04.788734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2404.793113] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2404.794880] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2404.796549] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2404.798159] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2404.799762] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2404.801377] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:17:07 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x13, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) 06:17:07 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e3b2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) rmdir(&(0x7f0000000280)='./file0\x00') r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:17:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 21) [ 2404.882263] FAULT_INJECTION: forcing a failure. [ 2404.882263] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.884885] CPU: 0 PID: 16317 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2404.886439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2404.888353] Call Trace: [ 2404.888948] dump_stack+0x107/0x167 [ 2404.889772] should_fail.cold+0x5/0xa [ 2404.890634] ? kvmalloc_node+0x119/0x170 [ 2404.891553] should_failslab+0x5/0x20 [ 2404.892425] __kmalloc_node+0x76/0x420 [ 2404.893322] kvmalloc_node+0x119/0x170 [ 2404.894333] alloc_fdtable+0xd3/0x280 [ 2404.895320] dup_fd+0x92e/0xf40 [ 2404.896100] copy_process+0x197c/0x78b0 [ 2404.897024] ? __lockdep_reset_lock+0x180/0x180 [ 2404.898103] ? mark_lock+0xf5/0x2df0 [ 2404.898962] ? __cleanup_sighand+0xb0/0xb0 [ 2404.899929] ? _copy_from_user+0xfb/0x1b0 [ 2404.900886] kernel_clone+0xe7/0x980 [ 2404.901723] ? __lockdep_reset_lock+0x180/0x180 [ 2404.902776] ? create_io_thread+0xf0/0xf0 [ 2404.903718] ? ksys_write+0x21a/0x260 [ 2404.904576] ? lock_downgrade+0x6d0/0x6d0 [ 2404.905509] __do_sys_clone3+0x1e5/0x320 [ 2404.906424] ? __do_sys_clone+0x110/0x110 [ 2404.907372] ? rcu_read_lock_any_held+0x75/0xa0 [ 2404.908425] ? vfs_write+0x354/0xb10 [ 2404.909258] ? fput_many+0x2f/0x1a0 [ 2404.910082] ? ksys_write+0x1a9/0x260 [ 2404.910938] ? __ia32_sys_read+0xb0/0xb0 [ 2404.911863] do_syscall_64+0x33/0x40 [ 2404.912710] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2404.913858] RIP: 0033:0x7f2b50818b19 [ 2404.914694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2404.918846] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2404.920563] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2404.922172] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2404.923772] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2404.925389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2404.926987] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2404.929291] netlink: 'syz-executor.6': attribute type 19 has an invalid length. [ 2404.936323] netlink: 'syz-executor.6': attribute type 19 has an invalid length. 06:17:23 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000004ac0)='ns/cgroup\x00') r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x1, 0x1, 0xa}, 0x18) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x105200, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(r2, r3) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(r5, r6) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) ioctl$NS_GET_OWNER_UID(r6, 0xb704, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xffffff80, 0x7, 0x1, 0xffffffff, 0x48d5}) 06:17:23 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xd0004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x2e75, &(0x7f0000000400)={0x0, 0x4170, 0x1, 0x3, 0x2f1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000640)=@IORING_OP_STATX={0x15, 0xfad7286234233be9, 0x0, 0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000600)='./file0\x00', 0x1, 0x100, 0x1, {0x0, r4}}, 0x10000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfdef) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x1ea) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000680)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r6, 0x0, r7, 0x2, 0x0, 0x1, {0x0, r8}}, 0x3ff) pwrite64(r7, &(0x7f00000001c0)="c1fce0ee05e197e8e495d3c1d57e08a03489ff609063fe60d910e1a1e03f1d098d232cc25b76a01543945a1f4b736c0aee0692835421290adc7dc8ffccc943268ff68678b6a351d416a4e403224f49173eebbe02352bf6ec67d55c60d1358aa7b433c0ccd49a0234bb6cc61807bb56b7b2f6558ac3305e5694dda442df2c17fb4119af01e5e2a5f937c9141167c4759c56778ae3c18c526d57abfe751013d1122f52c1e1ab03adb5d72463f4074f414fbf5844b492577e4b506486493182c74f7242068b146c", 0xc6, 0x180) ftruncate(r6, 0x2) write$tun(r6, &(0x7f0000000380)={@val={0x0, 0x1c}, @val={0x0, 0x0, 0x5, 0xbd, 0x2, 0x7}, @x25={0x0, 0x7, 0x17, "5fc0bb600bf41603d7474c3e8c5acf3e25aa620b6ba0fda127397e0edc0a563f65db0c23ef6e0a59ccb17f45118fc26dc1f26e065f3d456c62fb7dd27ab7"}}, 0x4f) waitid(0x0, r5, &(0x7f0000000040), 0x2, &(0x7f00000000c0)) [ 2421.484978] FAULT_INJECTION: forcing a failure. [ 2421.484978] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.487755] CPU: 0 PID: 16333 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2421.489350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2421.491271] Call Trace: [ 2421.491880] dump_stack+0x107/0x167 [ 2421.492762] should_fail.cold+0x5/0xa [ 2421.493324] FAULT_INJECTION: forcing a failure. [ 2421.493324] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.493642] ? create_object.isra.0+0x3a/0xa20 [ 2421.497010] should_failslab+0x5/0x20 [ 2421.497873] kmem_cache_alloc+0x5b/0x310 [ 2421.498796] create_object.isra.0+0x3a/0xa20 [ 2421.499792] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2421.500965] __kmalloc_node+0x1ae/0x420 [ 2421.501867] kvmalloc_node+0x119/0x170 [ 2421.502753] alloc_fdtable+0xd3/0x280 [ 2421.503613] dup_fd+0x92e/0xf40 [ 2421.504382] copy_process+0x197c/0x78b0 [ 2421.505295] ? __lockdep_reset_lock+0x180/0x180 [ 2421.506346] ? mark_lock+0xf5/0x2df0 [ 2421.507210] ? __cleanup_sighand+0xb0/0xb0 [ 2421.508190] ? _copy_from_user+0xfb/0x1b0 [ 2421.509137] kernel_clone+0xe7/0x980 [ 2421.509979] ? __lockdep_reset_lock+0x180/0x180 [ 2421.511030] ? create_io_thread+0xf0/0xf0 [ 2421.511984] ? ksys_write+0x21a/0x260 [ 2421.512860] ? lock_downgrade+0x6d0/0x6d0 [ 2421.513802] __do_sys_clone3+0x1e5/0x320 [ 2421.514721] ? __do_sys_clone+0x110/0x110 [ 2421.515685] ? rcu_read_lock_any_held+0x75/0xa0 [ 2421.516752] ? vfs_write+0x354/0xb10 [ 2421.517595] ? fput_many+0x2f/0x1a0 [ 2421.518416] ? ksys_write+0x1a9/0x260 [ 2421.519278] ? __ia32_sys_read+0xb0/0xb0 [ 2421.520219] do_syscall_64+0x33/0x40 [ 2421.521060] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2421.522217] RIP: 0033:0x7f2b50818b19 [ 2421.523051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2421.527242] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2421.528969] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2421.530582] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2421.532190] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2421.533811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2421.535426] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2421.537094] CPU: 1 PID: 16339 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2421.538616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2421.540375] Call Trace: [ 2421.540936] dump_stack+0x107/0x167 [ 2421.541712] should_fail.cold+0x5/0xa [ 2421.542516] ? create_object.isra.0+0x3a/0xa20 [ 2421.543516] should_failslab+0x5/0x20 [ 2421.544339] kmem_cache_alloc+0x5b/0x310 [ 2421.545196] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2421.546252] ? trace_hardirqs_on+0x5b/0x180 [ 2421.547163] create_object.isra.0+0x3a/0xa20 [ 2421.548073] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2421.549144] kmem_cache_alloc_trace+0x151/0x320 [ 2421.550163] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2421.551275] io_uring_setup+0x14f6/0x2980 [ 2421.552180] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2421.553233] ? wait_for_completion_io+0x270/0x270 [ 2421.554278] do_syscall_64+0x33/0x40 [ 2421.555070] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2421.556137] RIP: 0033:0x7f8bb9614b19 [ 2421.556943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2421.560811] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2421.562674] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2421.564504] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2421.565986] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2421.567491] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2421.569027] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:17:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:17:23 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 36) 06:17:23 executing program 3: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x5, 0x73f15c6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe6, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) fcntl$lock(r3, 0x25, &(0x7f0000000600)={0x1, 0x0, 0x7fffffff}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) fcntl$lock(r0, 0x25, &(0x7f0000000600)={0x1, 0x0, 0x7fffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b253f3edb9fa88d64001fc5193ffe3670cf35a64f656", @ANYRES16=r5, @ANYBLOB="000127bd7000fbdbdf254a00000008000300", @ANYRES32=r6, @ANYBLOB="0c009900fb000000410000001c0075800c000e8007000a0013fee0000400010004000600040001000800758004000700"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000802) r7 = memfd_create(&(0x7f0000000140)='\x13\x97\x02\xd8 \xea\xc8\xf3\xad\xd9\x02\rp*\xb3\x9a\xbc\xc1\xb0\xba\x1eo\xfd1\xa3\x8e\x1c\x03Iq\xdcf{\xd8\xc1e\xcd\xc3`\x9b\x8b\xc9\xe2\xd2\xd5\xb9\xdd\x85w\xed\x92\xbf\xb6\x1c\xa7\x8b\x1f.\xd1\x16\xeb\f#\x83\xce\xa3\xcb`\xdb\\\x01\v!\xbb\x1aR\x11/\xef\xb0\xecL\xd3\x99{\x81\xc6N9\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r8, r7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08005000ac1414aaae97fdb24ca9de31be99ae2a10986ed92afec70a4b150b81c26948f99c199708ce640f28590ec90b22597a15f0bf1dcb9d65d7f9eb7057f061ca97105136db6e66e08d9b2f86ba0678ff086bd90c83fbf0e9d7ed73d0fc2a7707a5aa6c426d8db2b28f4193709c25b299bbfd6e3d49de58feb1b3a0c8515fee8fc0cd456f8a307caed703b5bf1d6f95974c0b079825680cc3fc850d9176449c04007a0008001b00040000005501498008008400", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08806700", @ANYRES32=0x0, @ANYBLOB="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"], 0x25fc}, 0x1, 0x0, 0x0, 0x840}, 0x24000001) 06:17:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 22) 06:17:23 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x124) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:17:24 executing program 5: r0 = syz_io_uring_setup(0x17f9, &(0x7f0000000000)={0x0, 0x0, 0x12}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2be5, &(0x7f0000000180)={0x0, 0xfe3d, 0x4, 0x0, 0x2f3, 0x0, r0}, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x8, 0x10001, 0x0, 0x1, 0x2, 0x0, {0x0, r6}}, 0xec1f) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x1) 06:17:24 executing program 6: ftruncate(0xffffffffffffffff, 0xffff) creat(0x0, 0x0) syz_open_procfs(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x28, &(0x7f00000002c0)={0x13, 0x80000001, 0x28b6}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) getpeername(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socket$inet_icmp(0x2, 0x2, 0x1) creat(&(0x7f00000001c0)='./file0\x00', 0x1a4) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40001, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000fffffdfd020100773bbc733a88c3ee37e285631eea24000000007efa94efee2b82000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000fcff0000000000000000000000000000000000000000000000000000000000000000005043f36bfa68c4dd00000000000000000000000000000000000400000000fcffffff000000000005000000000000000000000000b39d26e187fbaa53dee100"/264]) openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0xd) creat(&(0x7f0000000240)='./file0\x00', 0x121) 06:17:24 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r2, &(0x7f0000019340)=""/102400, 0x19000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/95, 0x5f}], 0x1, &(0x7f00000004c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10040) syz_io_uring_setup(0x3a62, &(0x7f0000000ac0)={0x0, 0x50f1, 0x20, 0x2, 0x209, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000c40)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xa4}, 0x101) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) unshare(0x48020200) 06:17:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x2ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="89374c8f5628000000", @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000380)=@random='y', 0x1, 0x0) 06:17:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:17:24 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r1}}, 0x10001) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x80, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xd7f}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x0, 0x1000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='comm\x00') perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x29, 0x5, 0x7, 0xff, 0x0, 0x80000000, 0x86320, 0x5bacface96959cd9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000001c0), 0xa}, 0x1240a, 0x8, 0x4, 0x5, 0x0, 0x923f, 0x4, 0x0, 0x14d, 0x0, 0xffff}, 0xffffffffffffffff, 0x7, r0, 0x1) r3 = getpgid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6, 0x2, 0x3f, 0x6, 0x0, 0x4, 0x11000, 0x7, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5f8a8eec, 0x4, @perf_bp={&(0x7f0000000100)}, 0x10540, 0x1, 0xff, 0x4, 0x1000, 0xffffffc1, 0x1, 0x0, 0x3, 0x0, 0xf8}, r3, 0xb, 0xffffffffffffffff, 0xb) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r7, &(0x7f0000000440)=ANY=[@ANYRESOCT=r7]) writev(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000340)="576c1c99510aefde5738a28798d6a9ce1615ff7dae3faabaecc68411ddbf500304782f31afdae97d47cde2a17071f046819b8f6ee71c19fb3f079b9a6a12940305dbecb74ae6642c3580c2ac3d373b50156bbcc90ce436d65bac6d5485863b3c7ab456d3140aa6bbad703ce413faee151fa3a4faf3d01df40804db06fe2e0d4af17766c3215f0655cb820067eed576439d15f721e138484eb1a738afa52482089ec4b244a6a46d907157476436cc1a5979a45f5b3f581ccb34df3cb869230d552eed5a13d880e02859f43f75d0", 0xcd}], 0x2) sendfile(r4, r6, 0x0, 0xffff) fallocate(r5, 0x0, 0xce35, 0x8000) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000500)={{}, "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"}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 2421.806517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2421.808328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:17:24 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x6, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000005e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x9, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2421.871930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2421.873704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:17:24 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 37) [ 2421.984949] FAULT_INJECTION: forcing a failure. [ 2421.984949] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.987582] CPU: 0 PID: 16474 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2421.989163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2421.991056] Call Trace: [ 2421.991662] dump_stack+0x107/0x167 [ 2421.992510] should_fail.cold+0x5/0xa [ 2421.993384] ? create_object.isra.0+0x3a/0xa20 [ 2421.994428] should_failslab+0x5/0x20 [ 2421.995308] kmem_cache_alloc+0x5b/0x310 [ 2421.996244] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2421.997401] ? trace_hardirqs_on+0x5b/0x180 [ 2421.998386] create_object.isra.0+0x3a/0xa20 [ 2421.999376] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2422.000545] kmem_cache_alloc_trace+0x151/0x320 [ 2422.001624] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2422.002859] io_uring_setup+0x14f6/0x2980 [ 2422.003814] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2422.004965] ? wait_for_completion_io+0x270/0x270 [ 2422.006094] do_syscall_64+0x33/0x40 [ 2422.006945] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.008105] RIP: 0033:0x7f8bb9614b19 [ 2422.008962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.013171] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2422.014906] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2422.016541] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2422.018163] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2422.019784] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2422.021411] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:17:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 23) 06:17:39 executing program 6: sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x44800) r0 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x1079) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x64}}, './file0\x00'}) r3 = dup2(0xffffffffffffffff, r0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'macvtap0\x00'}) move_mount(0xffffffffffffffff, 0x0, r3, &(0x7f00000001c0)='./file0\x00', 0x66) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open_by_handle_at(r4, &(0x7f0000000000)=@ocfs2_parent={0x18, 0x2, {{0x3648}, {0x0, 0x2}}}, 0x3e9b82) 06:17:39 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r2, &(0x7f0000019340)=""/102400, 0x19000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/95, 0x5f}], 0x1, &(0x7f00000004c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10040) syz_io_uring_setup(0x3a62, &(0x7f0000000ac0)={0x0, 0x50f1, 0x20, 0x2, 0x209, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000c40)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xa4}, 0x101) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) unshare(0x48020200) 06:17:39 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 38) 06:17:39 executing program 1: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty, 0x2000}, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1080, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x40008, 0x0, 0x0, 0x0, 0x36f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fcntl$dupfd(r1, 0x0, r2) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x46e2, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb85}, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, 0x0, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) 06:17:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:17:39 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001680)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e37758ddfb291130a3828cf302ba03c8f90f8ffd2d583144004ec97", @ANYRES32, @ANYBLOB="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"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:17:39 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x1) dup2(r0, r1) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) syz_io_uring_setup(0x5c3d, &(0x7f0000000080)={0x0, 0x95be, 0x4, 0x0, 0x1a6, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) [ 2437.175667] FAULT_INJECTION: forcing a failure. [ 2437.175667] name failslab, interval 1, probability 0, space 0, times 0 [ 2437.178802] CPU: 0 PID: 16494 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2437.180715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2437.183002] Call Trace: [ 2437.183723] dump_stack+0x107/0x167 [ 2437.184742] should_fail.cold+0x5/0xa [ 2437.185768] ? kvmalloc_node+0x119/0x170 [ 2437.186868] should_failslab+0x5/0x20 [ 2437.187917] __kmalloc_node+0x76/0x420 [ 2437.188997] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2437.190405] kvmalloc_node+0x119/0x170 [ 2437.191477] alloc_fdtable+0x13f/0x280 [ 2437.192542] dup_fd+0x92e/0xf40 [ 2437.193481] copy_process+0x197c/0x78b0 [ 2437.194597] ? __lockdep_reset_lock+0x180/0x180 [ 2437.195856] ? mark_lock+0xf5/0x2df0 [ 2437.196919] ? __cleanup_sighand+0xb0/0xb0 [ 2437.198101] ? _copy_from_user+0xfb/0x1b0 [ 2437.199229] kernel_clone+0xe7/0x980 [ 2437.200262] ? __lockdep_reset_lock+0x180/0x180 [ 2437.201517] ? create_io_thread+0xf0/0xf0 [ 2437.202547] ? ksys_write+0x21a/0x260 [ 2437.203472] ? lock_downgrade+0x6d0/0x6d0 [ 2437.204487] __do_sys_clone3+0x1e5/0x320 [ 2437.205460] ? __do_sys_clone+0x110/0x110 [ 2437.206485] ? rcu_read_lock_any_held+0x75/0xa0 [ 2437.207611] ? vfs_write+0x354/0xb10 [ 2437.208523] ? fput_many+0x2f/0x1a0 [ 2437.209416] ? ksys_write+0x1a9/0x260 [ 2437.210350] ? __ia32_sys_read+0xb0/0xb0 [ 2437.211384] do_syscall_64+0x33/0x40 [ 2437.212295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2437.213578] RIP: 0033:0x7f2b50818b19 [ 2437.214470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2437.218983] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2437.220862] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2437.222616] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2437.224383] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2437.226153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2437.227929] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2437.238844] FAULT_INJECTION: forcing a failure. [ 2437.238844] name failslab, interval 1, probability 