440000c0}, 0x24004890) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x81) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8916, &(0x7f0000000440)) flock(r1, 0xe) [ 3292.576812] FAULT_INJECTION: forcing a failure. [ 3292.576812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3292.578459] CPU: 1 PID: 19892 Comm: syz-executor.0 Tainted: G W 5.10.258 #1 [ 3292.579571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.580526] Call Trace: [ 3292.580853] dump_stack+0x107/0x167 [ 3292.581394] should_fail.cold+0x5/0xa [ 3292.581832] __alloc_pages_nodemask+0x182/0x600 [ 3292.582378] ? xa_load+0x12d/0x2c0 [ 3292.582803] ? lock_downgrade+0x6d0/0x6d0 [ 3292.583271] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3292.583976] alloc_pages_current+0x187/0x280 [ 3292.584476] __page_cache_alloc+0x2d2/0x360 [ 3292.584963] ? reacquire_held_locks+0x229/0x4e0 [ 3292.585494] page_cache_ra_unbounded+0x207/0x6f0 [ 3292.586035] ? read_pages+0xbc0/0xbc0 [ 3292.586479] do_page_cache_ra+0xf9/0x140 [ 3292.586961] filemap_fault+0x1716/0x2210 [ 3292.587452] ? read_cache_page_gfp+0x30/0x30 [ 3292.587975] ? replace_page_cache_page+0x1200/0x1200 [ 3292.588562] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3292.589166] ext4_filemap_fault+0x87/0xc0 [ 3292.589664] __do_fault+0x113/0x410 [ 3292.590093] handle_mm_fault+0x1e53/0x3500 [ 3292.590584] ? ksys_write+0x12d/0x260 [ 3292.591013] ? __pmd_alloc+0x630/0x630 [ 3292.591465] ? vmacache_find+0x55/0x2a0 [ 3292.591925] ? vmacache_update+0xce/0x140 [ 3292.592404] do_user_addr_fault+0x626/0x1070 [ 3292.592910] exc_page_fault+0xa2/0x1a0 [ 3292.593354] ? asm_exc_page_fault+0x8/0x30 [ 3292.593831] asm_exc_page_fault+0x1e/0x30 [ 3292.594304] RIP: 0033:0x7f2125d3ba93 [ 3292.594730] Code: 00 00 00 00 00 66 90 48 89 7c 24 f0 48 89 74 24 e8 48 89 54 24 e0 48 89 4c 24 d8 48 8b 4c 24 f0 48 8b 74 24 e8 4c 8b 44 24 e0 <8b> 81 0c 01 00 00 44 8b 89 08 01 00 00 48 8b 54 24 d8 c1 e0 04 8d [ 3292.596888] RSP: 002b:00007f2123312178 EFLAGS: 00010212 [ 3292.597515] RAX: 00007f2125d3ba70 RBX: 00007f2125eaff60 RCX: 0000000020ffb000 [ 3292.598329] RDX: 0000000020000180 RSI: 0000000020ffc000 RDI: 0000000020ffb000 [ 3292.599140] RBP: 00007f21233121d0 R08: 0000000020000180 R09: 0000000000000000 [ 3292.599957] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 3292.600771] R13: 00007fffeb457adf R14: 00007f2123312300 R15: 0000000000022000 [ 3292.607151] FAULT_INJECTION: forcing a failure. [ 3292.607151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3292.608827] CPU: 1 PID: 19889 Comm: syz-executor.7 Tainted: G W 5.10.258 #1 [ 3292.609927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3292.610887] Call Trace: [ 3292.611203] dump_stack+0x107/0x167 [ 3292.611655] should_fail.cold+0x5/0xa [ 3292.612119] __alloc_pages_nodemask+0x182/0x600 [ 3292.612680] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 3292.613406] ? walk_mem_res+0x170/0x170 [ 3292.613873] alloc_pages_current+0x187/0x280 [ 3292.614388] pte_alloc_one+0x16/0x1a0 [ 3292.614823] __pte_alloc+0x1d/0x330 [ 3292.615241] remap_pfn_range_internal+0x9a3/0xf60 [ 3292.615794] ? lookup_memtype+0x5b/0x200 [ 3292.616279] ? apply_to_existing_page_range+0x40/0x40 [ 3292.616873] remap_pfn_range+0xcd/0x160 [ 3292.617332] ? remap_pfn_range_notrack+0x70/0x70 [ 3292.617884] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 3292.618480] io_uring_mmap+0x398/0x530 [ 3292.618925] mmap_file+0x5e/0xe0 [ 3292.619310] mmap_region+0xc4d/0x1500 [ 3292.619753] do_mmap+0x868/0x1370 [ 3292.620163] vm_mmap_pgoff+0x198/0x1f0 [ 3292.620618] ? randomize_page+0xb0/0xb0 [ 3292.621079] ksys_mmap_pgoff+0x41c/0x560 [ 3292.621547] ? find_mergeable_anon_vma+0x250/0x250 [ 3292.622114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3292.622715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3292.623302] do_syscall_64+0x33/0x40 [ 3292.623729] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3292.624327] RIP: 0033:0x7feea834bb62 [ 3292.624760] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3292.626856] RSP: 002b:00007feea58c10f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3292.627739] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007feea834bb62 [ 3292.628558] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020fef000 [ 3292.629366] RBP: 0000000020fef000 R08: 0000000000000008 R09: 0000000000000000 [ 3292.630189] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200000c0 [ 3292.631028] R13: 0000000020ffc000 R14: 0000000020000080 R15: 0000000020fef000 11:07:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0xa00}], 0x1, 0x4890) VM DIAGNOSIS: 11:07:00 Registers: info registers vcpu 0 RAX=ffff88804c694ec0 RBX=ffff888047cbb480 RCX=00000000000001b4 RDX=0000000000000000 RSI=ffff888047cbc020 RDI=ffff88804c695a60 RBP=ffff888047cbb480 RSP=ffff88803e02fac8 R8 =0000000000000001 R9 =ffff88804c6967ff R10=ffffed10098d2cff R11=0000000000000001 R12=ffff88804c694ec0 R13=0000000000001940 R14=ffff88804c694ec0 R15=00000000003d0f00 RIP=ffffffff83e87f72 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557cd6d400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2db21000 CR3=000000001743a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f83a7ec37c000007f83a7ec37c8 XMM02=00007f83a7ec37e000007f83a7ec37c0 XMM03=00007f83a7ec37c800007f83a7ec37c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e9701 RDI=ffffffff879fa240 RBP=ffffffff879fa200 RSP=ffff8880496f72a0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000063 R13=0000000000000063 R14=ffffffff879fa200 R15=dffffc0000000000 RIP=ffffffff822e9758 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007feea58c1700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f69f5ac38c0 CR3=000000004b82c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000ff0000 XMM01=6a6e695f31313230385f7a7973006273 XMM02=000000000000000000ffffffff000000 XMM03=00007feea84327c800007feea84327c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000