0, space 0, times 0 [ 2437.241862] CPU: 0 PID: 16500 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2437.243568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2437.245621] Call Trace: [ 2437.246267] dump_stack+0x107/0x167 [ 2437.247174] should_fail.cold+0x5/0xa [ 2437.248110] ? create_object.isra.0+0x3a/0xa20 [ 2437.249255] should_failslab+0x5/0x20 [ 2437.250211] kmem_cache_alloc+0x5b/0x310 [ 2437.251231] create_object.isra.0+0x3a/0xa20 [ 2437.252326] kmemleak_alloc_percpu+0xa0/0x100 [ 2437.253430] pcpu_alloc+0x4e2/0x1240 [ 2437.254350] ? io_async_queue_proc+0x80/0x80 [ 2437.255427] percpu_ref_init+0x31/0x3d0 [ 2437.256423] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2437.257739] io_uring_setup+0x14f6/0x2980 [ 2437.258769] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2437.260000] ? wait_for_completion_io+0x270/0x270 [ 2437.261220] do_syscall_64+0x33/0x40 [ 2437.262161] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2437.263411] RIP: 0033:0x7f8bb9614b19 [ 2437.264327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2437.268849] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2437.270714] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2437.272456] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2437.274197] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2437.275949] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2437.277721] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:17:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:17:39 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r2, &(0x7f0000019340)=""/102400, 0x19000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/95, 0x5f}], 0x1, &(0x7f00000004c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10040) syz_io_uring_setup(0x3a62, &(0x7f0000000ac0)={0x0, 0x50f1, 0x20, 0x2, 0x209, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000c40)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xa4}, 0x101) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) unshare(0x48020200) [ 2437.458008] FAULT_INJECTION: forcing a failure. [ 2437.458008] name failslab, interval 1, probability 0, space 0, times 0 [ 2437.459351] CPU: 1 PID: 16521 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2437.460138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2437.461092] Call Trace: [ 2437.461396] dump_stack+0x107/0x167 [ 2437.461810] should_fail.cold+0x5/0xa [ 2437.462242] ? create_object.isra.0+0x3a/0xa20 [ 2437.462762] should_failslab+0x5/0x20 [ 2437.463193] kmem_cache_alloc+0x5b/0x310 [ 2437.463652] create_object.isra.0+0x3a/0xa20 [ 2437.464149] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2437.464729] __kmalloc_node+0x1ae/0x420 [ 2437.465184] kvmalloc_node+0x119/0x170 [ 2437.465629] alloc_fdtable+0x13f/0x280 [ 2437.466066] dup_fd+0x92e/0xf40 [ 2437.466449] copy_process+0x197c/0x78b0 [ 2437.466905] ? __lockdep_reset_lock+0x180/0x180 [ 2437.467427] ? mark_lock+0xf5/0x2df0 [ 2437.467862] ? __cleanup_sighand+0xb0/0xb0 [ 2437.468358] ? _copy_from_user+0xfb/0x1b0 [ 2437.468831] kernel_clone+0xe7/0x980 [ 2437.469253] ? __lockdep_reset_lock+0x180/0x180 [ 2437.469777] ? create_io_thread+0xf0/0xf0 [ 2437.470259] ? ksys_write+0x21a/0x260 [ 2437.470695] ? lock_downgrade+0x6d0/0x6d0 [ 2437.471164] __do_sys_clone3+0x1e5/0x320 [ 2437.471621] ? __do_sys_clone+0x110/0x110 [ 2437.472104] ? rcu_read_lock_any_held+0x75/0xa0 [ 2437.472657] ? vfs_write+0x354/0xb10 [ 2437.473078] ? fput_many+0x2f/0x1a0 [ 2437.473491] ? ksys_write+0x1a9/0x260 [ 2437.473926] ? __ia32_sys_read+0xb0/0xb0 [ 2437.474396] do_syscall_64+0x33/0x40 [ 2437.474818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2437.475395] RIP: 0033:0x7f2b50818b19 [ 2437.475816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2437.477903] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2437.478763] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2437.479569] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2437.480379] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2437.481181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2437.481987] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:17:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 24) 06:17:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r3, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x1d4, r3, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x2a}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2163d54b61e06d1f9f78d632af1cf6f1a658cf5476a4c6b3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec748979c4dafe3c9475b5b0c534bdd4cab8da598fdbd7c9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "72c8b21916b647c37058a2d8572b1a7c829d01e7729a395a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ed448b99117610fa099351fbc24580e51eecd44e52472f8e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bc9fef3849653e3023d73cffb2d50b9ada1ec14a133d8c21"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "087beebe5a6bc28faa897c9b4eaf249a4fb6b13c76936c67"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ca7c5a3b39bd53fc81fd67fcc1e353568a57829f909e1d10"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x400c}, 0x4000844) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 06:17:39 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001e0001000000000000000400fe8800000000000000000000000000010000000000000000ac14140969030cbadd65cdf4a275c20e1d87bb000000000000000000000000000000000000000008000c0000000000"], 0x48}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r1, &(0x7f0000000080)=0x80, &(0x7f00000000c0)=@sco={0x1f, @fixed}}, 0x8) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000500)={0x128, 0x29, 0x1, {0x9648, [{{0x8, 0x4, 0x5}, 0x7, 0xb1, 0x7, './file0'}, {{0x0, 0x1, 0x1}, 0x2, 0x2, 0xd, './file0/file0'}, {{0x8, 0x4, 0x2}, 0x6, 0x80, 0x7, './file0'}, {{0x8, 0x0, 0x4}, 0x5, 0xb, 0x7, './file0'}, {{0x9, 0x1}, 0x6, 0x20, 0x7, './file0'}, {{0x80, 0x2, 0x7}, 0x10001, 0x7, 0x7, './file0'}, {{0x0, 0x0, 0x4}, 0xffffffff, 0xc8, 0x7, './file0'}, {{0x20, 0x4, 0x8}, 0x100, 0x1f, 0x7, './file0'}, {{0x4, 0x2, 0x3}, 0x1, 0x2, 0x7, './file1'}]}}, 0x128) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x101000, 0x0) memfd_create(&(0x7f0000000280)='\x00', 0x3) r2 = epoll_create1(0x0) r3 = epoll_create(0x3ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x8}, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x20000001}) [ 2437.502020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2437.528295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 06:17:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r3, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x1d4, r3, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x2a}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2163d54b61e06d1f9f78d632af1cf6f1a658cf5476a4c6b3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec748979c4dafe3c9475b5b0c534bdd4cab8da598fdbd7c9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "72c8b21916b647c37058a2d8572b1a7c829d01e7729a395a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ed448b99117610fa099351fbc24580e51eecd44e52472f8e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bc9fef3849653e3023d73cffb2d50b9ada1ec14a133d8c21"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "087beebe5a6bc28faa897c9b4eaf249a4fb6b13c76936c67"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ca7c5a3b39bd53fc81fd67fcc1e353568a57829f909e1d10"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x400c}, 0x4000844) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 06:17:54 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r2, &(0x7f0000019340)=""/102400, 0x19000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/95, 0x5f}], 0x1, &(0x7f00000004c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10040) syz_io_uring_setup(0x3a62, &(0x7f0000000ac0)={0x0, 0x50f1, 0x20, 0x2, 0x209, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000c40)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xa4}, 0x101) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) unshare(0x48020200) 06:17:54 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:17:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:17:54 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 39) 06:17:54 executing program 6: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r0}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x0, r4}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="8e053f46f4b6ce4f66341d2fc83ff91d9e9b4d42f4f91c6d807525b0fd94785ef463ea97f44a424c7eab7ea3ecebbc1190f5a6f1693e8b96b89eb71598cc20e771d31d4989ce4b9a87da95622afe969643b1daf1ef350934ae6b25c512d69e518c3afcde70b453d6f9863666c53bfdd00031d1470aa2e647bdd3a8bb766a1e445d2d842e9c80b09783823ee22cf620fccfd7c9c868e81a7dfb5488986ed9114c27e61cbbbeaa68dce75e47df29c18fdf34f5d979e433cd3511", 0xb9}], 0x1, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @loopback, @loopback}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0xa0}}], 0x1, 0x8010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x4, 0x7ff, 0x40, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7, 0x1, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r6, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x120}}, 0x0) 06:17:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 25) 06:17:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6100, 0xa8) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x141420, 0x20) r2 = geteuid() fchownat(r1, &(0x7f0000000080)='./file0\x00', r2, 0x0, 0x100) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r3 = openat(r1, &(0x7f00000000c0)='.\x00', 0x40001, 0x148) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001540)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@private1}}, &(0x7f0000001640)=0xe8) [ 2452.039292] FAULT_INJECTION: forcing a failure. [ 2452.039292] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.041673] CPU: 1 PID: 16549 Comm: syz-executor.0 Not tainted 5.10.238 #1 syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0/file0\x00', 0x7, 0x5, &(0x7f00000014c0)=[{&(0x7f0000000180)="37f6475f14815774f7fd6250363b36950ace908c742874cf6830ed22b222cdbb564f850137bcee3ed8c41a02801b36514edd1aa97ea54cdd17a872887584dafeb88acc93aec5ed240d2d1a615050c3693766d386c17361d58aadb2191d34c07d0ae2cdc09337744a64aa335b948fe0dd68c7933f458b4cd6f2a9892b6dc1f24bc290859e8f744195", 0x88, 0x3f}, {&(0x7f0000000240)="71dc48f7ad6c8f91437b94a776c03ddb2eea5b7c50eac28c3762bd11e8ca25f6684ab662e11983b8418495d9e54088913922650e1504054321ba8aed84d310f0e15ae52ea9d818d016fcb439942d3c15c184643b01dd4c40f4552557cba75f1b9aec530228d872d46150401664999b0d8c238bd551aba3c4d1639e51f712ef6c0725a1f1f3cc", 0x86, 0x100000000}, {&(0x7f0000000300)="07b8e6ca10161d963b37af6d5312767ce85bb2c7f0edbcaacf21fe3b052bd14cbde2dcb65ec2a8ba4e5608d93688fd525ac6041fb0a05e0f1deab813ce1386c4769cd6b6dda3ec939ba1529febeb0dc1f0edc771702ee1116d9ea7737478e0db31dfcb012c3694ef8b58c70d5345a36e712a1bdd017c3d0ece78b0d736d027502d2cf183d236ffb35d", 0x89, 0x20}, {&(0x7f00000003c0)="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", 0x1000, 0x8}, {&(0x7f00000013c0)="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", 0xfe}], 0x8018, &(0x7f0000001680)={[{@stripe={'stripe', 0x3d, 0x4}}, {@data_err_abort}], [{@euid_lt={'euid<', r4}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_type}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@uid_gt={'uid>', r2}}, {@subj_user}]}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000017c0)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000018c0)=0xe8) fstat(r3, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000001740)='./file0\x00', &(0x7f0000001780), 0x1000840, &(0x7f0000001980)={[{@xattr}, {@xattr}, {@name={'name', 0x3d, '/@$#$,@]%.:<&+[@^+.'}}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@cpuset_v2_mode}, {@clone_children}], [{@subj_role={'subj_role', 0x3d, 'fsmagic'}}, {@euid_gt={'euid>', r5}}, {@euid_eq={'euid', 0x3d, r6}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@seclabel}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x36, 0x33, 0x32, 0x39, 0x32, 0x65, 0x95], 0x2d, [0x66, 0x35, 0x64, 0x63], 0x2d, [0x38, 0x38, 0x31, 0x61], 0x2d, [0x32, 0x61, 0x35, 0x33], 0x2d, [0x37, 0x33, 0x37, 0x39, 0x39, 0x31, 0x30, 0x62]}}}, {@appraise}, {@subj_role={'subj_role', 0x3d, './&'}}]}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000001ac0), &(0x7f0000001b00)='system_u:object_r:cron_log_t:s0\x00', 0x20, 0x0) mount$9p_unix(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)='./file0/file0\x00', &(0x7f0000001bc0), 0x2, &(0x7f0000001c00)={'trans=unix,', {[{@version_9p2000}, {@cachetag={'cachetag', 0x3d, '/@$#$,@]%.:<&+[@^+.'}}, {@access_user}, {@access_client}], [{@audit}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000001c80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = openat(0xffffffffffffff9c, &(0x7f0000001ec0)='./file0/file1\x00', 0x60540, 0x1) recvmsg$unix(r8, &(0x7f0000002300)={&(0x7f0000001f40), 0x6e, &(0x7f0000002240)=[{&(0x7f0000001fc0)=""/76, 0x4c}, {&(0x7f0000002040)=""/47, 0x2f}, {&(0x7f0000002080)=""/185, 0xb9}, {&(0x7f0000002140)=""/237, 0xed}], 0x4, &(0x7f0000002280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x48}, 0x12002) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002440)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000002540)=0xe8) fsetxattr$system_posix_acl(r0, &(0x7f0000001f00)='system.posix_acl_access\x00', &(0x7f0000002580)={{}, {0x1, 0x4}, [{0x2, 0x6, r10}, {0x2, 0x0, r2}, {0x2, 0x1, r11}], {}, [{0x8, 0x2, r7}, {0x8, 0x2, r7}, {0x8, 0x3, r7}, {0x8, 0x9, r7}], {}, {0x20, 0x7}}, 0x5c, 0x2) syz_mount_image$nfs4(&(0x7f0000002600), &(0x7f0000002640)='./file0/file0\x00', 0x1000, 0x6, &(0x7f0000003980)=[{&(0x7f0000002680)="dbfc6858ff1f37eea6c55f6d59c3fcc5f8b69f12ee24f3f610959a0c1bc3853e500e2de30dc6c5a9f9803713f8dd25680f4e19d20d49ab9a4a8d8c1cf672eb7dcca48a567eafde9506065f27d40c9896f734df354332dee4396195c8251cd22bb1a0319eea2690c303701f68d13259279affa36c30554adf6dca864c96b3b6f99fe597b6551bcabc8906ccf7690a387ee25808b6c784512e349826a4a70abd00818e8b6349b62fcbc93be75d7780eaab0b7eba213fe3a6d0bf49b826a80f389d1dc32555bcd5d7fcad1cf84308778b4aeeffbc4db155eafcc6eafa5a36b30acaadf85cdd7b96de6ed2f789789bd33d98d6", 0xf1, 0x8b7}, {&(0x7f0000002780)="2e0b8b67e2d053a50dec37891f85cb8d8c1f197ed7c06442495de109a11f1ec43846471db7c530fd6da3c9e44c532b9ffa7315afb9f2a74800d383fe96f2a534e56c6b73a1b23dd710793c99f6963a8c0a14", 0x52, 0x1f}, {&(0x7f0000002800)="2ff9288392b326b91a9a84d2697b2ed80b4fbea743bea53ca321dc89127dea3f55ba13bc50cb56a9701ddfd8c0c1ae0ac37983b37e84249069453f01057d7c8986f63de3735164249ffd0d6b0971d983f40d72494b984f734d1b2a43f49553620431ff7c262898dac8034ac8d9be417994d9e69f1e4daba5aa8a524000fdebaf761b896ba4ef91dccf03693b35", 0x8d, 0x9d4}, {&(0x7f00000028c0)='u', 0x1}, {&(0x7f0000002900)="2bc5ff414c598f0b4c9c1ab0eefca11b6bea447f0219026bef9643544423421bd8838f7e7cfe3659128ce4ca86a3dd7b5415a43c3969788c5f0ad1e901e0bd647d45d0b6350d4b89e5a3be821bf6daf438d3c9711fe224cde6bd1d2cc859ef3a59481e82a0", 0x65, 0x10000}, {&(0x7f0000002980)="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", 0x1000, 0xffffffffffffffff}], 0x20000, &(0x7f0000003a40)={[{'cgroup\x00'}, {'\xc5'}]}) pwrite64(r9, &(0x7f0000003a80)="8c421ffc0f2a780423eac1556db59f8a5aa298c6ad30d772400874c41c612b6b5ed2aaa751f17649a48f7ffd0695ec38c1abaa4ff9aa21802dad8a43e3b8f59b8fc520caa88bf1a60321aa8fa4f6fa2d1314c4b06e6fe533a7525283f6e4c28248d8dd00ee7b287f2b3c8cf104ce5db9194d78f2442904c61633b65a1e8eb41ef57f525175639dbce8fd0ce11ac8fc464c795672282f5efbd48b18d744ccd17fa1f3893c112350f85cef0b1a6a69c33687b44111da09087499cd4ca1e168e97815b41a46764ab5fb5d1031eef956ea401b9a45941eee8b40222cf988684b405d2ee4d11097400cd891844029262d66094798cbe6", 0xf4, 0xdcf9) [ 2452.043124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2452.044634] Call Trace: [ 2452.045071] dump_stack+0x107/0x167 [ 2452.045677] should_fail.cold+0x5/0xa [ 2452.046313] ? copy_fs_struct+0x45/0x340 [ 2452.046982] should_failslab+0x5/0x20 [ 2452.047614] kmem_cache_alloc+0x5b/0x310 [ 2452.048281] copy_fs_struct+0x45/0x340 [ 2452.048933] copy_process+0x34b1/0x78b0 [ 2452.049662] ? __lockdep_reset_lock+0x180/0x180 [ 2452.050628] ? mark_lock+0xf5/0x2df0 [ 2452.051440] ? __cleanup_sighand+0xb0/0xb0 [ 2452.052358] ? _copy_from_user+0xfb/0x1b0 [ 2452.053279] kernel_clone+0xe7/0x980 [ 2452.054077] ? __lockdep_reset_lock+0x180/0x180 [ 2452.055045] ? create_io_thread+0xf0/0xf0 [ 2452.055961] ? ksys_write+0x21a/0x260 [ 2452.056734] ? lock_downgrade+0x6d0/0x6d0 [ 2452.057579] __do_sys_clone3+0x1e5/0x320 [ 2452.058376] ? __do_sys_clone+0x110/0x110 [ 2452.059079] ? rcu_read_lock_any_held+0x75/0xa0 [ 2452.059840] ? vfs_write+0x354/0xb10 [ 2452.060467] ? fput_many+0x2f/0x1a0 [ 2452.061074] ? ksys_write+0x1a9/0x260 [ 2452.061706] ? __ia32_sys_read+0xb0/0xb0 [ 2452.062390] do_syscall_64+0x33/0x40 [ 2452.062999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2452.063849] RIP: 0033:0x7f2b50818b19 [ 2452.064479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.067508] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2452.068778] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2452.069967] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2452.071152] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2452.072350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2452.073547] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2452.076888] FAULT_INJECTION: forcing a failure. [ 2452.076888] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.078788] CPU: 1 PID: 16559 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2452.079949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2452.081341] Call Trace: [ 2452.081779] dump_stack+0x107/0x167 [ 2452.082401] should_fail.cold+0x5/0xa [ 2452.083041] ? create_object.isra.0+0x3a/0xa20 [ 2452.083806] should_failslab+0x5/0x20 [ 2452.084446] kmem_cache_alloc+0x5b/0x310 [ 2452.085143] create_object.isra.0+0x3a/0xa20 [ 2452.085878] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2452.086721] kmem_cache_alloc_trace+0x151/0x320 [ 2452.087508] ? io_async_queue_proc+0x80/0x80 [ 2452.088246] percpu_ref_init+0xd8/0x3d0 [ 2452.088916] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2452.089817] io_uring_setup+0x14f6/0x2980 [ 2452.090519] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2452.091355] ? wait_for_completion_io+0x270/0x270 [ 2452.092189] do_syscall_64+0x33/0x40 [ 2452.092823] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2452.093685] RIP: 0033:0x7f8bb9614b19 [ 2452.094316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.097477] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2452.098782] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2452.100010] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2452.101250] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2452.102465] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2452.103680] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2452.115886] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2452.122622] loop5: detected capacity change from 0 to 135266304 [ 2452.141468] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2452.143374] CPU: 1 PID: 16552 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2452.144580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2452.146002] Call Trace: [ 2452.146475] dump_stack+0x107/0x167 [ 2452.147105] sysfs_warn_dup.cold+0x1c/0x29 [ 2452.147847] sysfs_do_create_link_sd+0x122/0x140 [ 2452.148677] sysfs_create_link+0x5f/0xc0 [ 2452.149383] device_add+0x703/0x1c50 [ 2452.150036] ? devlink_add_symlinks+0x970/0x970 [ 2452.150846] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2452.151754] wiphy_register+0x1da6/0x2850 [ 2452.152496] ? wiphy_unregister+0xb90/0xb90 [ 2452.153260] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2452.154186] ieee80211_register_hw+0x23c5/0x38b0 [ 2452.155017] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2452.155845] ? net_generic+0xdb/0x2b0 [ 2452.156513] ? lockdep_init_map_type+0x2c7/0x780 [ 2452.157334] ? memset+0x20/0x50 [ 2452.157902] ? __hrtimer_init+0x12c/0x270 [ 2452.158621] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2452.159492] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2452.160290] ? hwsim_new_radio_nl+0x967/0x1080 [ 2452.161081] ? memcpy+0x39/0x60 [ 2452.161656] hwsim_new_radio_nl+0x991/0x1080 [ 2452.162428] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2452.163338] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2452.164482] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2452.165618] genl_family_rcv_msg_doit+0x22d/0x330 [ 2452.166462] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2452.167597] ? cap_capable+0x1cd/0x230 [ 2452.168277] ? ns_capable+0xe2/0x110 [ 2452.168922] genl_rcv_msg+0x36a/0x5a0 [ 2452.169585] ? genl_get_cmd+0x480/0x480 [ 2452.170272] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2452.171161] ? lock_release+0x680/0x680 [ 2452.171845] ? __lockdep_reset_lock+0x180/0x180 [ 2452.172661] netlink_rcv_skb+0x14b/0x430 [ 2452.173354] ? genl_get_cmd+0x480/0x480 [ 2452.174036] ? netlink_ack+0xab0/0xab0 [ 2452.174726] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2452.175514] ? is_vmalloc_addr+0x7b/0xb0 [ 2452.176211] genl_rcv+0x24/0x40 [ 2452.176795] netlink_unicast+0x54e/0x800 [ 2452.177495] ? netlink_attachskb+0x870/0x870 [ 2452.178260] netlink_sendmsg+0x90f/0xe00 [ 2452.178961] ? netlink_unicast+0x800/0x800 [ 2452.179701] ? netlink_unicast+0x800/0x800 [ 2452.180430] __sock_sendmsg+0x154/0x190 [ 2452.181131] ____sys_sendmsg+0x70d/0x870 [ 2452.181830] ? sock_write_iter+0x3d0/0x3d0 [ 2452.182555] ? do_recvmmsg+0x6d0/0x6d0 [ 2452.183236] ? __lockdep_reset_lock+0x180/0x180 [ 2452.184041] ___sys_sendmsg+0xf3/0x170 [ 2452.184723] ? sendmsg_copy_msghdr+0x160/0x160 [ 2452.185516] ? __fget_files+0x2cf/0x520 [ 2452.186200] ? lock_downgrade+0x6d0/0x6d0 [ 2452.186913] ? __lockdep_reset_lock+0x180/0x180 [ 2452.187723] ? futex_exit_release+0x220/0x220 [ 2452.188516] ? __fget_files+0x2f8/0x520 [ 2452.189210] ? __fget_light+0xea/0x290 [ 2452.189887] __sys_sendmsg+0xe5/0x1b0 [ 2452.190540] ? __sys_sendmsg_sock+0x40/0x40 [ 2452.191282] ? __do_sys_futex+0x2bb/0x480 [ 2452.192014] do_syscall_64+0x33/0x40 [ 2452.192662] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2452.193537] RIP: 0033:0x7fc157d92b19 [ 2452.194174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.197344] RSP: 002b:00007fc155308188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 06:17:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 26) [ 2452.198649] RAX: ffffffffffffffda RBX: 00007fc157ea5f60 RCX: 00007fc157d92b19 [ 2452.200050] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 2452.201306] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2452.202498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2452.203684] R13: 00007fff9c3d972f R14: 00007fc155308300 R15: 0000000000022000 [ 2452.208544] loop5: detected capacity change from 0 to 8388096 06:17:54 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 40) 06:17:54 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r2, &(0x7f0000019340)=""/102400, 0x19000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/95, 0x5f}], 0x1, &(0x7f00000004c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10040) syz_io_uring_setup(0x3a62, &(0x7f0000000ac0)={0x0, 0x50f1, 0x20, 0x2, 0x209, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000c40)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xa4}, 0x101) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 2452.236876] loop5: detected capacity change from 0 to 135266304 06:17:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2452.267538] FAULT_INJECTION: forcing a failure. [ 2452.267538] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.269556] CPU: 1 PID: 16581 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2452.270739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2452.272193] Call Trace: [ 2452.272667] dump_stack+0x107/0x167 [ 2452.273307] should_fail.cold+0x5/0xa [ 2452.273974] ? create_object.isra.0+0x3a/0xa20 [ 2452.274777] should_failslab+0x5/0x20 [ 2452.275441] kmem_cache_alloc+0x5b/0x310 [ 2452.276156] create_object.isra.0+0x3a/0xa20 [ 2452.276936] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2452.277835] kmem_cache_alloc+0x159/0x310 [ 2452.278570] copy_fs_struct+0x45/0x340 [ 2452.279258] copy_process+0x34b1/0x78b0 [ 2452.279958] ? __lockdep_reset_lock+0x180/0x180 [ 2452.280777] ? mark_lock+0xf5/0x2df0 [ 2452.281443] ? __cleanup_sighand+0xb0/0xb0 [ 2452.282197] ? _copy_from_user+0xfb/0x1b0 [ 2452.282924] kernel_clone+0xe7/0x980 [ 2452.283573] ? __lockdep_reset_lock+0x180/0x180 [ 2452.284386] ? create_io_thread+0xf0/0xf0 [ 2452.285124] ? ksys_write+0x21a/0x260 [ 2452.285788] ? lock_downgrade+0x6d0/0x6d0 [ 2452.286516] __do_sys_clone3+0x1e5/0x320 [ 2452.287222] ? __do_sys_clone+0x110/0x110 [ 2452.287960] ? rcu_read_lock_any_held+0x75/0xa0 [ 2452.288777] ? vfs_write+0x354/0xb10 [ 2452.289429] ? fput_many+0x2f/0x1a0 [ 2452.290062] ? ksys_write+0x1a9/0x260 [ 2452.290729] ? __ia32_sys_read+0xb0/0xb0 [ 2452.291448] do_syscall_64+0x33/0x40 [ 2452.292098] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2452.292997] RIP: 0033:0x7f2b50818b19 [ 2452.293638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.296808] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2452.298096] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2452.299304] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2452.300514] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2452.301728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2452.302914] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2452.304460] loop5: detected capacity change from 0 to 8388096 06:17:54 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000130}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x4, 0x7, 0x4, 0x0, 0x5, 0x6050, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1082, 0x1, 0xfffffffe, 0x0, 0x3, 0x7f, 0x2, 0x0, 0x7fffffff, 0x0, 0x1000}, 0x0, 0x2, r0, 0xf) 06:17:54 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x9, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:17:54 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000c40)='tmpfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r1, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c000000008071621e7708b95f000000000400020014002380809801a7b0c7dba094753875c7625054c0000080d27896176b6eeade62d836e053289e95ed9e432a7e9bb57bcc2987b74e601f194a9dadfa7d29175073c0", @ANYRES32=r0, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80) sendfile(r0, r2, &(0x7f00000001c0)=0x7, 0x4) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000140)={0x0, 0x100000000}) [ 2452.402037] FAULT_INJECTION: forcing a failure. [ 2452.402037] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.403446] CPU: 0 PID: 16592 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2452.404289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2452.405307] Call Trace: [ 2452.405634] dump_stack+0x107/0x167 [ 2452.406077] should_fail.cold+0x5/0xa [ 2452.406542] ? __d_alloc+0x2a/0x990 [ 2452.407003] should_failslab+0x5/0x20 [ 2452.407470] kmem_cache_alloc+0x5b/0x310 [ 2452.407969] __d_alloc+0x2a/0x990 [ 2452.408393] ? find_held_lock+0x2c/0x110 [ 2452.408894] d_alloc_pseudo+0x19/0x70 [ 2452.409357] alloc_file_pseudo+0xce/0x250 [ 2452.409859] ? trace_hardirqs_on+0x5b/0x180 [ 2452.410381] ? alloc_file+0x5a0/0x5a0 [ 2452.410858] anon_inode_getfile+0xc8/0x1f0 [ 2452.411376] io_uring_setup+0x138b/0x2980 [ 2452.411901] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2452.412529] ? wait_for_completion_io+0x270/0x270 [ 2452.413135] do_syscall_64+0x33/0x40 [ 2452.413589] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2452.414213] RIP: 0033:0x7f8bb9614b19 [ 2452.414665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.416908] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2452.417829] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2452.418704] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2452.419581] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2452.420445] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2452.421317] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:17:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 27) [ 2452.455753] loop1: detected capacity change from 0 to 33559552 [ 2452.476462] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2452.480017] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2452.481155] CPU: 0 PID: 16594 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2452.482017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2452.483070] Call Trace: [ 2452.483418] dump_stack+0x107/0x167 [ 2452.483883] sysfs_warn_dup.cold+0x1c/0x29 [ 2452.484404] sysfs_do_create_link_sd+0x122/0x140 [ 2452.484986] sysfs_create_link+0x5f/0xc0 [ 2452.485480] device_add+0x703/0x1c50 [ 2452.485933] ? devlink_add_symlinks+0x970/0x970 [ 2452.486503] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2452.487142] wiphy_register+0x1da6/0x2850 [ 2452.487654] ? wiphy_unregister+0xb90/0xb90 [ 2452.488187] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2452.488843] ieee80211_register_hw+0x23c5/0x38b0 [ 2452.489426] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2452.490006] ? net_generic+0xdb/0x2b0 [ 2452.490470] ? lockdep_init_map_type+0x2c7/0x780 [ 2452.491045] ? memset+0x20/0x50 [ 2452.491446] ? __hrtimer_init+0x12c/0x270 [ 2452.491960] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2452.492590] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2452.493153] ? hwsim_new_radio_nl+0x967/0x1080 [ 2452.493704] ? memcpy+0x39/0x60 [ 2452.494107] hwsim_new_radio_nl+0x991/0x1080 [ 2452.494648] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2452.495311] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2452.496138] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2452.496966] genl_family_rcv_msg_doit+0x22d/0x330 [ 2452.497575] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2452.498414] ? cap_capable+0x1cd/0x230 [ 2452.498912] ? ns_capable+0xe2/0x110 [ 2452.499386] genl_rcv_msg+0x36a/0x5a0 [ 2452.499868] ? genl_get_cmd+0x480/0x480 [ 2452.500373] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2452.501043] ? lock_release+0x680/0x680 [ 2452.501541] ? __lockdep_reset_lock+0x180/0x180 [ 2452.502125] netlink_rcv_skb+0x14b/0x430 [ 2452.502649] ? genl_get_cmd+0x480/0x480 [ 2452.503148] ? netlink_ack+0xab0/0xab0 [ 2452.503644] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2452.504223] ? is_vmalloc_addr+0x7b/0xb0 [ 2452.504752] genl_rcv+0x24/0x40 [ 2452.505176] netlink_unicast+0x54e/0x800 [ 2452.505691] ? netlink_attachskb+0x870/0x870 [ 2452.506259] netlink_sendmsg+0x90f/0xe00 [ 2452.506776] ? netlink_unicast+0x800/0x800 [ 2452.507325] ? netlink_unicast+0x800/0x800 [ 2452.507858] __sock_sendmsg+0x154/0x190 [ 2452.508359] ____sys_sendmsg+0x70d/0x870 [ 2452.508879] ? sock_write_iter+0x3d0/0x3d0 [ 2452.509414] ? do_recvmmsg+0x6d0/0x6d0 [ 2452.509911] ? __lockdep_reset_lock+0x180/0x180 [ 2452.510521] ___sys_sendmsg+0xf3/0x170 [ 2452.511015] ? sendmsg_copy_msghdr+0x160/0x160 [ 2452.511607] ? __fget_files+0x2cf/0x520 [ 2452.512112] ? lock_downgrade+0x6d0/0x6d0 [ 2452.512647] ? __lockdep_reset_lock+0x180/0x180 [ 2452.513242] ? futex_exit_release+0x220/0x220 [ 2452.513805] ? __fget_files+0x2f8/0x520 [ 2452.514312] ? __fget_light+0xea/0x290 [ 2452.514812] __sys_sendmsg+0xe5/0x1b0 [ 2452.515293] ? __sys_sendmsg_sock+0x40/0x40 [ 2452.515843] ? __do_sys_futex+0x2bb/0x480 [ 2452.516389] do_syscall_64+0x33/0x40 [ 2452.516868] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2452.517513] RIP: 0033:0x7f277f764b19 [ 2452.517983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.520290] RSP: 002b:00007f277ccda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2452.521256] RAX: ffffffffffffffda RBX: 00007f277f877f60 RCX: 00007f277f764b19 [ 2452.522153] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 2452.523043] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2452.523940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2452.524838] R13: 00007fff5bc6ce3f R14: 00007f277ccda300 R15: 0000000000022000 06:17:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f800002000400000eb4e408f4c9170db", 0x25}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/5) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) r1 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, 0x0, r0, r1, 0x0, 0x100, 0x3}, 0x0, 0x0, 0x7, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 0x3, 0x0, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1}, 0x7) [ 2452.628705] FAULT_INJECTION: forcing a failure. [ 2452.628705] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.630257] CPU: 0 PID: 16607 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2452.631122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2452.632155] Call Trace: [ 2452.632503] dump_stack+0x107/0x167 [ 2452.632963] should_fail.cold+0x5/0xa [ 2452.633446] ? copy_process+0x1ae7/0x78b0 [ 2452.633975] should_failslab+0x5/0x20 [ 2452.634457] kmem_cache_alloc+0x5b/0x310 [ 2452.634962] ? _raw_spin_unlock+0x1a/0x30 [ 2452.635489] copy_process+0x1ae7/0x78b0 [ 2452.635996] ? __lockdep_reset_lock+0x180/0x180 [ 2452.636602] ? mark_lock+0xf5/0x2df0 [ 2452.637082] ? __cleanup_sighand+0xb0/0xb0 [ 2452.637629] ? _copy_from_user+0xfb/0x1b0 [ 2452.638152] kernel_clone+0xe7/0x980 [ 2452.638624] ? __lockdep_reset_lock+0x180/0x180 [ 2452.639208] ? create_io_thread+0xf0/0xf0 [ 2452.639736] ? ksys_write+0x21a/0x260 [ 2452.640216] ? lock_downgrade+0x6d0/0x6d0 [ 2452.640762] __do_sys_clone3+0x1e5/0x320 [ 2452.641273] ? __do_sys_clone+0x110/0x110 [ 2452.641808] ? rcu_read_lock_any_held+0x75/0xa0 [ 2452.642401] ? vfs_write+0x354/0xb10 [ 2452.642880] ? fput_many+0x2f/0x1a0 [ 2452.643340] ? ksys_write+0x1a9/0x260 [ 2452.643815] ? __ia32_sys_read+0xb0/0xb0 [ 2452.644331] do_syscall_64+0x33/0x40 [ 2452.644810] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2452.645461] RIP: 0033:0x7f2b50818b19 [ 2452.645930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.648236] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2452.649201] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2452.650100] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2452.650996] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2452.651901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2452.652814] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:18:08 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 41) 06:18:08 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x4000000, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0xad03b409d26b9c8b, &(0x7f0000000140)=0x8d, 0x9, 0x1) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000014c0)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d9c8c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a351e9860bdc3941e59067d9b4ba52c2e261690ca72aeeb6ae9bb5d52bc9679b84e3775886ac9dc4863b80e71d26cc995371950f8c838c0d64552f259e502a0894a529e57d860c0fd1c9f29a153c62a3acb57060dbb08dfea852ac560d8d3307483609514d91c6e133e16db", @ANYRES32, @ANYBLOB="09000000000000002e2f2baab0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:18:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 28) 06:18:08 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/95, 0x5f}], 0x1, &(0x7f00000004c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10040) syz_io_uring_setup(0x3a62, &(0x7f0000000ac0)={0x0, 0x50f1, 0x20, 0x2, 0x209, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000c40)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xa4}, 0x101) 06:18:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:18:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f00000001c0)="2000000080000000060000006a0000000f0000001c0000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000000c52600000001000000000000000b000000000172165ee2384adf8459b4", 0x66, 0x400}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="51450966ece58b8ff8a99f25d16b2624d1a80e7870dbb0e38ac394177f88fa08deb86a"]) 06:18:08 executing program 6: syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{0x0, 0x0, 0xf4b2}]) r0 = getuid() syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x58, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="a6005bd6c779380c912876e35dd5fb218d81f739e5d4bf6b198a5d32b98663054a316f89fb9b4468524b36f014ca3f627d975e4aa1342c0cc5472906ad942eccb4a2cedf0349e20ed7b9b1690de4444d41baa9304dbe8ae60a54cd36f32574ba7d88", 0x62, 0x5}], 0x2054, &(0x7f0000000140)={[{}], [{@subj_type={'subj_type', 0x3d, ']\\'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, r0}}]}) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:18:08 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) inotify_init1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r0, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) r1 = getegid() setresgid(r1, r1, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x51}, 0x4002) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) [ 2466.290886] FAULT_INJECTION: forcing a failure. [ 2466.290886] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.293088] FAULT_INJECTION: forcing a failure. [ 2466.293088] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.293398] CPU: 1 PID: 16630 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2466.297608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2466.299406] Call Trace: [ 2466.299991] dump_stack+0x107/0x167 [ 2466.300817] should_fail.cold+0x5/0xa [ 2466.301651] ? create_object.isra.0+0x3a/0xa20 [ 2466.302698] should_failslab+0x5/0x20 [ 2466.303558] kmem_cache_alloc+0x5b/0x310 [ 2466.304478] create_object.isra.0+0x3a/0xa20 [ 2466.305453] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2466.306595] kmem_cache_alloc+0x159/0x310 [ 2466.307535] __d_alloc+0x2a/0x990 [ 2466.308321] ? find_held_lock+0x2c/0x110 [ 2466.309248] d_alloc_pseudo+0x19/0x70 [ 2466.310079] alloc_file_pseudo+0xce/0x250 [ 2466.310995] ? trace_hardirqs_on+0x5b/0x180 [ 2466.311950] ? alloc_file+0x5a0/0x5a0 [ 2466.312834] anon_inode_getfile+0xc8/0x1f0 [ 2466.313784] io_uring_setup+0x138b/0x2980 [ 2466.314701] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2466.315815] ? wait_for_completion_io+0x270/0x270 [ 2466.316909] do_syscall_64+0x33/0x40 [ 2466.317761] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2466.318925] RIP: 0033:0x7f8bb9614b19 [ 2466.319719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.323473] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2466.325035] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2466.326479] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2466.327984] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2466.329526] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2466.331092] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2466.332711] CPU: 0 PID: 16626 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2466.334459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2466.336496] Call Trace: [ 2466.337162] dump_stack+0x107/0x167 [ 2466.338053] should_fail.cold+0x5/0xa [ 2466.338985] ? create_object.isra.0+0x3a/0xa20 [ 2466.340106] should_failslab+0x5/0x20 [ 2466.341053] kmem_cache_alloc+0x5b/0x310 [ 2466.342057] create_object.isra.0+0x3a/0xa20 [ 2466.343125] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2466.344372] kmem_cache_alloc+0x159/0x310 [ 2466.345387] ? _raw_spin_unlock+0x1a/0x30 [ 2466.346403] copy_process+0x1ae7/0x78b0 [ 2466.347380] ? __lockdep_reset_lock+0x180/0x180 [ 2466.348509] ? mark_lock+0xf5/0x2df0 [ 2466.349457] ? __cleanup_sighand+0xb0/0xb0 [ 2466.350512] ? _copy_from_user+0xfb/0x1b0 [ 2466.351528] kernel_clone+0xe7/0x980 [ 2466.352434] ? __lockdep_reset_lock+0x180/0x180 [ 2466.353574] ? create_io_thread+0xf0/0xf0 [ 2466.354600] ? ksys_write+0x21a/0x260 [ 2466.355534] ? lock_downgrade+0x6d0/0x6d0 [ 2466.356548] __do_sys_clone3+0x1e5/0x320 [ 2466.357541] ? __do_sys_clone+0x110/0x110 [ 2466.358569] ? rcu_read_lock_any_held+0x75/0xa0 [ 2466.359698] ? vfs_write+0x354/0xb10 [ 2466.360610] ? fput_many+0x2f/0x1a0 [ 2466.361496] ? ksys_write+0x1a9/0x260 [ 2466.362427] ? __ia32_sys_read+0xb0/0xb0 [ 2466.363432] do_syscall_64+0x33/0x40 [ 2466.364335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2466.365591] RIP: 0033:0x7f2b50818b19 [ 2466.366509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.370986] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2466.372853] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2466.374596] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2466.376328] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.378092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.379833] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2466.386380] loop1: detected capacity change from 0 to 2048 [ 2466.451789] EXT4-fs warning (device loop1): ext4_fill_super:4104: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2466.454618] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 06:18:08 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x24040101) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x40000) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d7463f02c706f3ed6a5a794ad95842b98dd241f4872033d3078303130b8cc7fe843d375d01668bc3030303071a66ac288af69da2c4853e15349805af3865947d4b81c814aba6d7a81dc94bae4497800"/97]) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x11, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x94, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r2 = gettid() ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0/../file0\x00'}) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x64, 0x15, 0x7, 0x7, 0x0, 0x2, 0x20000, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x83e1, 0x2, @perf_bp={&(0x7f0000000200)}, 0x2, 0x1, 0x7, 0x2, 0x10001, 0xdc, 0xffff, 0x0, 0x9, 0x0, 0x1}, r2, 0x9, r3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x6}}, 0xe8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0xffe3) 06:18:08 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/95, 0x5f}], 0x1, &(0x7f00000004c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10040) syz_io_uring_setup(0x3a62, &(0x7f0000000ac0)={0x0, 0x50f1, 0x20, 0x2, 0x209, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) [ 2466.492053] loop1: detected capacity change from 0 to 2048 [ 2466.506710] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2466.549025] kauditd_printk_skb: 13 callbacks suppressed [ 2466.549044] audit: type=1326 audit(1749881889.037:219): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2466.557295] audit: type=1326 audit(1749881889.037:220): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2466.583447] audit: type=1326 audit(1749881889.072:221): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2466.589917] audit: type=1326 audit(1749881889.072:222): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2466.595066] audit: type=1326 audit(1749881889.072:223): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2466.595930] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2466.599920] audit: type=1326 audit(1749881889.072:224): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 06:18:09 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000001c0)=0x1, 0x2, 0x6) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2466.601893] CPU: 0 PID: 16636 Comm: syz-executor.5 Not tainted 5.10.238 #1 [ 2466.601913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2466.610505] Call Trace: [ 2466.611158] dump_stack+0x107/0x167 [ 2466.611526] audit: type=1326 audit(1749881889.098:225): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2466.612065] sysfs_warn_dup.cold+0x1c/0x29 [ 2466.617739] sysfs_do_create_link_sd+0x122/0x140 [ 2466.618910] sysfs_create_link+0x5f/0xc0 [ 2466.619096] audit: type=1326 audit(1749881889.098:226): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2466.619880] device_add+0x703/0x1c50 [ 2466.619914] ? devlink_add_symlinks+0x970/0x970 [ 2466.626562] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2466.627526] audit: type=1326 audit(1749881889.098:227): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2466.627815] wiphy_register+0x1da6/0x2850 [ 2466.633567] ? wiphy_unregister+0xb90/0xb90 [ 2466.634623] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2466.635899] ieee80211_register_hw+0x23c5/0x38b0 [ 2466.637059] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2466.638202] ? net_generic+0xdb/0x2b0 [ 2466.639117] ? lockdep_init_map_type+0x2c7/0x780 [ 2466.640267] ? memset+0x20/0x50 [ 2466.641063] ? __hrtimer_init+0x12c/0x270 [ 2466.642057] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2466.643264] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2466.644379] ? hwsim_new_radio_nl+0x967/0x1080 [ 2466.645481] ? memcpy+0x39/0x60 [ 2466.646277] hwsim_new_radio_nl+0x991/0x1080 [ 2466.647344] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2466.648616] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2466.650206] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2466.651779] genl_family_rcv_msg_doit+0x22d/0x330 [ 2466.652994] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2466.654561] ? cap_capable+0x1cd/0x230 [ 2466.655512] ? ns_capable+0xe2/0x110 [ 2466.656419] genl_rcv_msg+0x36a/0x5a0 [ 2466.657342] ? genl_get_cmd+0x480/0x480 [ 2466.658291] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2466.659532] ? lock_release+0x680/0x680 [ 2466.660491] ? __lockdep_reset_lock+0x180/0x180 [ 2466.661625] netlink_rcv_skb+0x14b/0x430 [ 2466.662599] ? genl_get_cmd+0x480/0x480 [ 2466.663579] ? netlink_ack+0xab0/0xab0 [ 2466.664519] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2466.665657] ? is_vmalloc_addr+0x7b/0xb0 [ 2466.666629] genl_rcv+0x24/0x40 [ 2466.667439] netlink_unicast+0x54e/0x800 [ 2466.668429] ? netlink_attachskb+0x870/0x870 [ 2466.669528] netlink_sendmsg+0x90f/0xe00 [ 2466.670506] ? netlink_unicast+0x800/0x800 [ 2466.671553] ? netlink_unicast+0x800/0x800 [ 2466.672570] __sock_sendmsg+0x154/0x190 [ 2466.673559] ____sys_sendmsg+0x70d/0x870 [ 2466.674537] ? sock_write_iter+0x3d0/0x3d0 [ 2466.675594] ? do_recvmmsg+0x6d0/0x6d0 [ 2466.676540] ? __lockdep_reset_lock+0x180/0x180 [ 2466.677674] ___sys_sendmsg+0xf3/0x170 [ 2466.678622] ? sendmsg_copy_msghdr+0x160/0x160 [ 2466.679749] ? __fget_files+0x2cf/0x520 [ 2466.680713] ? lock_downgrade+0x6d0/0x6d0 [ 2466.681708] ? finish_task_switch+0x126/0x5d0 [ 2466.682794] ? lock_downgrade+0x6d0/0x6d0 [ 2466.683802] ? __fget_files+0x2f8/0x520 [ 2466.684791] ? __fget_light+0xea/0x290 [ 2466.685765] __sys_sendmsg+0xe5/0x1b0 [ 2466.686683] ? __sys_sendmsg_sock+0x40/0x40 [ 2466.687754] ? io_schedule_timeout+0x140/0x140 [ 2466.688888] do_syscall_64+0x33/0x40 [ 2466.689800] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2466.691044] RIP: 0033:0x7f2c5417db19 [ 2466.691955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.696393] RSP: 002b:00007f2c516d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2466.698232] RAX: ffffffffffffffda RBX: 00007f2c54291020 RCX: 00007f2c5417db19 [ 2466.699954] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2466.701673] RBP: 00007f2c541d7f6d R08: 0000000000000000 R09: 0000000000000000 [ 2466.703403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2466.705126] R13: 00007fff5d08f02f R14: 00007f2c516d2300 R15: 0000000000022000 [ 2466.712242] audit: type=1326 audit(1749881889.197:228): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16625 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 06:18:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 29) 06:18:09 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 42) [ 2466.741214] EXT4-fs warning (device loop1): ext4_fill_super:4104: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 2466.744057] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 2466.793994] FAULT_INJECTION: forcing a failure. [ 2466.793994] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.796898] CPU: 0 PID: 16654 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2466.798575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2466.800594] Call Trace: [ 2466.801231] dump_stack+0x107/0x167 [ 2466.802108] should_fail.cold+0x5/0xa [ 2466.803023] ? __alloc_file+0x21/0x320 [ 2466.803964] should_failslab+0x5/0x20 [ 2466.804891] kmem_cache_alloc+0x5b/0x310 [ 2466.805875] __alloc_file+0x21/0x320 [ 2466.806764] alloc_empty_file+0x6d/0x170 [ 2466.807735] alloc_file+0x5e/0x5a0 [ 2466.808605] alloc_file_pseudo+0x16a/0x250 [ 2466.809617] ? alloc_file+0x5a0/0x5a0 [ 2466.810548] anon_inode_getfile+0xc8/0x1f0 [ 2466.811565] io_uring_setup+0x138b/0x2980 [ 2466.812568] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2466.813792] ? wait_for_completion_io+0x270/0x270 [ 2466.814324] FAULT_INJECTION: forcing a failure. [ 2466.814324] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.814979] do_syscall_64+0x33/0x40 [ 2466.818288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2466.819529] RIP: 0033:0x7f8bb9614b19 [ 2466.820412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.824907] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2466.826728] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2466.828444] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2466.830165] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2466.831873] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2466.833578] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2466.835317] CPU: 1 PID: 16656 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2466.836915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2466.838803] Call Trace: [ 2466.839409] dump_stack+0x107/0x167 [ 2466.840247] should_fail.cold+0x5/0xa [ 2466.841130] ? copy_process+0x1c65/0x78b0 [ 2466.842078] should_failslab+0x5/0x20 [ 2466.842951] kmem_cache_alloc+0x5b/0x310 [ 2466.843876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2466.845078] copy_process+0x1c65/0x78b0 [ 2466.845989] ? __lockdep_reset_lock+0x180/0x180 [ 2466.847037] ? mark_lock+0xf5/0x2df0 [ 2466.847905] ? __cleanup_sighand+0xb0/0xb0 [ 2466.848900] ? _copy_from_user+0xfb/0x1b0 [ 2466.849849] kernel_clone+0xe7/0x980 [ 2466.850701] ? __lockdep_reset_lock+0x180/0x180 [ 2466.851759] ? create_io_thread+0xf0/0xf0 [ 2466.852730] ? ksys_write+0x21a/0x260 [ 2466.853589] ? lock_downgrade+0x6d0/0x6d0 [ 2466.854535] __do_sys_clone3+0x1e5/0x320 [ 2466.855457] ? __do_sys_clone+0x110/0x110 [ 2466.856416] ? rcu_read_lock_any_held+0x75/0xa0 [ 2466.857494] ? vfs_write+0x354/0xb10 [ 2466.858334] ? fput_many+0x2f/0x1a0 [ 2466.859191] ? ksys_write+0x1a9/0x260 [ 2466.860058] ? __ia32_sys_read+0xb0/0xb0 [ 2466.861037] do_syscall_64+0x33/0x40 [ 2466.861908] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2466.863096] RIP: 0033:0x7f2b50818b19 [ 2466.863947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.868194] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2466.869996] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2466.871658] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2466.873335] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.874997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.876674] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2466.993661] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2467.004570] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2467.006664] CPU: 0 PID: 16636 Comm: syz-executor.5 Not tainted 5.10.238 #1 [ 2467.008364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2467.010413] Call Trace: [ 2467.011066] dump_stack+0x107/0x167 [ 2467.011969] sysfs_warn_dup.cold+0x1c/0x29 [ 2467.013021] sysfs_do_create_link_sd+0x122/0x140 [ 2467.014189] sysfs_create_link+0x5f/0xc0 [ 2467.015195] device_add+0x703/0x1c50 [ 2467.016125] ? devlink_add_symlinks+0x970/0x970 [ 2467.017319] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2467.018625] wiphy_register+0x1da6/0x2850 [ 2467.019664] ? wiphy_unregister+0xb90/0xb90 [ 2467.020751] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2467.022072] ieee80211_register_hw+0x23c5/0x38b0 [ 2467.023265] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2467.024450] ? net_generic+0xdb/0x2b0 [ 2467.025404] ? lockdep_init_map_type+0x2c7/0x780 [ 2467.026573] ? memset+0x20/0x50 [ 2467.027394] ? __hrtimer_init+0x12c/0x270 [ 2467.028426] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2467.029688] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2467.030831] ? hwsim_new_radio_nl+0x967/0x1080 [ 2467.031973] ? memcpy+0x39/0x60 [ 2467.032810] hwsim_new_radio_nl+0x991/0x1080 [ 2467.033901] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2467.035197] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2467.036822] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2467.038435] genl_family_rcv_msg_doit+0x22d/0x330 [ 2467.039627] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2467.041261] ? cap_capable+0x1cd/0x230 [ 2467.042243] ? ns_capable+0xe2/0x110 [ 2467.043175] genl_rcv_msg+0x36a/0x5a0 [ 2467.044121] ? genl_get_cmd+0x480/0x480 [ 2467.045111] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2467.046393] ? lock_release+0x680/0x680 [ 2467.047374] ? __lockdep_reset_lock+0x180/0x180 [ 2467.048527] netlink_rcv_skb+0x14b/0x430 [ 2467.049541] ? genl_get_cmd+0x480/0x480 [ 2467.050528] ? netlink_ack+0xab0/0xab0 [ 2467.051493] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2467.052626] ? is_vmalloc_addr+0x7b/0xb0 [ 2467.053632] genl_rcv+0x24/0x40 [ 2467.054447] netlink_unicast+0x54e/0x800 [ 2467.055468] ? netlink_attachskb+0x870/0x870 [ 2467.056572] netlink_sendmsg+0x90f/0xe00 [ 2467.057594] ? netlink_unicast+0x800/0x800 [ 2467.058660] ? netlink_unicast+0x800/0x800 [ 2467.059703] __sock_sendmsg+0x154/0x190 [ 2467.060700] ____sys_sendmsg+0x70d/0x870 [ 2467.061706] ? sock_write_iter+0x3d0/0x3d0 [ 2467.062744] ? do_recvmmsg+0x6d0/0x6d0 [ 2467.063717] ? __lockdep_reset_lock+0x180/0x180 [ 2467.064884] ___sys_sendmsg+0xf3/0x170 [ 2467.065847] ? sendmsg_copy_msghdr+0x160/0x160 [ 2467.066981] ? __fget_files+0x2cf/0x520 [ 2467.067967] ? lock_downgrade+0x6d0/0x6d0 [ 2467.069018] ? __lockdep_reset_lock+0x180/0x180 [ 2467.070159] ? futex_exit_release+0x220/0x220 [ 2467.071285] ? __fget_files+0x2f8/0x520 [ 2467.072282] ? __fget_light+0xea/0x290 [ 2467.073264] __sys_sendmsg+0xe5/0x1b0 [ 2467.074205] ? __sys_sendmsg_sock+0x40/0x40 [ 2467.075265] ? __do_sys_futex+0x2bb/0x480 [ 2467.076322] do_syscall_64+0x33/0x40 [ 2467.077249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2467.078513] RIP: 0033:0x7f2c5417db19 [ 2467.079438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.083971] RSP: 002b:00007f2c516d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2467.085847] RAX: ffffffffffffffda RBX: 00007f2c54291020 RCX: 00007f2c5417db19 [ 2467.087622] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2467.089391] RBP: 00007f2c541d7f6d R08: 0000000000000000 R09: 0000000000000000 [ 2467.091146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2467.092910] R13: 00007fff5d08f02f R14: 00007f2c516d2300 R15: 0000000000022000 06:18:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00de26cf05170cd4985aa4a952da9f690c6b89beef76f3030ecdc5a5769502ca29b4f09a34e490b88e31553edf5f7a26ffecbf4ffce51c52975944ad4fad2c50381c777df348fd8efe2aca2e1247e780d84e2e377ef15455659c2ac36e2e4ef0a0b5a35680c2dc3aa2ed643e24235a0518bd4b95e0313b3389d4691bb3e962ec4e08b9f552ef632744c3848d43c75ece47da7b4a34c74d5f0f5e48e645f5fe239d77f503289437ac7503786b47128b97ef193a3b097146b7de690455e4458391e2e4920380e3824bc34692208c7ff2f7e00af190ee00daa194fc60f792e1e71d8f1d604eefeeb971d893e426e3c22ffdcef20000000000"]) 06:18:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 30) [ 2481.797970] FAULT_INJECTION: forcing a failure. [ 2481.797970] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.799714] CPU: 0 PID: 16670 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2481.800776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.802068] Call Trace: [ 2481.802478] dump_stack+0x107/0x167 [ 2481.803047] should_fail.cold+0x5/0xa [ 2481.803650] ? create_object.isra.0+0x3a/0xa20 [ 2481.804341] should_failslab+0x5/0x20 [ 2481.804936] kmem_cache_alloc+0x5b/0x310 [ 2481.805551] create_object.isra.0+0x3a/0xa20 [ 2481.806249] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2481.807010] kmem_cache_alloc+0x159/0x310 [ 2481.807680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2481.808469] copy_process+0x1c65/0x78b0 [ 2481.809020] ? __lockdep_reset_lock+0x180/0x180 [ 2481.809590] ? mark_lock+0xf5/0x2df0 [ 2481.810049] ? __cleanup_sighand+0xb0/0xb0 [ 2481.810566] ? _copy_from_user+0xfb/0x1b0 [ 2481.811068] kernel_clone+0xe7/0x980 [ 2481.811518] ? __lockdep_reset_lock+0x180/0x180 [ 2481.812081] ? create_io_thread+0xf0/0xf0 [ 2481.812587] ? ksys_write+0x21a/0x260 [ 2481.813049] ? lock_downgrade+0x6d0/0x6d0 [ 2481.813560] __do_sys_clone3+0x1e5/0x320 [ 2481.814047] ? __do_sys_clone+0x110/0x110 [ 2481.814558] ? rcu_read_lock_any_held+0x75/0xa0 [ 2481.815113] ? vfs_write+0x354/0xb10 [ 2481.815569] ? fput_many+0x2f/0x1a0 [ 2481.816004] ? ksys_write+0x1a9/0x260 [ 2481.816479] ? __ia32_sys_read+0xb0/0xb0 [ 2481.816980] do_syscall_64+0x33/0x40 [ 2481.817426] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2481.818047] RIP: 0033:0x7f2b50818b19 [ 2481.818494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.820722] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2481.821640] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2481.822504] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2481.823370] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2481.824230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2481.825098] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:18:24 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}, {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 06:18:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@fat=@showexec}]}) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(r0, r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x20010, r2, 0x10000000) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) openat(r1, &(0x7f00000000c0)='./file2\x00', 0x885c0, 0x8) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) 06:18:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:18:24 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/95, 0x5f}], 0x1, &(0x7f00000004c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10040) 06:18:24 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f3404000000000000001ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:18:24 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 43) 06:18:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 31) [ 2481.880654] FAULT_INJECTION: forcing a failure. [ 2481.880654] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.881094] FAULT_INJECTION: forcing a failure. [ 2481.881094] name failslab, interval 1, probability 0, space 0, times 0 [ 2481.882913] CPU: 1 PID: 16681 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2481.885581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.887212] Call Trace: [ 2481.887734] dump_stack+0x107/0x167 [ 2481.888449] should_fail.cold+0x5/0xa [ 2481.889207] ? create_object.isra.0+0x3a/0xa20 [ 2481.890105] should_failslab+0x5/0x20 [ 2481.890850] kmem_cache_alloc+0x5b/0x310 [ 2481.891648] create_object.isra.0+0x3a/0xa20 [ 2481.892510] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2481.893517] kmem_cache_alloc+0x159/0x310 [ 2481.894335] __alloc_file+0x21/0x320 [ 2481.895062] alloc_empty_file+0x6d/0x170 [ 2481.895865] alloc_file+0x5e/0x5a0 [ 2481.896574] alloc_file_pseudo+0x16a/0x250 [ 2481.897406] ? alloc_file+0x5a0/0x5a0 [ 2481.898167] anon_inode_getfile+0xc8/0x1f0 [ 2481.899103] io_uring_setup+0x138b/0x2980 [ 2481.900147] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2481.901318] ? wait_for_completion_io+0x270/0x270 [ 2481.902352] do_syscall_64+0x33/0x40 [ 2481.903106] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2481.904145] RIP: 0033:0x7f8bb9614b19 [ 2481.904925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.908582] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2481.910089] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2481.911496] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2481.912892] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2481.914286] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2481.915681] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2481.917107] CPU: 0 PID: 16685 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2481.917948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2481.918950] Call Trace: [ 2481.919266] dump_stack+0x107/0x167 [ 2481.919706] should_fail.cold+0x5/0xa [ 2481.920166] ? copy_process+0x2514/0x78b0 [ 2481.920662] should_failslab+0x5/0x20 [ 2481.921124] kmem_cache_alloc+0x5b/0x310 [ 2481.921613] copy_process+0x2514/0x78b0 [ 2481.922091] ? __lockdep_reset_lock+0x180/0x180 [ 2481.922653] ? mark_lock+0xf5/0x2df0 [ 2481.923112] ? __cleanup_sighand+0xb0/0xb0 [ 2481.923633] ? _copy_from_user+0xfb/0x1b0 [ 2481.924133] kernel_clone+0xe7/0x980 [ 2481.924583] ? __lockdep_reset_lock+0x180/0x180 [ 2481.925146] ? create_io_thread+0xf0/0xf0 [ 2481.925648] ? ksys_write+0x21a/0x260 [ 2481.926104] ? lock_downgrade+0x6d0/0x6d0 [ 2481.926601] __do_sys_clone3+0x1e5/0x320 [ 2481.927086] ? __do_sys_clone+0x110/0x110 [ 2481.927597] ? rcu_read_lock_any_held+0x75/0xa0 [ 2481.928152] ? vfs_write+0x354/0xb10 [ 2481.928608] ? fput_many+0x2f/0x1a0 [ 2481.929052] ? ksys_write+0x1a9/0x260 [ 2481.929508] ? __ia32_sys_read+0xb0/0xb0 [ 2481.929999] do_syscall_64+0x33/0x40 [ 2481.930445] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2481.931070] RIP: 0033:0x7f2b50818b19 [ 2481.931517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2481.933724] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2481.934635] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2481.935497] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2481.936349] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2481.937213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2481.938071] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:18:24 executing program 6: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000002040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x40}}}}}]}}]}}, 0x0) [ 2481.964860] loop1: detected capacity change from 0 to 512 06:18:24 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 44) [ 2481.971875] FAT-fs (loop1): Directory bread(block 3) failed [ 2481.973071] FAT-fs (loop1): Directory bread(block 4) failed [ 2481.974231] FAT-fs (loop1): Directory bread(block 5) failed [ 2481.975389] FAT-fs (loop1): Directory bread(block 6) failed [ 2481.976547] FAT-fs (loop1): Directory bread(block 7) failed [ 2481.977898] FAT-fs (loop1): Directory bread(block 8) failed [ 2481.979056] FAT-fs (loop1): Directory bread(block 9) failed 06:18:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:18:24 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) [ 2482.030923] FAULT_INJECTION: forcing a failure. [ 2482.030923] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.032354] CPU: 0 PID: 16697 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2482.033202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.034201] Call Trace: [ 2482.034523] dump_stack+0x107/0x167 [ 2482.034975] should_fail.cold+0x5/0xa [ 2482.035434] ? security_file_alloc+0x34/0x170 [ 2482.035985] should_failslab+0x5/0x20 [ 2482.036462] kmem_cache_alloc+0x5b/0x310 [ 2482.036966] security_file_alloc+0x34/0x170 [ 2482.037484] __alloc_file+0xb7/0x320 [ 2482.037936] alloc_empty_file+0x6d/0x170 [ 2482.038442] alloc_file+0x5e/0x5a0 [ 2482.038896] alloc_file_pseudo+0x16a/0x250 [ 2482.039422] ? alloc_file+0x5a0/0x5a0 [ 2482.039924] anon_inode_getfile+0xc8/0x1f0 [ 2482.040455] io_uring_setup+0x138b/0x2980 [ 2482.040992] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2482.041627] ? wait_for_completion_io+0x270/0x270 [ 2482.042257] do_syscall_64+0x33/0x40 [ 2482.042739] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2482.043381] RIP: 0033:0x7f8bb9614b19 [ 2482.043855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.046185] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2482.047147] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2482.048040] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2482.048942] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2482.049851] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2482.050753] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:18:24 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="800080000000000200009dcb4c1900b0006700e4fe299078ac1e01f6ab1414bb4410efc000000a5500000085000000f5070bfbe000000200000000442c3d41fffffffffffff8956401010100000607ac1e000100000001e0000002000000618b091501f00000378307a964010102440ce1000000000600000009830bffe0000002ffffffff830bc6ac1414aa64010101860564016a4424543100000000000000030a01010200000fff7f000001000000eaac1e000100000405010000"]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2b, 0xff, 0x6, 0x7, 0x70, @mcast2, @mcast2, 0x20, 0xff00, 0x20, 0x8000}}) r4 = socket$packet(0x11, 0x2, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008084}, 0x81) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x141, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x102) ftruncate(r6, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r6, &(0x7f00000001c0)=ANY=[], 0xfdef) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8}, @val={0xc, 0x99, {0x87, 0x7}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004008}, 0x4040) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) r7 = gettid() perf_event_open(0x0, r7, 0xfffffffffffffffc, r6, 0x11) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x88, 0x453, 0x300, 0x70bd29, 0x25dfdbfb, "6ee922409cac2cab091d913ca7b176a053b5361ecb1051776ad6251f16221528d407bdf18254cc1a83449478bc9559ee9ca3f56c1caafb3471bae63c55c117d018f59f8f294e3ca18c910ea44e54a04ec03e2efbf3a0ec08e2097a94d10923b6a7678f664b6dae2673348e9ac1a80b2dc080953f9ced", ["", "", ""]}, 0x88}, 0x1, 0x0, 0x0, 0x200400d0}, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'veth0_to_team\x00'}) 06:18:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 32) 06:18:24 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x9011}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x40, 0x20, 0x2, 0x3f, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x66, 0x0, 0x9b, 0x2f, 0x0, @empty, @rand_addr=0x64010101}}}}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1dc, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4004090}, 0x20004005) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) ioctl$VT_RESIZEX(r5, 0x4b68, 0x0) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000180)="3a7aed82106c9facba81ded76aa49a8c4dd19b5118f4cad86b8e96f00129acfa2a4a61") timer_settime(0x0, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2482.175742] FAULT_INJECTION: forcing a failure. [ 2482.175742] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.177283] CPU: 0 PID: 16712 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2482.178173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.179216] Call Trace: [ 2482.179548] dump_stack+0x107/0x167 [ 2482.180014] should_fail.cold+0x5/0xa [ 2482.180480] ? create_object.isra.0+0x3a/0xa20 [ 2482.181072] should_failslab+0x5/0x20 [ 2482.181537] kmem_cache_alloc+0x5b/0x310 [ 2482.182054] create_object.isra.0+0x3a/0xa20 [ 2482.182584] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2482.183240] kmem_cache_alloc+0x159/0x310 [ 2482.183775] copy_process+0x2514/0x78b0 [ 2482.184261] ? __lockdep_reset_lock+0x180/0x180 [ 2482.184854] ? mark_lock+0xf5/0x2df0 [ 2482.185316] ? __cleanup_sighand+0xb0/0xb0 [ 2482.185859] ? _copy_from_user+0xfb/0x1b0 [ 2482.186380] kernel_clone+0xe7/0x980 [ 2482.186856] ? __lockdep_reset_lock+0x180/0x180 [ 2482.187415] ? create_io_thread+0xf0/0xf0 [ 2482.187954] ? ksys_write+0x21a/0x260 [ 2482.188438] ? lock_downgrade+0x6d0/0x6d0 [ 2482.188965] __do_sys_clone3+0x1e5/0x320 [ 2482.189470] ? __do_sys_clone+0x110/0x110 [ 2482.189991] ? rcu_read_lock_any_held+0x75/0xa0 [ 2482.190571] ? vfs_write+0x354/0xb10 [ 2482.191045] ? fput_many+0x2f/0x1a0 [ 2482.191502] ? ksys_write+0x1a9/0x260 [ 2482.191986] ? __ia32_sys_read+0xb0/0xb0 [ 2482.192505] do_syscall_64+0x33/0x40 [ 2482.192996] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2482.193648] RIP: 0033:0x7f2b50818b19 [ 2482.194115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.196410] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2482.197380] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2482.198288] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2482.199185] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2482.200085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2482.200986] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:18:39 executing program 6: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x400006, 0x0, 0x0, 0xa084, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000100)) r2 = fork() rt_sigqueueinfo(r2, 0x5, &(0x7f0000000200)={0x0, 0x0, 0xfffffc00}) syz_open_procfs(r2, &(0x7f0000000040)='statm\x00') r3 = signalfd4(r0, &(0x7f0000000000)={[0x100000000]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@mmap}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@cache_none}, {@version_9p2000}, {@fscache}, {@cache_mmap}]}}) fcntl$setown(r0, 0x8, r2) 06:18:39 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:18:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 33) 06:18:39 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) getsockname$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0xa302}], 0x10000000000002a3, 0x0) close(r5) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0000e2f9300c042dbd7000ffdbdf251515941bef3ede1cf3ae3ae19e053e4e248863518b1da826deeb4e2405000000800000000700000001000000ff0f0000020000000300000008040000ead807327e437b2590fe553fce04cc1f9613ae511d662baeb962cc3d87a9e0300f495eced8dd413f865bfb3ea4b9f4ec80f1edb311b7c12f5ce27a61ec5b416d2aab3a191067d9b69a1d0cb21893e1558ddb4d79da4f39d4222389260a3640120c08e582f4217b99aa10702aa81b895ac7241feaece42ce786e5d104", @ANYRES32=r4, @ANYBLOB="000000000700000003000000018000000b0001008c5d14ca7613a300540001009cb0a60b6a57da9d360d1980b21c742168957b1b7270c743b4d264a8a369a7f31382dd0e73aade3ae87a78526b571240a835b80fe03294cc4925a521931ebbc2044c5065c5ced000001a9a4d6551854b"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r4, 0xee01}, {@in6=@private2, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x800000000, 0x3ff}, {0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88e0bd68ed040c7247732a33d0d71f000c0000e1fe73fcb91c0238fc276d7461395c1146979a318c48ce25d925048dd580d821ddaf1974949a6315888e4df4131cb90df8deb432c06e2bae439e959447a17b8cab2d7b12c49e4f94948e1033e015156b32f9b5ce0f5dfd9ba4", @ANYRES16=r7, @ANYBLOB="01000000000000000000080000000c0001800820c7be1f05282743dfd264d3f93bd495000100", @ANYRES32=r9, @ANYBLOB="0c0002809afc038004000500"], 0x2c}}, 0x0) 06:18:39 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000140), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffc000/0x2000)=nil, 0x4) 06:18:39 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 45) 06:18:39 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 06:18:39 executing program 5: r0 = open_tree(0xffffffffffffffff, 0x0, 0x81981) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x200, 0x0, 0xffffffff, 0x1, 0x17, "77004a6efdff00002d1ceb7300", 0x0, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4a140, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x40df, &(0x7f0000000080)={0x0, 0x8c4a, 0x1, 0x2, 0x6b, 0x0, r0}) dup3(r2, r3, 0x0) [ 2497.318288] FAULT_INJECTION: forcing a failure. [ 2497.318288] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.319682] FAULT_INJECTION: forcing a failure. [ 2497.319682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2497.320754] CPU: 1 PID: 16732 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2497.325340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.327078] Call Trace: [ 2497.327636] dump_stack+0x107/0x167 [ 2497.328405] should_fail.cold+0x5/0xa [ 2497.329232] ? create_object.isra.0+0x3a/0xa20 [ 2497.330225] should_failslab+0x5/0x20 [ 2497.331028] kmem_cache_alloc+0x5b/0x310 [ 2497.331882] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2497.333060] create_object.isra.0+0x3a/0xa20 [ 2497.333981] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2497.335054] kmem_cache_alloc+0x159/0x310 [ 2497.335928] security_file_alloc+0x34/0x170 [ 2497.336833] __alloc_file+0xb7/0x320 [ 2497.337620] alloc_empty_file+0x6d/0x170 [ 2497.338469] alloc_file+0x5e/0x5a0 [ 2497.339221] alloc_file_pseudo+0x16a/0x250 [ 2497.340108] ? alloc_file+0x5a0/0x5a0 [ 2497.340929] anon_inode_getfile+0xc8/0x1f0 [ 2497.341830] io_uring_setup+0x138b/0x2980 [ 2497.342704] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2497.343760] ? wait_for_completion_io+0x270/0x270 [ 2497.344802] do_syscall_64+0x33/0x40 [ 2497.345589] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.346660] RIP: 0033:0x7f8bb9614b19 [ 2497.347441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.351296] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2497.352908] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2497.354444] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2497.355941] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2497.357444] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2497.358940] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2497.360471] CPU: 0 PID: 16735 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2497.362176] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.364207] Call Trace: [ 2497.364854] dump_stack+0x107/0x167 [ 2497.365751] should_fail.cold+0x5/0xa [ 2497.366689] __alloc_pages_nodemask+0x182/0x600 [ 2497.367826] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2497.369322] alloc_pages_current+0x187/0x280 [ 2497.370394] __get_free_pages+0xc/0xa0 [ 2497.371345] pgd_alloc+0x84/0x4e0 [ 2497.372183] ? pgd_page_get_mm+0x40/0x40 [ 2497.373222] ? lockdep_init_map_type+0x2c7/0x780 [ 2497.374367] ? lockdep_init_map_type+0x2c7/0x780 [ 2497.375528] mm_init+0x670/0xab0 [ 2497.376350] copy_process+0x257b/0x78b0 [ 2497.377347] ? __lockdep_reset_lock+0x180/0x180 [ 2497.378470] ? mark_lock+0xf5/0x2df0 [ 2497.379396] ? __cleanup_sighand+0xb0/0xb0 [ 2497.380451] ? _copy_from_user+0xfb/0x1b0 [ 2497.381491] kernel_clone+0xe7/0x980 [ 2497.382388] ? __lockdep_reset_lock+0x180/0x180 [ 2497.383509] ? create_io_thread+0xf0/0xf0 [ 2497.384532] ? ksys_write+0x21a/0x260 [ 2497.385478] ? lock_downgrade+0x6d0/0x6d0 [ 2497.386487] __do_sys_clone3+0x1e5/0x320 [ 2497.387478] ? __do_sys_clone+0x110/0x110 [ 2497.388509] ? rcu_read_lock_any_held+0x75/0xa0 [ 2497.389649] ? vfs_write+0x354/0xb10 [ 2497.390554] ? fput_many+0x2f/0x1a0 [ 2497.391446] ? ksys_write+0x1a9/0x260 [ 2497.392388] ? __ia32_sys_read+0xb0/0xb0 [ 2497.393398] do_syscall_64+0x33/0x40 [ 2497.394309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.395562] RIP: 0033:0x7f2b50818b19 [ 2497.396474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.400965] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2497.402811] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2497.404529] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2497.406273] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.408004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2497.409740] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:18:39 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='\'\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000000)) r3 = inotify_init1(0x0) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x44000, 0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9ab2b9a1a79a6618f4a4c6410eb3f14102df8661a0fc3b63339aa023404ba49f242e9fde3391c855044742202377db70d08d228d9d2299e94c21dfc8e63635ac2ea9ab1cd81c3690eb45f0bc14e7a68884807d5d075a255f7c432729903746b7f3f05e3c00000000db53cf0e4483f5b0d02fbcd341c9207ffb8c6f149d26682a52d75a59a04a84155e3f55c0bdcfeaa587140ba79048e42a62671aa7f835e92b529bf27e0947ba16e240438c5342540a5d8db43bd147e8de59a2615a8f93c2010c6eade979f81ccf687a37656757921d24446aafccbf9d921446693953d07c2abffd644734c534cca1409c74c9", @ANYBLOB], 0x54, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) fremovexattr(r5, &(0x7f0000000180)=@known='com.apple.system.Security\x00') sendfile(r1, r2, 0x0, 0x100000001) 06:18:40 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 06:18:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 34) 06:18:40 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 46) [ 2497.588651] FAULT_INJECTION: forcing a failure. [ 2497.588651] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.591913] CPU: 0 PID: 16748 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2497.593603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.595623] Call Trace: [ 2497.596265] dump_stack+0x107/0x167 [ 2497.597163] should_fail.cold+0x5/0xa [ 2497.598091] ? vm_area_dup+0x78/0x290 [ 2497.599020] should_failslab+0x5/0x20 [ 2497.599941] kmem_cache_alloc+0x5b/0x310 [ 2497.600950] vm_area_dup+0x78/0x290 [ 2497.601842] ? __lock_acquire+0xbb1/0x5b00 [ 2497.602888] ? perf_trace_lock+0xac/0x490 [ 2497.603901] ? __lockdep_reset_lock+0x180/0x180 [ 2497.605046] ? vm_area_alloc+0x110/0x110 [ 2497.606027] ? find_held_lock+0x2c/0x110 [ 2497.607014] ? get_mm_exe_file+0x139/0x310 [ 2497.608035] ? lock_downgrade+0x6d0/0x6d0 [ 2497.609050] ? down_write_nested+0xe4/0x160 [ 2497.610093] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2497.611333] ? get_mm_exe_file+0x162/0x310 [ 2497.612358] copy_process+0x298b/0x78b0 [ 2497.613383] ? __cleanup_sighand+0xb0/0xb0 [ 2497.614441] ? _copy_from_user+0xfb/0x1b0 [ 2497.615457] kernel_clone+0xe7/0x980 [ 2497.616358] ? __lockdep_reset_lock+0x180/0x180 [ 2497.617503] ? create_io_thread+0xf0/0xf0 [ 2497.618525] ? ksys_write+0x21a/0x260 [ 2497.619450] ? lock_downgrade+0x6d0/0x6d0 [ 2497.620460] __do_sys_clone3+0x1e5/0x320 [ 2497.621459] ? __do_sys_clone+0x110/0x110 [ 2497.622487] ? rcu_read_lock_any_held+0x75/0xa0 [ 2497.623612] ? vfs_write+0x354/0xb10 [ 2497.624520] ? fput_many+0x2f/0x1a0 [ 2497.625422] ? ksys_write+0x1a9/0x260 [ 2497.626345] ? __ia32_sys_read+0xb0/0xb0 [ 2497.627345] do_syscall_64+0x33/0x40 [ 2497.627688] FAULT_INJECTION: forcing a failure. [ 2497.627688] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.628248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.631906] RIP: 0033:0x7f2b50818b19 [ 2497.632805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.637279] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2497.639124] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2497.640845] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2497.642586] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.644304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2497.646035] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2497.647788] CPU: 1 PID: 16752 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2497.649273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.651035] Call Trace: [ 2497.651605] dump_stack+0x107/0x167 [ 2497.652391] should_fail.cold+0x5/0xa [ 2497.653253] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2497.654357] should_failslab+0x5/0x20 [ 2497.655171] kmem_cache_alloc_trace+0x55/0x320 [ 2497.656149] io_uring_alloc_task_context+0x99/0x6a0 [ 2497.657226] ? io_import_iovec+0x1120/0x1120 [ 2497.658161] ? lock_downgrade+0x6d0/0x6d0 [ 2497.659040] ? do_raw_spin_lock+0x121/0x260 [ 2497.659964] ? rwlock_bug.part.0+0x90/0x90 [ 2497.660885] __io_uring_add_tctx_node+0x2c6/0x520 [ 2497.661915] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2497.663021] ? alloc_fd+0x2e7/0x670 [ 2497.663804] io_uring_setup+0x1fbb/0x2980 [ 2497.664687] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2497.665768] ? wait_for_completion_io+0x270/0x270 [ 2497.666823] do_syscall_64+0x33/0x40 [ 2497.667615] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.668956] RIP: 0033:0x7f8bb9614b19 06:18:40 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r2, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYRESDEC=r2], 0x108}}, 0x0) r3 = epoll_create(0x5) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x568, 0x3b, 0x200, 0x70bd2b, 0x25dfdbfe, {0x11}, [@generic="641e1d3113c069617285a5e84f53ddd972590097519aaeb5fb9736", @generic="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", @typed={0x9, 0x9, 0x0, 0x0, @str='-\xe2\x05-\x00'}, @typed={0x50, 0x6e, 0x0, 0x0, @binary="b8debfb97b9ff38d269f2dcb9cfbc8121df2808655b7d3fe2e1c5f55c43e3f399a57cee30ca3487dd47029ee38811d9b69fc2914a36522bdb6173500ef1965f96eb57e9f1363e871513c3ccf"}, @nested={0x392, 0x6d, 0x0, 0x1, [@generic="2381ce493e6c4a986a42a9e1e356d5989fc3d355a093cbc66100b001e91717b1f7f9045cfff0e671334f86084cf752b22fb0bf435e8cc78c5201d1627011659e2a7d33e3345a3c15c1de00009fa5cf76003ba2c11d491adae5a2997056872a181b40ab7cbfcf3c73ac0c243d8d283f6f9f35ca4aac66e20a506d2b586f96685dbe0f3974681a576a7d96ef7d71e2747401bda82163eb92f186336e1d9ccff3218b17f2ecb3b90069b6d6d01954d12e35c670a1b0075df38b45270354f6fe7172867e3e9ca3b26538569ea386ca94678f8fe4fb", @generic="1674c927e4a3f5e32c8a6cc125e9f8184a527bbaf8c666ce0c43a3d5db3265f5d7295e24212fbb8c99b3647f4fbd9365530c51848a727beeeb883cafbbeb6fd39d7c45e2cdaf47aada3d76f5d2931b3be4b2e6897fd3c54c369b6fa9f4e5f5fdff450088aa9e2588b4e1c3a5c1d99f7c3890781a7fc1c3131ccba1f22b3c6f7696fd12d9d72d5895b2042ac8fe134e1b675dfa", @typed={0x8, 0x92, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xb, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x23, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="c55330c0fcd38927dc9bda7159fbb5a72ceace1f46afd90f844ea250c02d4f38974ed3f9dafd7b3a5dcb9c5e3b169e2d09386fea73e34a1a91821b8939260de0b9a55e4bcacb9a517f5b5a9e04b59216060fa075c68e394f13176366cc61", @generic="93c211fd7f7e1dd496e2d9c415bde22cc67e007b18cfb058d493a63b5e71a90b4bdd00eefb250a2a6b605186162d1c1b032caf76f02e85370ec689eea2907c646c9b5ec259de64b27ee513eb931077c4f1b0da68bd41d0ba3767719dd354ede7404c6f3b69a9ba0f003fbbbbbb842e2e52c7fe1e9ea71ae2c85daa50e07349074a6a8266bb5d0a6fe5158b7450ef778821bd1eafffdd07bdc48213ad3e51e76159f743a21c80a6f29cf3e3f6ba377bd5c68fd381191da301c23e73e1af82dfbf482a7a9c057f1583305ac78d4e568fa837849d", @generic="5e45ad39c7b7aaad068bc747a85fdbfea2840f180a06aa088154bb62066d2eb72c43068ec9bca184863891279262794739b8c9ed337f2132b551990363c204dd72a919bee62eba132f54b244bc9d1eca35e9af72372d06f2d9399a30d9ac7d8f3b7ff493", @generic="f95aa687c451986e0879d8b3c8bf5055709dbf07417690274fb58d10a20743a71fa92a29700097fc2395dc0bbcf2e418c2407523ef085bab3c463654e30d6b02665e6ca5479a9139da8bccc852dd7d152da9e476f35e675bb85d506f6dc02a9ad9a4594cc67ff74f7b159736df01d470526db2024c2280129316a3"]}, @generic="ea7f008f8ee6d0358400fb1135cf1305d5503d52e6e8c00331dc889d5fbfb224489d07a324ee84b7d6de86f80707386ddc809b862fcfc8b8d9b76705339db208ced5847c5ed9f65594c81d77e8c471"]}, 0x568}, 0x1, 0x0, 0x0, 0x50}, 0x12000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0) write$P9_RLCREATE(r4, 0x0, 0x0) [ 2497.669814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.674306] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2497.675957] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2497.677478] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2497.678985] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2497.680498] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2497.682017] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:18:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2497.772553] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2497.800904] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2497.802716] CPU: 1 PID: 16758 Comm: syz-executor.5 Not tainted 5.10.238 #1 [ 2497.804361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.806474] Call Trace: [ 2497.807159] dump_stack+0x107/0x167 [ 2497.808095] sysfs_warn_dup.cold+0x1c/0x29 [ 2497.809184] sysfs_do_create_link_sd+0x122/0x140 [ 2497.810389] sysfs_create_link+0x5f/0xc0 [ 2497.811426] device_add+0x703/0x1c50 [ 2497.812378] ? devlink_add_symlinks+0x970/0x970 [ 2497.813576] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2497.814913] wiphy_register+0x1da6/0x2850 [ 2497.816011] ? wiphy_unregister+0xb90/0xb90 [ 2497.817353] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2497.818830] ieee80211_register_hw+0x23c5/0x38b0 [ 2497.820180] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2497.821533] ? net_generic+0xdb/0x2b0 [ 2497.822710] ? lockdep_init_map_type+0x2c7/0x780 [ 2497.824169] ? memset+0x20/0x50 [ 2497.825215] ? __hrtimer_init+0x12c/0x270 [ 2497.826419] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2497.827848] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2497.828995] ? hwsim_new_radio_nl+0x967/0x1080 [ 2497.830148] ? memcpy+0x39/0x60 [ 2497.830977] hwsim_new_radio_nl+0x991/0x1080 [ 2497.832037] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2497.833371] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2497.835055] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2497.836753] genl_family_rcv_msg_doit+0x22d/0x330 [ 2497.837817] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2497.839469] ? cap_capable+0x1cd/0x230 [ 2497.840447] ? ns_capable+0xe2/0x110 [ 2497.841341] genl_rcv_msg+0x36a/0x5a0 [ 2497.842372] ? genl_get_cmd+0x480/0x480 [ 2497.843366] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2497.844735] ? lock_release+0x680/0x680 [ 2497.845692] ? __lockdep_reset_lock+0x180/0x180 [ 2497.846911] netlink_rcv_skb+0x14b/0x430 [ 2497.847927] ? genl_get_cmd+0x480/0x480 [ 2497.848932] ? netlink_ack+0xab0/0xab0 [ 2497.850142] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2497.851500] ? is_vmalloc_addr+0x7b/0xb0 [ 2497.852689] genl_rcv+0x24/0x40 [ 2497.853678] netlink_unicast+0x54e/0x800 [ 2497.854906] ? netlink_attachskb+0x870/0x870 [ 2497.856027] netlink_sendmsg+0x90f/0xe00 [ 2497.857192] ? netlink_unicast+0x800/0x800 [ 2497.858395] ? netlink_unicast+0x800/0x800 [ 2497.859591] __sock_sendmsg+0x154/0x190 [ 2497.860769] ____sys_sendmsg+0x70d/0x870 [ 2497.861893] ? sock_write_iter+0x3d0/0x3d0 [ 2497.862950] ? do_recvmmsg+0x6d0/0x6d0 [ 2497.863934] ? SOFTIRQ_verbose+0x10/0x10 [ 2497.864983] ? __lockdep_reset_lock+0x180/0x180 [ 2497.866147] ___sys_sendmsg+0xf3/0x170 [ 2497.867140] ? sendmsg_copy_msghdr+0x160/0x160 [ 2497.868396] ? __fget_files+0x2cf/0x520 [ 2497.869526] ? lock_downgrade+0x6d0/0x6d0 [ 2497.870690] ? finish_task_switch+0x126/0x5d0 [ 2497.872007] ? lock_downgrade+0x6d0/0x6d0 [ 2497.873122] ? __fget_files+0x2f8/0x520 [ 2497.874121] ? __fget_light+0xea/0x290 [ 2497.875174] __sys_sendmsg+0xe5/0x1b0 [ 2497.876082] ? __sys_sendmsg_sock+0x40/0x40 [ 2497.877195] ? io_schedule_timeout+0x140/0x140 [ 2497.878327] do_syscall_64+0x33/0x40 [ 2497.879201] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.880262] RIP: 0033:0x7f2c5417db19 [ 2497.881050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.885353] RSP: 002b:00007f2c516f3188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2497.887489] RAX: ffffffffffffffda RBX: 00007f2c54290f60 RCX: 00007f2c5417db19 [ 2497.889259] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 2497.891021] RBP: 00007f2c541d7f6d R08: 0000000000000000 R09: 0000000000000000 [ 2497.892930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2497.894676] R13: 00007fff5d08f02f R14: 00007f2c516f3300 R15: 0000000000022000 06:18:40 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x630d, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="2b8cb0d98df97f00c4e300bf671cc8861c"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:18:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 35) [ 2498.039556] FAULT_INJECTION: forcing a failure. [ 2498.039556] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.042820] CPU: 0 PID: 16766 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2498.044506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2498.046510] Call Trace: [ 2498.047160] dump_stack+0x107/0x167 [ 2498.048050] should_fail.cold+0x5/0xa [ 2498.048985] ? vm_area_dup+0x78/0x290 [ 2498.049910] should_failslab+0x5/0x20 [ 2498.050837] kmem_cache_alloc+0x5b/0x310 [ 2498.051829] vm_area_dup+0x78/0x290 [ 2498.052718] ? __lock_acquire+0xbb1/0x5b00 [ 2498.053774] ? perf_trace_lock+0xac/0x490 [ 2498.054771] ? SOFTIRQ_verbose+0x10/0x10 [ 2498.055773] ? __lockdep_reset_lock+0x180/0x180 [ 2498.056915] ? vm_area_alloc+0x110/0x110 [ 2498.057900] ? find_held_lock+0x2c/0x110 [ 2498.058893] ? get_mm_exe_file+0x139/0x310 [ 2498.059915] ? lock_downgrade+0x6d0/0x6d0 [ 2498.060924] ? down_write_nested+0xe4/0x160 [ 2498.061972] ? rwsem_down_write_slowpath+0xc30/0xc30 [ 2498.063210] ? get_mm_exe_file+0x162/0x310 [ 2498.064225] copy_process+0x298b/0x78b0 [ 2498.065193] ? SOFTIRQ_verbose+0x10/0x10 [ 2498.066220] ? __cleanup_sighand+0xb0/0xb0 [ 2498.067269] ? _copy_from_user+0xfb/0x1b0 [ 2498.068289] kernel_clone+0xe7/0x980 [ 2498.069200] ? __lockdep_reset_lock+0x180/0x180 [ 2498.070325] ? create_io_thread+0xf0/0xf0 [ 2498.071351] ? ksys_write+0x21a/0x260 [ 2498.072273] ? lock_downgrade+0x6d0/0x6d0 [ 2498.073294] __do_sys_clone3+0x1e5/0x320 [ 2498.074282] ? __do_sys_clone+0x110/0x110 [ 2498.075314] ? rcu_read_lock_any_held+0x75/0xa0 [ 2498.076442] ? vfs_write+0x354/0xb10 [ 2498.077356] ? fput_many+0x2f/0x1a0 [ 2498.078241] ? ksys_write+0x1a9/0x260 [ 2498.079162] ? __ia32_sys_read+0xb0/0xb0 [ 2498.080176] do_syscall_64+0x33/0x40 [ 2498.081093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2498.082338] RIP: 0033:0x7f2b50818b19 [ 2498.083242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2498.087748] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2498.089621] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2498.091350] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2498.093086] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2498.094821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2498.096549] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:18:54 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 47) 06:18:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:18:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 36) 06:18:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x40081271, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x96, @scatter={0x5, 0x0, &(0x7f0000000340)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000000180)=""/23, 0x17}, {&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/70, 0x46}]}, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, 0x1) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x1, 0xbf9}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) r7 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) flistxattr(r7, &(0x7f0000001140)=""/76, 0x4c) mq_timedsend(r7, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x6, [{}, {}, {0x0, r4}, {}, {}, {}, {}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r5}, {r2}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {0x0, r5}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {r3}, {}, {}, {}, {}, {r2}, {}, {0x0, r5}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) mq_timedsend(r7, &(0x7f0000001e00)="3cd52ed97c9e213909d730166b17123f3294a3353d43c2bda33f8b46124feb3e574cb78ff55dae93c1d80f8b1b571caa5d0f953fdc20af7c2907f40c853111e5a4a6405dfd6510e2573f0cd5a14f722a746315bf5955d6443a167b62e37e70e67059a451add17b0ba3a4967e37a184c25fd56c25f32d2c08713830771e190d3e72e360fbae6eb7f69da7ae1b7575584eb3aad405c2e0cecf7c57c725e35199b38412b21fb229249cb5214590ea9c200b689ed99433fbbb389404f04d726fe19ef657f8896380c769f15ede2ebc816773d5730db7acb1828fbcdffc4da713e0944bca7028c47238c1aace7879fca945a836e4ff365b155de4a6b5e69df15c57c8c84a27359b026401b2d2ebb22fc4727115b803cbed672e1c10421e53aecb9848432f39231a6fe45af05a49d7f66593d188b01763da10fbe076c0103b005492008157072857ecefae4dfd561229bd8ecf19e938d25a4315e343c5ffc67c1810af17fff3e930e390dc021b8a020e9ad5750cbdb6ac2406d580f35c6776feba23704f457eb3c9e481a38ae02519b5561493b3a5a22682f0622f55b91bf3fe3b6eeb0b411767b39cf41b6ea7f7606bbbf59f038ed99313e9185bafa0f1fb0d7f8f854025afe6eb498d49d00f869ed3d4abccfb90d70f1dd88a92a1f6c2a1f62238ff8733e3b25225fe919598664429606c6ba859544fe0de3a9f18ed8fdd5e9ce15ab80c870a454b550e5fe805396bf4ed72b627314fad05b74a500135c9bb1b297b170356d42c9983c3275dc8c95a5a198f3b896c712d4c44d66ee10f29d4d71df5484c473cdcd107d66ded8e5219a066b00f45faca7ccbde009031f583819cffcba547c3b5707c7c1eba73dc6ade8f584244ba35302df2a0341c8e629d52fad82cc1c34dac09d39a975902e883ce1b648080e5855ad37961abaa7eecab4ac63cb839f4039f8b93d2ba6e618ebc437166e24e210171bc8ae12f31e90adadfdba265f9a8df86648ff4bcff451f289c9142ef5bac4ba3131852ff820087a5b7e1131eb05c8c857dd4cf2839501138174f70eca95c39a59220f47be95cbe4996c214f17e5a790679057bf0c05e7d79797fa74af891a0bb050183e9124f3677a94c92e3caaeb095d0746fa8a82e30f14b228fffee24ba0385ae2940a223aa6fdd3bee655aabb131e4660eefa4e65a0cd2197f54d94783a2513ab6ae8c548b7fae70692ffa367a95cde0cd90d37be42547f30d1583a913b11c9f998d60d8c78a3677d79c717dde50a0124d918e66655902e6cb60ddd82727bc05b31057693ee9d7601be6d8870edc47c328afa800911568d99655a271c65de3a07616806e280bd453217ee2420b32544c67e34bbcec1874b450af23af54048d3a10e71967bc1ee3c0029235d95f158895bbdddfa81a3cfbcc74c7c352820f75e00324e154441074853b7c2dc1c3ed42873c6323e0bd29058b62187f57ee8def92612a91b1598af90904e770a8788c05934b54f998ed0a4b54198e74a1bdcd6e5a07109f6bd0271384211633d2d70c28843fbed80968d3cf49a697bfaffb92101e0626dc34c4b9a8b47438606152c9eea6481597918ef7739be21f562c86289b842b1d9208459f41716f2518da7d3f4ba062c0ea28a221e44f071325deef0c9ce5e8bb729e8f393020db13ad241503f9c4dc21fee5bc58893e112a2bd2528aa825c3b8e19d8312b268a43c9c662737da60bf318a5cd9069a2d96653818733825f5808371ad593f124ce11272705b5dd827d269ea01ea8a3948418278ba34338fea40665bcb5365033785adbbc7f20ea2489a728670108781da688a9d2f327f7723b76e4d2dba9c05a8f15bc05fdd521ce44e606fb0daf61c3cf96094bc4c8ca55892cd55803da5ec5f72c9ea01273ba23d834061b1a4e7778470cb726d78692d1d00291b9753fe96e43b24f239b575978b0fc6855aae3e384fff6dca011d58ca718f5a64ce083744057fadce07c1569c0a2dd34cc2f990c2d0705d4ad2dd03ed74e005e495987f5dd3b561bfd610d372abd48da2cdaa6253b074b55a30c7663daf7268768a656ac8f36d0c61a6671f6b75b69634c5c3cb06bf7d28e5b01743d673ed200a51e70f7d72c908e21769144a72870fead7075c25ddadbfeb9a9818638c3829d329eac2eb542f190986977bf6b79ae967ede1bc3e998d271f8225d5ae195e1be0ae7be5dba2584bcda86187ccde07022a3a462f505557140b14646b8d2ccb67c82bcfbeb71ece2f3af3d2d522613571766fbc39716026361c6d109d1ca6616495a5c1186cb2009e8d365abaf16a81230ad8c05889f9fcbb7ce0c6a507f9b5a078dfe5a7483d376f16428d23eb15c688f252d8548b5d94f34f8cd430b1a31bcc3e1ce90d14e3e7a33021df06882d32b90e4c6968c8046a7410bb6920f278d1b1c166875217c8e8d417adf9b50c85c509fa0581d906ab12c339e7ce03a49693489e7965043c75e5950363f062e43933d848ac73cb5f8585eee7d22305f9332df9ad7a11377c01f15ae3009d92dc3fae370f8f817400fd7f5aeb5b103fa1ba707b86ebff9324e2d52a8d46baff356e4be977bab515127107916440e1867c4d6279b08479597b3268c98566723c935f96b569b2b60807f8a046ea6e2761c062c7913dc9d4bf71f60ee2fd0e7bb3e5b718e8d4a62c43f2d53d9ecdbfb6d1dea8d8ce51c574c5007a55bd1a5933e3895659255153d501e3419ecb2c63cf337b7de31b0830f7c5b4fe267ef576c7776d34e47c7ee204609284af5a10a88b0d2488574d50614b004c04285cadc63001ac023f570b6fa4c0a21635b2d53405c4279ce02ad7033cc5df8559e1cafb3e6b0dd169df0a980a27d5acd32f68e166ddd6c43e186de12bd09f14e644c5f7a696b1cec0cfc757dc64e8f0b64c8bab66db414fa724c175fa49676d0ae100537b7cb55751a54149b60653a20bbbdaa58a9172228e553a5ec93387db79eaa9cd542cf8035d4c50b7e09e3728f153641e7fd5c9cb8969df5374a25d3611aacc81ea1d195a4b2f7e1f861259fe1d2d6422e32acd44d2f996508c07e54b200a472e4782b0e5aa030898f4c51b578f60d17fc5c01055be225120118c20b171d8bffe38f194b0ef598ac5696825da3442eb0513e31dcf997a213ffb711392223c906b637c77a5ac612611b9d4f949bfa43d746b38fa61a2b736f116edfeda864cf56357f0d9ed25d27cb057c8227379a86d9f2bf00f289ea8fcf4a61f0bbc50045047e7ef0b097e4c65d749f4d40a89f6ff2e17990e837f81364faaf32cd0c5cdf9846173610759a22a424e00f57a3143c8cf561f12489ff01fa64ef27c39370e1eca076ecaa6fbd701ad2a29b80cca60bdccd34e5f26fd0ac661ef5da02883d55401b05b15770399f960c8749fdc90fc06ddc18bd88ad6d21a7db3aaf52e28ab741f211898192d4ab34b659e79eddd844a28b5c3d0125f5b8781f270f7832114c744bc5820a60b28d408291884c0f85b47e660f8545c412c235e85da5e33bd315067b9f89a36b76e204e82ee465031f0fc463d42254f73fe269bd7ba4f4f06dafe7057f58f5387f40b0bf3fa2e9ca6b2afc496d26ebd092e0373750cc649f16e1e35179825f3a51d8b015539a4ba1661addc540c776257ceadb0d795f8fd6737bc302fc39b4dda8bf0db0f4d0a62839b02ff488810413131a566082d864e5bfc3e073a63f17b28aa8929cd239f50689fef85a8de3308be69b82d7eca3d9e5190586362841d1ff6c562a3c6d74e57750e80baddf2aabd9cc40ff3aa30e2a9be9150815977e3292f171cd184074d00e90251ffb0943b276e67a87d7eed7af3d886519f54aec72d5eb01268202999e8d78532461a8524aa0fea7c49aa864f956bc4dd31047a529f8bbf4ba971ded87c6121533491863d6d2f4dbeac566839675a781f43c9ed27d0527c961a60f212deafd75ac331674b4e76d9151c9813aca07565b1e8b52a835d1693f36cdb9be6fa8cdd7431183467be6dc75c867268cbc7f7a6cd1059ccb123c47de06785d1deb8a2a4ab286929253e05107d07c80d2790af78fe59f022763514ade2fd2f2aa0fff6c99c6af7498c9024259f2f49d8e0f054b9e7d774b4e7b1552340012153d4c79451be6ffc71079da12c140d97f3a813256e93e22e3ff9045fc6075df39fab13ed8661a6a06bc083194ebe6bc40040840f08cd586d7a3a36fe7015d3a636f94553955325eeb3d5c538251202c6c1521cbe2b87e3a22ffd2744094a44be4a63e09271a29fbddc042872a53dfe54670d0028d640754c2aa06ab7e299244bcf5517eca5a0d50799ff872bdafe888a587633f3771c161c520e56764ae13e351dd4a4fbbc4c12e00986c58a3af279473acfa42cdd442d2ab36a1f2c8e15df74b9b9fdb7f4ed0a527e1b2522ea18b822d420e493a114031ef87dad32101c7002f7aacd435e3c952c5edf7f6317215709f673926e15feb3021c3d31adaf27f468ed93f65201963ce3ec173f8003d417961a503bfe5181ed3397bfe1299107235aa1562baf276ddc6b3e802a35042d0f8a79ee06102c8e9b0a92e7e92da2788c8e6450a924fe8d7637a183f9a0b69e949ee3d54bd5abf9b6a90bd3cb8a9bc9d8d91418c72b3fe665d54dec99eb53fcf474a0f42171e2f3fb16a00633408f77c205a168f70379d5f10988510ed2605f1811c5c22d9e3e44f483cfc65e373e431eb224414db926be369c40fd1e40f2938cc484b33f69d8ee518c33a91284d6e3635720b731c68011d6b467219a6deb3b6c47ae211375d738b6f77a4f6ea2b80579aa34b3d0bced65466b6946f386482db484af971f33f546f2c0b0bcf6135784fcf3f0f1006fe34617e86adbabf80935995d34b48b9d1f12ef089510dbbd616a59e875d3f3e0aa7aea1758d6c5f2a699d031823205a4ad815efee17395d817015c392a79e4d0ac9686e596220b0ecdd2c1646e54a5630cd6022b1f52d81de0b7c0e772ab6a9c931bf527b0a874f79fa860cc82283d36be2114a4ce514b60f2b1ef941fb4e1a8d2899467d6231f82fefa3bc2462677ffd1d2436b44bf4f7fe734064f0a0b16c3f16332a85895ff84494009e00440ff7940096065996741278b3652d6286545b10c77ab2e905c1bb8c2d538ca6521df0707f55e0054d2d87d060f863c9cc50db915ac404ff6017a48a04190d12168a647d803819879c0bc3e688663d1585493dc800727fb4775473005d0cc37c3941dddb31071cb5389083a0ee8aa5317326c7f8a29646e24bb32c6d6198d2e095a6694f5ad98e3940608d60e169cc7dc507564e043aebdde61d7adf96f0a52adbde8f9ce5f99a323c8cfbb35c23baef865a6a6f949b9ee425ed2dbf1f74eda38aea9bb1e814f8de792d106ffc2030223aed765a49a8c5225f986508d023b698226c40e366e93264fbf51c2fa8a889f13ef4b768c480ae4ef3d5f061d7cd2ea2456e0c2bca80c3e7b23209a4d221a1df8cc6b3e5fa6dead523253952380abf2ca49d628a4078e4c34c49caa2f84dbd9325c2459dcf8ffe65163a438dc1f204cfeca634cfd0a2f0f165539b88bbff3b4136f21cd050ea0c2959701aed2f44be88498bd6ccad2935aa459f91e146928eceef45a9dee8ac5d9ecedf6f3757a3058742aa743b74020dfbd925deacc4fc4c1e1d91653f93b190229888c5103c29a4b5ffc836babd2035e79d5742e32f663fa44ad2ccb40e547037ecfc1d8f1cf1f70638302c6b8e8524ffe1e1b33464ae0c4ad2b8f53350998a864ac84789fd0f48534295285e6", 0x1000, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) lseek(r1, 0x0, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x64c483, 0x186) copy_file_range(r8, 0x0, r1, 0x0, 0x200f5ef, 0x0) 06:18:54 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cc7d98df97f1ec4762c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x3) 06:18:54 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r3, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) dup3(r2, r3, 0x80000) sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a00210c000000200000000002000000080000000000000008001000e0000001"], 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x24, 0x1a, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}]}, 0x24}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x200000, &(0x7f0000001740)=ANY=[@ANYBLOB="7472faeacf6f3d3860e37bca34b92eb3179a7403590e4701f961ca7b5bea80aad8f59061d7cf8dad867434838fe31df3f5d94bdc34c707247cacb62772a6241796702792acfb6151996dd7db0afb4a94cf1db6e7357276057f723628acedc01156a4a26de6056ff843e8d6fb65af32ab784de4bd0cf730b24dcc06aea290ac098d989cb987c806b377fd0004483c74c631c6db98018b74c5781200"/165, @ANYRESHEX=r2, @ANYRES32, @ANYRESHEX, @ANYBLOB="2c64656275003d3030362c6d65ffffffffb07572"]) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x205e8b, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x1, 0x8) preadv2(r5, &(0x7f0000001680)=[{&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f00000014c0)=""/162, 0xa2}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)}], 0x6, 0x7, 0x401, 0x1e) openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x434300, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1e, 0xc21}, 0x14}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001700)={0x51, 0x4, 0x1000, {0xfffd, 0x3ff}, {0x7ff, 0x1a}, @rumble={0x5, 0xfdd0}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)) 06:18:54 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc0100001a0001000000000000000000e00000020000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x1bc}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000100)=0xfffffffffffffc60) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000300)=0xfffffffd, 0x4) io_setup(0x5, &(0x7f0000000700)=0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x40) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4000, @fd_index=0x2, 0x1000, 0x7, 0x2, 0x10, 0x1, {0x1}}, 0x3) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r4, &(0x7f0000000340)="973718d000416d0e113ace690a98f1619484e4960056aa777fed63e5d28907e5dc658359736aa2b3be6a054ff61d0d0a1704feb3dcb95ee5a9cff583a4c2fe2b47dfbb4b82095e76228691e017e710f5527b9185295cf3d3a3e16d4d705f339c596fb9ddcd0bbc9eb440a4102813cb2df3f63c3d37f8ed50d3a4270ad215d9176a280cd1e1d5", 0x86, 0x7, 0x0, 0x3, r5}, &(0x7f0000000280)) setpriority(0x0, 0x0, 0x800000000081) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000400)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) fchmod(r0, 0x6) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) [ 2512.267190] FAULT_INJECTION: forcing a failure. [ 2512.267190] name failslab, interval 1, probability 0, space 0, times 0 [ 2512.269976] CPU: 1 PID: 16783 Comm: syz-executor.0 Not tainted 5.10.238 #1 06:18:54 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) [ 2512.271580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2512.273676] Call Trace: [ 2512.274294] dump_stack+0x107/0x167 [ 2512.275140] should_fail.cold+0x5/0xa [ 2512.275804] FAULT_INJECTION: forcing a failure. [ 2512.275804] name failslab, interval 1, probability 0, space 0, times 0 [ 2512.276025] ? vm_area_dup+0x78/0x290 [ 2512.276050] should_failslab+0x5/0x20 [ 2512.276079] kmem_cache_alloc+0x5b/0x310 [ 2512.281376] vm_area_dup+0x78/0x290 [ 2512.282228] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2512.283306] ? lock_downgrade+0x6d0/0x6d0 [ 2512.284267] ? copy_page_range+0x24e9/0x3810 [ 2512.285313] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2512.286391] ? avc_has_extended_perms+0xf40/0xf40 [ 2512.287519] ? vm_area_alloc+0x110/0x110 [ 2512.288455] ? find_held_lock+0x2c/0x110 [ 2512.289417] ? selinux_vm_enough_memory+0x114/0x180 [ 2512.290570] ? selinux_sb_statfs+0x250/0x250 [ 2512.291599] ? percpu_counter_add_batch+0x8b/0x140 [ 2512.292736] ? __vm_enough_memory+0x184/0x360 [ 2512.293780] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 2512.294968] copy_process+0x298b/0x78b0 [ 2512.295925] ? __cleanup_sighand+0xb0/0xb0 [ 2512.296928] ? _copy_from_user+0xfb/0x1b0 [ 2512.297896] kernel_clone+0xe7/0x980 [ 2512.298752] ? __lockdep_reset_lock+0x180/0x180 [ 2512.299822] ? create_io_thread+0xf0/0xf0 [ 2512.300794] ? ksys_write+0x21a/0x260 [ 2512.301676] ? lock_downgrade+0x6d0/0x6d0 [ 2512.302638] __do_sys_clone3+0x1e5/0x320 [ 2512.303575] ? __do_sys_clone+0x110/0x110 [ 2512.304554] ? rcu_read_lock_any_held+0x75/0xa0 [ 2512.305632] ? vfs_write+0x354/0xb10 [ 2512.306489] ? fput_many+0x2f/0x1a0 [ 2512.307329] ? ksys_write+0x1a9/0x260 [ 2512.308210] ? __ia32_sys_read+0xb0/0xb0 [ 2512.309173] do_syscall_64+0x33/0x40 [ 2512.310032] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2512.311213] RIP: 0033:0x7f2b50818b19 [ 2512.312068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2512.316310] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2512.318066] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2512.319702] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2512.321346] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2512.322981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2512.324618] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2512.326300] CPU: 0 PID: 16787 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2512.327967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2512.329959] Call Trace: [ 2512.330594] dump_stack+0x107/0x167 [ 2512.331464] should_fail.cold+0x5/0xa [ 2512.332373] ? create_object.isra.0+0x3a/0xa20 [ 2512.333470] should_failslab+0x5/0x20 [ 2512.334376] kmem_cache_alloc+0x5b/0x310 [ 2512.335350] create_object.isra.0+0x3a/0xa20 [ 2512.336393] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2512.337615] kmem_cache_alloc_trace+0x151/0x320 [ 2512.338730] io_uring_alloc_task_context+0x99/0x6a0 [ 2512.339915] ? io_import_iovec+0x1120/0x1120 [ 2512.340981] ? lock_downgrade+0x6d0/0x6d0 [ 2512.341983] ? do_raw_spin_lock+0x121/0x260 [ 2512.343006] ? rwlock_bug.part.0+0x90/0x90 [ 2512.343555] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2512.344015] __io_uring_add_tctx_node+0x2c6/0x520 [ 2512.347138] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2512.348388] ? alloc_fd+0x2e7/0x670 [ 2512.349278] io_uring_setup+0x1fbb/0x2980 [ 2512.350277] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2512.351487] ? wait_for_completion_io+0x270/0x270 [ 2512.352671] do_syscall_64+0x33/0x40 [ 2512.353567] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2512.354794] RIP: 0033:0x7f8bb9614b19 [ 2512.355685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2512.360058] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2512.360082] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2512.360096] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2512.360108] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2512.360120] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2512.360132] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2512.414906] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2512.416887] CPU: 1 PID: 16793 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2512.418487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2512.420400] Call Trace: [ 2512.421023] dump_stack+0x107/0x167 [ 2512.421866] sysfs_warn_dup.cold+0x1c/0x29 [ 2512.422841] sysfs_do_create_link_sd+0x122/0x140 [ 2512.423937] sysfs_create_link+0x5f/0xc0 [ 2512.424874] device_add+0x703/0x1c50 [ 2512.425746] ? devlink_add_symlinks+0x970/0x970 [ 2512.426819] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2512.428034] wiphy_register+0x1da6/0x2850 [ 2512.429003] ? wiphy_unregister+0xb90/0xb90 [ 2512.430022] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2512.431247] ieee80211_register_hw+0x23c5/0x38b0 [ 2512.432354] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2512.433466] ? net_generic+0xdb/0x2b0 [ 2512.434353] ? lockdep_init_map_type+0x2c7/0x780 [ 2512.435442] ? memset+0x20/0x50 [ 2512.436209] ? __hrtimer_init+0x12c/0x270 [ 2512.437178] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2512.438348] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2512.439412] ? hwsim_new_radio_nl+0x967/0x1080 [ 2512.440463] ? memcpy+0x39/0x60 [ 2512.441239] hwsim_new_radio_nl+0x991/0x1080 [ 2512.442259] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2512.443469] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2512.444983] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2512.446495] genl_family_rcv_msg_doit+0x22d/0x330 [ 2512.447609] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2512.449130] ? cap_capable+0x1cd/0x230 [ 2512.450041] ? ns_capable+0xe2/0x110 [ 2512.450901] genl_rcv_msg+0x36a/0x5a0 [ 2512.451778] ? genl_get_cmd+0x480/0x480 [ 2512.452694] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2512.453894] ? lock_release+0x680/0x680 [ 2512.454807] ? __lockdep_reset_lock+0x180/0x180 [ 2512.455885] netlink_rcv_skb+0x14b/0x430 [ 2512.456821] ? genl_get_cmd+0x480/0x480 [ 2512.457742] ? netlink_ack+0xab0/0xab0 [ 2512.458647] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2512.459695] ? is_vmalloc_addr+0x7b/0xb0 [ 2512.460632] genl_rcv+0x24/0x40 [ 2512.461404] netlink_unicast+0x54e/0x800 [ 2512.462341] ? netlink_attachskb+0x870/0x870 [ 2512.463369] netlink_sendmsg+0x90f/0xe00 [ 2512.464310] ? netlink_unicast+0x800/0x800 [ 2512.465306] ? netlink_unicast+0x800/0x800 [ 2512.466280] __sock_sendmsg+0x154/0x190 [ 2512.467197] ____sys_sendmsg+0x70d/0x870 [ 2512.468133] ? sock_write_iter+0x3d0/0x3d0 [ 2512.469110] ? do_recvmmsg+0x6d0/0x6d0 [ 2512.470018] ? __lockdep_reset_lock+0x180/0x180 [ 2512.471091] ___sys_sendmsg+0xf3/0x170 [ 2512.471988] ? sendmsg_copy_msghdr+0x160/0x160 [ 2512.473051] ? __fget_files+0x2cf/0x520 [ 2512.473965] ? lock_downgrade+0x6d0/0x6d0 [ 2512.474918] ? __lockdep_reset_lock+0x180/0x180 [ 2512.475985] ? futex_exit_release+0x220/0x220 [ 2512.477035] ? __fget_files+0x2f8/0x520 [ 2512.477961] ? __fget_light+0xea/0x290 [ 2512.478864] __sys_sendmsg+0xe5/0x1b0 [ 2512.479740] ? __sys_sendmsg_sock+0x40/0x40 [ 2512.480726] ? __do_sys_futex+0x2bb/0x480 [ 2512.481715] do_syscall_64+0x33/0x40 [ 2512.482570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2512.483749] RIP: 0033:0x7f277f764b19 [ 2512.484605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2512.488848] RSP: 002b:00007f277ccda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2512.490606] RAX: ffffffffffffffda RBX: 00007f277f877f60 RCX: 00007f277f764b19 [ 2512.492249] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 2512.493896] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2512.495534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2512.497183] R13: 00007fff5bc6ce3f R14: 00007f277ccda300 R15: 0000000000022000 [ 2512.527699] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 06:18:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2512.612630] loop1: detected capacity change from 0 to 16776704 06:18:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 37) 06:18:55 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 48) 06:18:55 executing program 6: setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r1, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf64(r1, &(0x7f0000004080)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x7, 0x5, 0x5, 0x8fb2, 0x0, 0x3, 0x6, 0x1b7, 0x40, 0x14d, 0x1, 0x9, 0x38, 0x2, 0xff, 0x400, 0x3}, [{0x60000000, 0x0, 0x4, 0x3, 0x5, 0x7, 0x9, 0x9}, {0x2, 0x1, 0x1, 0xfd0f, 0x5, 0xcc7, 0x9, 0xbdbb}], "4afa7afcea8367e39a21f2e603e7b631bb2cd07f64212d04fe2c18a1cefb324ac06efd0cbe24de2e77d5d269d01fc4eb4774209d23c09646f1032a015a70eb945a1ec78cb0410ce63b5471fc2bd7ebefdbe8861be69e90da4fa72a0e349d56f84f9516870822bcb13ef1e02ab1cf5acd642256f58e068e89e82ef0e702d5cdaabe3e33f77b50b089bde564949fd7813292ede2965cc6de2b9123d01cf5e392758ae143bcc43055ef0a866ef6d079d932c65dea7730590034ddc80587107353181bb09cff8ea1733549fef5de644c0dc9fa78845ee8351739f2206fe1116b17cee7d94912e829c66ba8d2b6a4f91f71851fd772049e897205959ccc9139cee7878e07630935c64f2430b95decc63c18686827ca60d63b43d18c120ab1d78cdd945437d6e347397e647a9ef26af848e5616e1f1d07c28abe08ac1330c1e2a75c7bcd16290c5512b2ff11efb536f15f0c9094fcff66470e3c12ddd2d537b9f645ca68f9990ab5bb0d30122282484487c82d93e9b73d31173b453a26ef790194cfe4e6039a109233802d5026cdc1b5dc26a15035bd9ed560341856814f359dcdae8c669a1f7bdc4f011e31c69f07f5354116266806482e98404ad19f47819a184552589fb5f745859b23cb3f2d3660ef33ffafa2415d40003c050d025e9c57855ff4588d54ad1043dc97f303d6a845a4a1f7508cd7008a6cd8f74344ed2ec85cfb3936747968e9df566c118d78c1f39782a8d93cb25b84546b96435038285fade2af5d77f9492d7b6424165ea3e711c99931225f7a6419574fbc52184b0af5f69cfa12f4f4b22c9afe7c08f226962a75f13511c1aa40176826f2376a94430965d4568a0ef9e9eaaff2d633d0b9d81e702700f63879fe2be3c00b5d2ac3504377d2899c90f676611046b21b0c90c098c57f165906a0bdd0287a72307a272731a17081c018c16ddfe146706dc77d7b0c88bd8974ecb5051a6c2951c65cd4d4a54c2e91ab3df00f6aea4a7f3bb2caf950f4e6aa74af9543fdd30f8352bb262f0b2e99f13ee299bdaef08af9ea7296fe74d9b7f1e23a23b173ef6e6ebbc31fcb8bd81a2cd993489b31df5ce37db23abea7a18ec29620eca9c2e91433341614883546af9d58753b41fdf78ab594382f9d746d76dd28e2d6e17f45b557448640b4532998800b6c71638de0c3f78f09bd452a677bbcd185f9923b9fa09419d484606411fd803c74cadf07678d56ac94565b8022cd3d7e556ecf242d807fe83d829065fc057c38cc1cc137aa483aaa4f95bb9829d941a9b997b9001f19f2c64ccd7267f5404d2d8312f5d083288b62e6b119873e31057dbf7e097c1bf3244242ff3671525325830ef76bc0279d3c7348a4195c6e7ac17a637b2127a53084a62b2ccb8d1fd9cdad0ebf27777e0060aa207ddc0c31cfea27fb816e1de209e07a3aa833cb22651d8b01b60000740da0345acb1501ccee4095e0db7634712a2d83c533d5d6edf3e7614c17312e5d0ddf72614c747868465e3f9ad37c4239fc98b7f3d48622d462cf6a7c8fe6255bdda85a1a2e8659f520e80ce26cfbd066d7063c7c3785a225a1b2304aeee272920bb121919677f7e7bad7bcefd04e3473fdd0a7e4bdb60863d12bb5779e9c4b885197dd8b25945afe2e27dbb331361887669b53f55a8bb13523ec359d6bc454ff9c21e5ece3f7e8592a510fd7c42a5ef7765ff6f72abb7e5b95bc1376a868b86ef227f4fc1b1da79952495efd0c234f8032fa673699e7902ef7165271d9dc326d584c9036ebc4900d3633d34dcc904ff1f131dbd147ae7d7db38f02e8696050635277a8f8b5b4bc88acda0a4106d06c2ac6d3fc082f70612f5e9a7e85ef46617ef066e04dbe83c9bd986796f69015053ee15f9b999158a3115a8441d957816dcc33e70b4ef1485fd9c544098e2e03d593c9986c7ae6ba5e7321fa7c557e9ddb2c4955b8763adf2631e737d31df3b1cb86c640c8361acbbda685124df830cd45bf289209d68132237f40fa0d8b591ee101e0961e1e4079bdf37f39944d16be16db7ef5a4103b84f22df2f4712e30a764f593b5f6694d4809e6d966c6d9b7cc92eb4d23f44c52aade4c9914118146cd9639eeda65778c8019ac158b167bbe44cd97badc4afcf232116a6fa0d0e92bdafc4b601e995ea853b9d15b63b6e6439c13777d53178cebcfedaf82304e81f1e67c448795b9a72e27060fae2fe801adc6f70a66391ca0228bdedcf1d9fdf9a716eb920296910c194ca3a38b4576561d0794059e8b8018759e8a72fc8180c347746476acae21b382bc6bc5f75145c08e2e78e334fef33790e8874cb4b6da57ccb20f055acd1aec4b11cc1a184884ea4e220ed96538a214ab92340305c5ad207472074258e085dd5da406854eaa779d727f79beaa3bb14da4996ededb8c1b0148e625ede2bb72db95dda994e0233e6010a23a6fa7b4478ce1442fc3bd96559628ec3f8fbcf508b1035b0db0774e8bb01d9156e8d1cc668b0be77f47d3f13e47b1d6cb33320dd2a488a4683456a53e3cae80d9996d450b7c5691ade3236a3b7a11a1938ad7734b4148692a826c95a7f7e9aa546e6b7c92d4c4d6c059590d2cf524fc462a04cd6fb588b3bad6f2434ad7d6d98343df93cd7dd1a95ad9d65e9343e66df98537795dc7c7f31b3d01ff6aea2397d8b7ed55a6d7683e4517a001924b90fa593eb6310623a7f217e5e7323cc99d2e30006c3b1ad96f15cf6481af3f14005460f03900d2336d4ea48e88479e05a2e13e3b29632e7626bd7dccc95838a5a14713435716b59707030c90d857e1999e24136f429a32acbbbc0e91ccb3403211dc2800af6fea61589febb5d60b8e86636dab6722c5cb8ae427da4daa85d9e5ceff93367eefeaa705c9dafe80683e5506c7b24a29d71e0e287bd15a28c7d46ee412756c4e63af58c45f77864ae944f247a38de1adccc09dec26b5c4977e17edc57fe44349d0f31f55de82d5e56f88eb3af19401074eca62e7991d2a76c32d76b1d325e36278f175d18a7bb53d8d45d6e0fae577d94e064896b4a39e6e50805bd0a0db5f4da7fcd5ff6f4ef447880240118705bf77d2d129af86ce09bee52ce3df89c03397fe47332513b95aaaf8055d1c9459ff7cb91847d2f7c0a010080ae6790658ebe94b16b1339282741d0e18c6d4192a47414b4e467f8f50c047b2afad4cae2a6e3c5d877ebe88d627d9509e8f5420b68e39518496f38ca3f17a832b02f86bb00447a8a3282eeaac29f821234c6448be3d712f3c8f4073a7b68a9c69863c2cb594069bb3b4ecd20fb27d6728e5111e821c2195f0909df423351ca07f6cde863349d7b67dc3f8fad62d12222f357f1b68b50fb05cff06d42556c623b73ac10525c70fdaf2520650ce73d0b5ffdbf68b6d93296df548077e6e9e20780757787484bdea24904eb2c1370f3415486a06250f47dcdf7cc1abbfc8a702737e273c58b2098de7885adc695cc14c09bc03bd63cd9fc7647c19dd80ed8fb93d3cebca161a9078da81e03bee34c2a07af32e7e52be46418f237ff079a92376b05aa9c12d57e178486ef538977437f3837c4ddc7dae96a95736f6938ded58d619649ee3b511ef8f0b85f1e4971b2b381989cee437a6d967761fcae5abb6768231c6c493778b155427c744924d04800e6c3607ab509bf82f38486e70fb63db65be9939c23a1e328b0cf7493088a9f940ab26e3da8aee550fa24062ead34780b2ec08fd351251e6a5f95761c8e0d2a6be0579be0174504f9e2de81bcdd7aaf63ba423e4ee6bf8bcf7d8c6baa77e05b988646a4ffa05553289aac27c746786ce8d4c030deaea685818d0fed1a02d95ae178b5eb819d059b958574970f4f994d384797f6ed6e2472f18b9da4da459362a1cfe141ce5b08df4df7f221894de8ca21320d6c3ce59b10bee3d6422ee3e6df0ab79f06b31c6edcfb44a711d7c06a0331c20665bd69cb14594f18a5c0a4de79750dc7681333db48da8a85358e8a4382c3443ff03d53d238f247e27525c6820d4859bf79adebebfcd61a26d47d3e20e4b33bd1a83b6d5bed855b6b606f647233d2b034dee5a78c857840fa2ead5d379247d6cad1f4e8a8e36feb3cb6e4c97fd40a2d5386d46f350c316e28897d570975d43278cb5eab70856eb51e1d5eddd8a275e6389350270881951e76963aecab4225907d149d52d4f2de8076ebb764a9498f1bc81832952a0770874cf05a5c5835cd2cec520be3f9868934aaa4fc0c36c6488845576f94376709d0e01e1cc12f756a324558c906a6d781870cdd5dacbedc1b85b8bdce8dda18eea6aff10e1b6e66f642aa02dc3e3d07ab73ca54d87d9c8ed3cd92323bfa43c78a9100a68ddf7dca0d58cc741974ece2d6729888e461c66d8a627717d559384641f47fd17cb068b9784df44b9c8369f3715d098a6df481a02ceaf0bf600646b672f8cad4a94e49ffa5690a231a36b6757630a008681f1feb23e063a9257f563f6ac1d7db11a030d7f71689acce4d209a4ebde261ae5d9f0a5c9792f370585af388e33bf52d050b8efe6f89c4b6f20a31326493099eb58c4f4cd80ebabd4c3835ecf2869598fbecb4785f9bab6967a3945715fd698e6786c41614b8cc7950e8e36967c6578276abaa708ac6844e2f1ff6d4963c8a860d1cc80bb0e735091e69cf723dbec423c609a7b0dbc6975c75036b95ee93b9f3d7665fdfac3e2b9fe1c9c28d200ad99461bac4c67bc48f90606d45531845eaec11322f99feaa9adf12542aeac8a411c6dd3bf79f97deb3fd7079e72a28469eb5639f73710754a7580b505548287ee14ac807b3722350be193b1a90058b9e9b7977b7cf0d6cd11d66e57f81000b662e92bba1d33f53e090fd07a858875d470da1a3bd8931a6903788aa49f6a465926fafdf3252463e4fce50cc45d04ef453ab699f48ee4f333e6f7c337782823c933066c657d41607b9f393562f981119b97b6f08cff6d1cbe6701aae63e4f27f9f7ab087dd5af69ed01777e9e65798777515355b192180a91e16bb46a0b5154b2c7767314f325878c57487de11385fe9196638cd1f98b388e3f92c867c83f2d2deee065c1d337ccc0e4a1f896852f727c506d5cb37f35d1bc33413d7c77716332652ac1b96ac51df57639175f9d5b1e795f1be85b9478d58459d31d789589dca2944ba23ca95c61b0a20e585030bc9027d475ed746db8104558cb86d02a53116322c6af741c517d9d0ea9243d8460398845a9059292c35b66bb5ea254dfa4d072eb3be1a6d25c725f22cbae2adbb53adeff054217f5f4d36edbfd49782b8c919c8fce9a38eee574956589622b8fdb322450b5f76b17bb489b0df62f9959a69f8f4cb1b9fe0c70d6b78a4cd3b38b292d4e14dd85f9229f29992407fc2dd6f4ad46c922a40ea17810a7dd508b587d329a854bb2cf3809c0a573372b0c013fe3ae68eb262258187e85f245d50d01ac399e03c6d458d1033482598779af87cc1babd8f577d8175a88e23a0015333de9c0d52bdbc6fb8d3925d391450820b456c0360abb9c7c83d6a1343ffa20245331f3721741d2c20739a3204469a02bf57802bd3ec11b919ac1d575593f5ed15a255bd76f11e3dad16dbb3b264b00ce66eb30eb7ba4b37cc50b8b4146a6936541c681293a5e4275d9dde2d2bdd4a381b47e5d3c29f3ac85be4e1729df506eaff37884467a54274a1629c4b2866bd4e05b3b8f92950d7b6f159f0cfa51aadd71b421ce7a0f6a67ec929127dad92f15f0731ed182544911d1aa1d8683257e30cb5a32c639e8fd631632f294acf7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x19b0) setresuid(0xffffffffffffffff, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000003f40)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000004040)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x20005010}, 0xc, &(0x7f0000004000)={&(0x7f0000003fc0)={0x38, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000001) setxattr$security_ima(&(0x7f0000003780)='./file0\x00', &(0x7f0000003a80), &(0x7f0000003ac0)=@md5={0x1, "ac859f1bfa4f8221f9664c4c5761b39d"}, 0x11, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/119, 0x77}], 0x1, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/68, 0x44}], 0x1, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000000580), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000680)=""/146, 0x92}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/211, 0xd3}, {&(0x7f0000001840)=""/221, 0xdd}, {&(0x7f0000001940)=""/81, 0x51}], 0x6, &(0x7f0000003b00)=ANY=[@ANYBLOB="10808eb8dcda85bc07a59a8f5c9294c8064d08e687cac2c17fc9f54d2d20decc5b27687ef4432ecd259221ae45f4f3ddd0e6d950bf69a878e8bff089f6de237caa13c7d45c3675a0c5525779ea2f235eae09b5cb9a297e9c5aef79d63db7e2cfb5ecb8eef269cafeb20cef049ca4ffa1e09fbb5efa05f79780c5bdca6edf781eb1849ad56e9f38d2da1e36522ad79a9a2126aa0f188988e8fe98d6e3008a189e78b99ca57a9ec63d9ed1ceda51d3a6767f6bdde4e468ccc36ad0082dd60b3308319846f23a3f06347c37d9", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}, {{&(0x7f0000001a80), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001b00)=""/242, 0xf2}, {&(0x7f0000001c00)=""/19, 0x13}, {&(0x7f0000001c40)=""/186, 0xba}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/249, 0xf9}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000002f00)=""/36, 0x24}, {&(0x7f0000002f40)=""/15, 0xf}], 0x8, &(0x7f0000003000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000003100)}, {&(0x7f0000003140)=""/40, 0x28}, {&(0x7f0000003180)=""/52, 0x34}, {&(0x7f00000031c0)=""/215, 0xd7}, {&(0x7f00000032c0)=""/215, 0xd7}, {&(0x7f00000033c0)=""/21, 0x15}, {&(0x7f0000003400)=""/65, 0x41}, {&(0x7f0000003480)=""/124, 0x7c}, {&(0x7f0000003500)=""/124, 0x7c}], 0x9, &(0x7f0000003640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}, {{&(0x7f0000003680), 0x6e, &(0x7f0000003740)=[{&(0x7f0000003700)=""/27, 0x1b}], 0x1, &(0x7f0000003780)}}], 0x6, 0x100, &(0x7f0000003940)={0x0, 0x989680}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000003100)=0x848, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x280000, &(0x7f0000003980)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '$-'}}, {}, {@version_u}, {@loose}, {@privport}, {@access_user}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}], [{@smackfshat={'smackfshat', 0x3d, '^U^/}}-'}}, {@euid_gt={'euid>', r4}}, {@hash}, {@appraise}, {@hash}]}}) [ 2512.731703] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 2512.736352] FAULT_INJECTION: forcing a failure. [ 2512.736352] name failslab, interval 1, probability 0, space 0, times 0 [ 2512.739106] CPU: 0 PID: 16911 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2512.740783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2512.742813] Call Trace: [ 2512.743456] dump_stack+0x107/0x167 [ 2512.744341] should_fail.cold+0x5/0xa [ 2512.745276] ? create_object.isra.0+0x3a/0xa20 [ 2512.746389] should_failslab+0x5/0x20 [ 2512.747309] kmem_cache_alloc+0x5b/0x310 [ 2512.748298] create_object.isra.0+0x3a/0xa20 [ 2512.749385] kmemleak_alloc_percpu+0xa0/0x100 [ 2512.750477] pcpu_alloc+0x4e2/0x1240 [ 2512.751401] __percpu_counter_init+0x10d/0x2d0 [ 2512.752511] io_uring_alloc_task_context+0xcc/0x6a0 [ 2512.753730] ? io_import_iovec+0x1120/0x1120 [ 2512.754803] ? lock_downgrade+0x6d0/0x6d0 [ 2512.755812] ? do_raw_spin_lock+0x121/0x260 [ 2512.756860] ? rwlock_bug.part.0+0x90/0x90 [ 2512.757897] __io_uring_add_tctx_node+0x2c6/0x520 [ 2512.759064] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2512.760329] ? alloc_fd+0x2e7/0x670 [ 2512.761228] io_uring_setup+0x1fbb/0x2980 [ 2512.762246] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2512.763474] ? wait_for_completion_io+0x270/0x270 [ 2512.764690] do_syscall_64+0x33/0x40 [ 2512.765603] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2512.766848] RIP: 0033:0x7f8bb9614b19 [ 2512.767748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2512.772215] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2512.774057] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2512.775778] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2512.777562] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2512.779280] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2512.781021] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:18:55 executing program 5: getxattr(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000340)={0x0, 0xb9ea}, &(0x7f0000860000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = syz_io_uring_complete(r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000300)=0x2, 0x4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xc0683, 0x0) io_uring_enter(r6, 0x1d6e, 0x98f5, 0x1, &(0x7f0000000140)={[0x3]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000000000000002e2f66696c6530005dea1a6b5ed46aaf83f62188c2c28a1b87cc21779d6061ce5cf529a4a2c966eee54a5be7b61ae4c3261200004b5122"]) r8 = syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x101400) mmap$IORING_OFF_SQ_RING(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x300000f, 0x30, r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r9, &(0x7f00000002c0)=ANY=[], 0xee) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r9, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000240)=[r0, r6, 0xffffffffffffffff, r7, r2, r9], 0x6) [ 2512.834392] FAULT_INJECTION: forcing a failure. [ 2512.834392] name failslab, interval 1, probability 0, space 0, times 0 [ 2512.837302] CPU: 0 PID: 16916 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2512.838991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2512.841010] Call Trace: [ 2512.841663] dump_stack+0x107/0x167 [ 2512.842549] should_fail.cold+0x5/0xa [ 2512.843487] ? create_object.isra.0+0x3a/0xa20 [ 2512.844600] should_failslab+0x5/0x20 [ 2512.845533] kmem_cache_alloc+0x5b/0x310 [ 2512.846527] create_object.isra.0+0x3a/0xa20 [ 2512.847589] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2512.848827] kmem_cache_alloc+0x159/0x310 [ 2512.849854] vm_area_dup+0x78/0x290 [ 2512.850744] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2512.851865] ? lock_downgrade+0x6d0/0x6d0 [ 2512.852869] ? copy_page_range+0x24e9/0x3810 [ 2512.853956] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2512.855086] ? avc_has_extended_perms+0xf40/0xf40 [ 2512.856258] ? vm_area_alloc+0x110/0x110 [ 2512.857254] ? find_held_lock+0x2c/0x110 [ 2512.858255] ? selinux_vm_enough_memory+0x114/0x180 [ 2512.859441] ? selinux_sb_statfs+0x250/0x250 [ 2512.860508] ? percpu_counter_add_batch+0x8b/0x140 [ 2512.861684] ? __vm_enough_memory+0x184/0x360 [ 2512.862774] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 2512.863997] copy_process+0x298b/0x78b0 [ 2512.864994] ? __cleanup_sighand+0xb0/0xb0 [ 2512.866032] ? _copy_from_user+0xfb/0x1b0 [ 2512.867044] kernel_clone+0xe7/0x980 [ 2512.867926] ? __lockdep_reset_lock+0x180/0x180 [ 2512.869061] ? create_io_thread+0xf0/0xf0 [ 2512.870069] ? ksys_write+0x21a/0x260 [ 2512.870995] ? lock_downgrade+0x6d0/0x6d0 [ 2512.871982] __do_sys_clone3+0x1e5/0x320 [ 2512.872967] ? __do_sys_clone+0x110/0x110 [ 2512.873993] ? rcu_read_lock_any_held+0x75/0xa0 [ 2512.875091] ? vfs_write+0x354/0xb10 [ 2512.875973] ? fput_many+0x2f/0x1a0 [ 2512.876839] ? ksys_write+0x1a9/0x260 [ 2512.877750] ? __ia32_sys_read+0xb0/0xb0 [ 2512.878728] do_syscall_64+0x33/0x40 [ 2512.879613] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2512.880825] RIP: 0033:0x7f2b50818b19 [ 2512.881719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2512.886090] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2512.887895] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2512.889596] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2512.891289] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2512.892982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2512.894688] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:18:55 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) [ 2512.929432] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. 06:18:55 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 49) [ 2512.964937] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2512.966905] CPU: 1 PID: 16920 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2512.968485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2512.970368] Call Trace: [ 2512.970973] dump_stack+0x107/0x167 [ 2512.971811] sysfs_warn_dup.cold+0x1c/0x29 [ 2512.972779] sysfs_do_create_link_sd+0x122/0x140 [ 2512.973873] sysfs_create_link+0x5f/0xc0 [ 2512.974804] device_add+0x703/0x1c50 [ 2512.975658] ? devlink_add_symlinks+0x970/0x970 [ 2512.976721] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2512.977925] wiphy_register+0x1da6/0x2850 [ 2512.978878] ? wiphy_unregister+0xb90/0xb90 [ 2512.979868] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2512.981076] ieee80211_register_hw+0x23c5/0x38b0 [ 2512.982161] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2512.983242] ? net_generic+0xdb/0x2b0 [ 2512.984110] ? lockdep_init_map_type+0x2c7/0x780 [ 2512.985191] ? memset+0x20/0x50 [ 2512.985942] ? __hrtimer_init+0x12c/0x270 [ 2512.986887] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2512.988034] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2512.989092] ? hwsim_new_radio_nl+0x967/0x1080 [ 2512.990118] ? memcpy+0x39/0x60 [ 2512.990879] hwsim_new_radio_nl+0x991/0x1080 [ 2512.991902] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2512.993094] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2512.994614] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2512.996083] genl_family_rcv_msg_doit+0x22d/0x330 [ 2512.997210] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2512.998728] ? cap_capable+0x1cd/0x230 [ 2512.999642] ? ns_capable+0xe2/0x110 [ 2513.000508] genl_rcv_msg+0x36a/0x5a0 [ 2513.001403] ? genl_get_cmd+0x480/0x480 [ 2513.002320] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2513.003518] ? lock_release+0x680/0x680 [ 2513.004436] ? __lockdep_reset_lock+0x180/0x180 [ 2513.005527] netlink_rcv_skb+0x14b/0x430 [ 2513.006464] ? genl_get_cmd+0x480/0x480 [ 2513.007384] ? netlink_ack+0xab0/0xab0 [ 2513.008296] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2513.009358] ? is_vmalloc_addr+0x7b/0xb0 [ 2513.010297] genl_rcv+0x24/0x40 [ 2513.011057] netlink_unicast+0x54e/0x800 [ 2513.012002] ? netlink_attachskb+0x870/0x870 [ 2513.013042] netlink_sendmsg+0x90f/0xe00 [ 2513.013988] ? netlink_unicast+0x800/0x800 [ 2513.014982] ? netlink_unicast+0x800/0x800 [ 2513.015959] __sock_sendmsg+0x154/0x190 [ 2513.016879] ____sys_sendmsg+0x70d/0x870 [ 2513.017828] ? sock_write_iter+0x3d0/0x3d0 [ 2513.018805] ? do_recvmmsg+0x6d0/0x6d0 [ 2513.019718] ? __lockdep_reset_lock+0x180/0x180 [ 2513.020798] ___sys_sendmsg+0xf3/0x170 [ 2513.021709] ? sendmsg_copy_msghdr+0x160/0x160 [ 2513.022770] ? __fget_files+0x2cf/0x520 [ 2513.023688] ? lock_downgrade+0x6d0/0x6d0 [ 2513.024648] ? __lockdep_reset_lock+0x180/0x180 [ 2513.025730] ? futex_exit_release+0x220/0x220 [ 2513.026773] ? __fget_files+0x2f8/0x520 [ 2513.027699] ? __fget_light+0xea/0x290 [ 2513.028609] __sys_sendmsg+0xe5/0x1b0 [ 2513.029495] ? __sys_sendmsg_sock+0x40/0x40 [ 2513.030489] ? __do_sys_futex+0x2bb/0x480 [ 2513.031479] do_syscall_64+0x33/0x40 [ 2513.032340] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2513.033527] RIP: 0033:0x7fc157d92b19 [ 2513.034385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.038631] RSP: 002b:00007fc155308188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2513.040392] RAX: ffffffffffffffda RBX: 00007fc157ea5f60 RCX: 00007fc157d92b19 [ 2513.042044] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2513.043692] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2513.045345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2513.046990] R13: 00007fff9c3d972f R14: 00007fc155308300 R15: 0000000000022000 06:18:55 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d737f00000000000000998c0297a2dc73e6a445f32387489d11ff5ea5fc9105d41fe93c7f36f097cc0a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52df9679b84e3775122b42c344b557441882e317148246d6688bc9c1c5ac99", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r0, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) dup3(0xffffffffffffffff, r1, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:18:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:18:55 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2513.218801] FAULT_INJECTION: forcing a failure. [ 2513.218801] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.221704] CPU: 1 PID: 16936 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2513.223310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.225234] Call Trace: [ 2513.225848] dump_stack+0x107/0x167 [ 2513.226699] should_fail.cold+0x5/0xa [ 2513.227586] ? create_object.isra.0+0x3a/0xa20 [ 2513.228645] should_failslab+0x5/0x20 [ 2513.229536] kmem_cache_alloc+0x5b/0x310 [ 2513.230483] create_object.isra.0+0x3a/0xa20 [ 2513.231511] kmemleak_alloc_percpu+0xa0/0x100 [ 2513.232554] pcpu_alloc+0x4e2/0x1240 [ 2513.233444] __percpu_counter_init+0x10d/0x2d0 [ 2513.234506] io_uring_alloc_task_context+0xcc/0x6a0 [ 2513.235662] ? io_import_iovec+0x1120/0x1120 [ 2513.236685] ? lock_downgrade+0x6d0/0x6d0 [ 2513.237651] ? do_raw_spin_lock+0x121/0x260 [ 2513.238648] ? rwlock_bug.part.0+0x90/0x90 [ 2513.239632] __io_uring_add_tctx_node+0x2c6/0x520 [ 2513.240749] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2513.241968] ? alloc_fd+0x2e7/0x670 [ 2513.242825] io_uring_setup+0x1fbb/0x2980 [ 2513.243795] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2513.244966] ? wait_for_completion_io+0x270/0x270 [ 2513.246136] do_syscall_64+0x33/0x40 [ 2513.246999] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2513.248192] RIP: 0033:0x7f8bb9614b19 [ 2513.249062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.253324] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2513.255084] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2513.256735] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2513.258396] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2513.260044] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2513.261709] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:18:55 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) 06:18:55 executing program 1: r0 = epoll_create(0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000008}) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000002b00)={0x10}) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r3, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000003980)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x2, 0x0, 0x3a, @loopback, @loopback, 0x20, 0x1, 0x10ba, 0x2}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002d40)=@IORING_OP_WRITE={0x17, 0x4, 0x4004, @fd_index=0x8, 0x3, &(0x7f0000003900)="7bfefb0bdbce098cfb9a86b0d7957356a78ae435165120d153475bb313e2b067904b02765737f62984c8a02f461eb2471b65a0d573c49858197a74132547093501b45aee88b75a62831ee2603bb7b613f2684f12363b", 0x56, 0x10}, 0x3) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) openat(r7, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) name_to_handle_at(r7, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, &(0x7f00000001c0), 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r6, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) sendmmsg(r3, &(0x7f0000003780)=[{{&(0x7f0000000180)=@can={0x1d, r4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="3b07bebab04b34757f3bb5d016aca28272ee77fe28498e6692f8dba1c08122ae69df45c0f32b022551fe89f0fb80b8b845cfcc5967e9bc1c36fc07437391d1467b27a4e869fba2de696e74b54db24cb9f0b788b4f4a38c796c54ab6539a581eb0393c4ca383482aa9444102d530f40f3b43c9f00b856b7b5aff8a15bb7135bf4cd9ab1756764c8e8faff564d0609a9e789e6a537e9c6173d977ddbc32b9596d86052cbfaa41e7ef7aed08e18859808e6f86bb19de3e75542ca1dc8aafbcd504d81426f49315306aa69ac27b28d8a0dcee7cc69549136179eebf28b75aec8", 0xde}], 0x1}}, {{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @empty}, 0x3, 0x1, 0x2, 0x4}}, 0x80, &(0x7f00000028c0)}}, {{&(0x7f0000002980)=@pppoe={0x18, 0x0, {0x0, @remote, 'batadv_slave_0\x00'}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002a00)="997d4853f2c88772b2a93e6a85354e7e110d05de64a8ac81fe6e79cd684af9585e200e1474d6335efe8a24147f9d11f90c8ac26d43109c0b7bda273831ea429b2392e9fa61af8c21aeedb83396ef46296cf8957c8e78327a77fe153ae0f41408459a4bfb483e8073285c63ac6775d5efe8fac65cd23853be08ff0b20be16711147104c3e371098", 0x87}], 0x1, &(0x7f0000002b00)}}, {{&(0x7f0000002b40)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x3, @loopback}, 0x1, 0x4, 0x4, 0x3}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002bc0)="44247dcf8056198af988a7f189531dce114d27b284975f2e228cd75e56367ece864e13dbacfbaf3a19803a6ba934c2756b16c6403f605e426640fdb495df40f3d871a2e7b963286fe86b84268c1d7a", 0x4f}, {&(0x7f0000002c40)="f96cd6e0cabe469c6e3188641f0a37554b566c038bbc74fc876c73f87d090ea5d30968cdc0152846e0cd1abd2140211f65de7d821e93ef536544ca96d8a3ca918b19fbc0a0d76ae126a0d882f069822bb3170ae3cc630ac6d6e892be15ccc4252ee3fa1c270f54200bca7748c0d52a81a4cdb8f659b49cbd52a0885e34c2b431e01c95f3cfbb3b6db8c078275d7b362a70c04dd9b32774ec726976b038", 0x9d}, {&(0x7f0000002d00)="cd425af48ff9af1432bef9ed1f920da02be48dde5af3dd74418b3e57acb820f040656b471a15a7d43fb0fdc517360597167bd9486a", 0x35}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)="7f20c54417a9291447229b29050b2321f3c41d7e1403b2420a11dcf9b4ef78fe78716fa1f7d66446de6145433ee17d39afc43ad03b047cee0a32dbe0fbe6dcf4ed8b2eb3a2a597f0563952ecd47844e85686073dabb319b277d375a3988b8e94fcec", 0x62}], 0x5, &(0x7f0000002e80)=[{0x20, 0x10d, 0x9, "20a6b29361e2cd1b4189782733"}, {0x38, 0x101, 0x100, "197b7448477fb7efa1d463a5c8fccdc2a8e5ee6000658dfa46694d609ba6c2a6456720b826a6"}], 0x58}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f00)="86614fef1cddb7dc5775d2e61f1e389dccfbe77c7953838d09e7d46d248eeb717e3a476a94f03426b1cc725cd4a6b423591e40fcb056d60c95f5fbbf056cad04f0a32a9ba5ce635d6f45e9d2ec5dc6b3648ddcc712ae52e6c3046b1a0488dafc7af7c1373347c3f45a26e2b30ea5e14471bf2615a12d9f5ee7637fde77c7b6941fc656bb60685aceea306ad1567ed588f8ed89134e395467b8593d1373bb117cc67e52929f9053d326402279aaccf21d03ebf27a11b939b6a14d206ed5efc573ea282d0c42c62f8cde91532a9b9879315a4ea3fb", 0xd4}], 0x1, &(0x7f0000000800)=[{0xa8, 0x1, 0x1, "cbb1d5f071d0b4f2b06cabe30979d1659a83be0e3441ce7f4a1b878a6dc5792344c4d957741d6a70fb55b53d055f9f5d108ff3479903f74e54d688a16450e405cb49dd5e4a64f27a9282f152109f62346391a44455327c44bb1daad036c727d7365665f2945e367e5af3c721dfe40d381e6b6009d11630be102f6894f12325dab67a3a233e582d7b1c52bffc0fcabc52b5c72cf7d82718"}, {0x68, 0x0, 0x0, "4d046f940b13a072a2d68a30e8a6d484329ed576102e0d9b2d30e88c836c9e73c6d17d5f8b9c8ebebcbc3438ff2926f09399b53ab958df4961153dc74a0621b62efd8bedb3eda6194b99e04591bd494e6f0c6d880a6d"}, {0xf8, 0x0, 0x7, "3dae2de729baab7f5122da425e6c4052abed0504c1c4e9159c4984d00053ba91a8066df962a7c0d0627b371dcecbe16f937b8be633c23a2b8a17aee9161fd27be1e688b6277246ede61cf70690190b1f46bd25a5c91c611b67e6961a0d6c25dc49800445bbbf768b246a0a6cdc8ace1d9e761d183ac3b48fcd679ca74133fc55fb223d6047e816dd2f680661ed0ba25409fec72c262d9aa0aa3d317b491127e7a5fb53f8e2424de7ed899870a0d1f5591923a9a49a75f47687c40ba0b053fe5b46a0a1099b31a7433834d94aff20d86c39d48074f76d1a8eaf40e8fa7b3bd97fcf464ea1"}, {0x0, 0x29, 0x3ff, "6e78eefd39ebd0228468f590c06a41f0843c1aa2ec0f3d3f13016678aafdb925f0a387d7c4ffe71903b55546e90c0e0707b806d650c8d89bd750cd2481430f720bdffafdc185eeabdd043d9a6e9127a8df148b514c904739bca3f2e28de99c149c66404edd3cf3798f87c603101a4dc791f2d015b6aa38de62be5f2f2acdad324d293509fae24ca4a45419aedde2c6c3dcb0329d8bf7d960a827596d6328118581601990b82f412b164b"}], 0xf8}}, {{&(0x7f0000003240)=@l2tp6={0xa, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x3}, 0x80, &(0x7f0000003700)=[{&(0x7f00000032c0)="d9b084a009d074c757f49ed92e2180c45d61a2beea8be8824ee214e893c4deecbe25ea92e54b7e58d7e8040c8e46152992ec7aaf0c9496a7af03f4e13e386bfd90b9f40e7bd642ba7311548d5625af271a716e7677ed2f467bcacf7c3d0098b0b8b2c127e5bcf5362ff659bccc4ec64af010eb7207a89b57b545133a0a9112afd7d0e600cf93f6f5ea3b82abbf0a440b6cfb479e438b", 0x96}, {&(0x7f0000003380)="4158953ded65d0cc5645f3d6eb3167482c1fa0c01d91fc4dd1dd7e75b98bea518525e855929e47be8c3377e7a9634ddaffd787f6256f641818e6831d8b39750bebb032079d8222a0630dd431b613a30e9f7b1d152c80411eff36749ceef3d851572c9e92d0116ca17b12144c3b63363eeb0df4fb82f3493cad34b73ede4685f66590cb0916ae0331fcd4688f67ea731fdca1d0a5c7fcdd15e4157d2b9b8637b1b7316621cc0e6030b3a2a8ac98824a95561c407a1e7efcbbda07631a", 0xbc}, {&(0x7f0000003440)="28e26e1f9044fb18dc5048ab24a5d559012649209f1743f61cf8046d15eac1b7fa190bf60604c2afd9aca36f4f74a1fdfe751576b642afe17ab93f7a7b5a7929b825660dc26df35b2b3f7728", 0x4c}, {&(0x7f00000034c0)="70b6022f4583240a5dd65c7050121ca9570c124800bc270328165b3e025bbe3a8f300c459b737afca9b39b160195851f806514c38c17c38d0b0b594ce2d818ae76d6", 0x42}, {&(0x7f0000003540)="0f360588838d6eaf283bb4dad035cc16bdc069b2bc67115e5b42ea4781f6f1a1930958d678422c6512a78104d747873f9b3fbb272287ad558fab181a056a5cfee597c5eeeb2b7810410f3731c2c0d67a91ead6325737cc3c440c14b64b30792fd7dcec1a1cf7fb6d78d8c2cde5e67b1403dbb457ad3f7b11338fb1b641c6bb9c401009597a7e0f32360c27233b150fdce47d04011b078beab89343999fff259a3c1c2e559b535caf04e61c5100f25754af213f409a6fc7bb51bd15ec3b0db2bd3272950ecc9ab5", 0xc7}, {&(0x7f0000003640)="12bd3a857f6c451bd4c20f9884550d0852d84d66cf154f8372f33902cd45aaf615efd543474f2d8629d479999be6948c7b0abce8c083965ccff90753f78f6e215c6ab82ee811b57506d2dfc981449b5aa2fd07efd58c334fbcb7839ae68717e62c3bcca6de473331501662abba130e75f55b04afcf7d650aa3d340090acae0c8202306b69d639b68ba6651f900aac655b346d13eddeca6122cf4328eab682b38e5660d78cf0bffe9488e962e0b48a9db0e01b9f3", 0xb4}], 0x6}}], 0x6, 0x20000090) [ 2513.323023] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2513.337879] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2513.339982] CPU: 1 PID: 16942 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2513.341598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.343522] Call Trace: [ 2513.344140] dump_stack+0x107/0x167 [ 2513.344994] sysfs_warn_dup.cold+0x1c/0x29 [ 2513.345992] sysfs_do_create_link_sd+0x122/0x140 [ 2513.347094] sysfs_create_link+0x5f/0xc0 [ 2513.348044] device_add+0x703/0x1c50 [ 2513.348919] ? devlink_add_symlinks+0x970/0x970 [ 2513.350011] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2513.351238] wiphy_register+0x1da6/0x2850 [ 2513.352214] ? wiphy_unregister+0xb90/0xb90 [ 2513.353247] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2513.354489] ieee80211_register_hw+0x23c5/0x38b0 [ 2513.355607] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2513.356728] ? net_generic+0xdb/0x2b0 [ 2513.357628] ? lockdep_init_map_type+0x2c7/0x780 [ 2513.358729] ? memset+0x20/0x50 [ 2513.359495] ? __hrtimer_init+0x12c/0x270 [ 2513.360462] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2513.361650] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2513.362725] ? hwsim_new_radio_nl+0x967/0x1080 [ 2513.363780] ? memcpy+0x39/0x60 [ 2513.364552] hwsim_new_radio_nl+0x991/0x1080 [ 2513.365587] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2513.366811] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2513.368341] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2513.369865] genl_family_rcv_msg_doit+0x22d/0x330 [ 2513.371008] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2513.372542] ? cap_capable+0x1cd/0x230 [ 2513.373471] ? ns_capable+0xe2/0x110 [ 2513.374340] genl_rcv_msg+0x36a/0x5a0 [ 2513.375232] ? genl_get_cmd+0x480/0x480 [ 2513.376153] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2513.377366] ? lock_release+0x680/0x680 [ 2513.378289] ? __lockdep_reset_lock+0x180/0x180 [ 2513.379372] netlink_rcv_skb+0x14b/0x430 [ 2513.380313] ? genl_get_cmd+0x480/0x480 [ 2513.381245] ? netlink_ack+0xab0/0xab0 [ 2513.382157] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2513.383215] ? is_vmalloc_addr+0x7b/0xb0 [ 2513.384159] genl_rcv+0x24/0x40 [ 2513.384922] netlink_unicast+0x54e/0x800 [ 2513.385880] ? netlink_attachskb+0x870/0x870 [ 2513.386923] netlink_sendmsg+0x90f/0xe00 [ 2513.387872] ? netlink_unicast+0x800/0x800 [ 2513.388867] ? netlink_unicast+0x800/0x800 [ 2513.389855] __sock_sendmsg+0x154/0x190 [ 2513.390778] ____sys_sendmsg+0x70d/0x870 [ 2513.391722] ? sock_write_iter+0x3d0/0x3d0 [ 2513.392699] ? do_recvmmsg+0x6d0/0x6d0 [ 2513.393620] ? __lockdep_reset_lock+0x180/0x180 [ 2513.394706] ___sys_sendmsg+0xf3/0x170 [ 2513.395610] ? sendmsg_copy_msghdr+0x160/0x160 [ 2513.396676] ? __fget_files+0x2cf/0x520 [ 2513.397602] ? lock_downgrade+0x6d0/0x6d0 [ 2513.398559] ? finish_task_switch+0x126/0x5d0 [ 2513.399591] ? lock_downgrade+0x6d0/0x6d0 [ 2513.400562] ? __fget_files+0x2f8/0x520 [ 2513.401501] ? __fget_light+0xea/0x290 [ 2513.402411] __sys_sendmsg+0xe5/0x1b0 [ 2513.403290] ? __sys_sendmsg_sock+0x40/0x40 [ 2513.404290] ? io_schedule_timeout+0x140/0x140 [ 2513.405379] do_syscall_64+0x33/0x40 [ 2513.406238] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2513.407418] RIP: 0033:0x7f277f764b19 [ 2513.408275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.412520] RSP: 002b:00007f277ccda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2513.414284] RAX: ffffffffffffffda RBX: 00007f277f877f60 RCX: 00007f277f764b19 [ 2513.415924] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 2513.417575] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2513.419217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2513.420859] R13: 00007fff5bc6ce3f R14: 00007f277ccda300 R15: 0000000000022000 [ 2513.517608] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2513.528628] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2513.530697] CPU: 0 PID: 16942 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2513.531938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.533403] Call Trace: [ 2513.533893] dump_stack+0x107/0x167 [ 2513.534567] sysfs_warn_dup.cold+0x1c/0x29 [ 2513.535345] sysfs_do_create_link_sd+0x122/0x140 [ 2513.536209] sysfs_create_link+0x5f/0xc0 [ 2513.536972] device_add+0x703/0x1c50 [ 2513.537678] ? devlink_add_symlinks+0x970/0x970 [ 2513.538528] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2513.539491] wiphy_register+0x1da6/0x2850 [ 2513.540286] ? wiphy_unregister+0xb90/0xb90 [ 2513.541119] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2513.542103] ieee80211_register_hw+0x23c5/0x38b0 [ 2513.543009] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2513.543867] ? net_generic+0xdb/0x2b0 [ 2513.544568] ? lockdep_init_map_type+0x2c7/0x780 [ 2513.545416] ? memset+0x20/0x50 [ 2513.546002] ? __hrtimer_init+0x12c/0x270 [ 2513.546754] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2513.547683] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2513.548503] ? hwsim_new_radio_nl+0x967/0x1080 [ 2513.549320] ? memcpy+0x39/0x60 [ 2513.549933] hwsim_new_radio_nl+0x991/0x1080 [ 2513.550762] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2513.551716] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2513.552866] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2513.554036] genl_family_rcv_msg_doit+0x22d/0x330 [ 2513.554903] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2513.556071] ? cap_capable+0x1cd/0x230 [ 2513.556815] ? ns_capable+0xe2/0x110 [ 2513.557518] genl_rcv_msg+0x36a/0x5a0 [ 2513.558209] ? genl_get_cmd+0x480/0x480 [ 2513.558918] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2513.559833] ? lock_release+0x680/0x680 [ 2513.560528] ? __lockdep_reset_lock+0x180/0x180 [ 2513.561362] netlink_rcv_skb+0x14b/0x430 [ 2513.562073] ? genl_get_cmd+0x480/0x480 [ 2513.562802] ? netlink_ack+0xab0/0xab0 [ 2513.563517] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2513.564330] ? is_vmalloc_addr+0x7b/0xb0 [ 2513.565059] genl_rcv+0x24/0x40 [ 2513.565668] netlink_unicast+0x54e/0x800 [ 2513.566405] ? netlink_attachskb+0x870/0x870 [ 2513.567205] netlink_sendmsg+0x90f/0xe00 [ 2513.567948] ? netlink_unicast+0x800/0x800 [ 2513.568722] ? netlink_unicast+0x800/0x800 [ 2513.569479] __sock_sendmsg+0x154/0x190 [ 2513.570208] ____sys_sendmsg+0x70d/0x870 [ 2513.570934] ? sock_write_iter+0x3d0/0x3d0 [ 2513.571657] ? do_recvmmsg+0x6d0/0x6d0 [ 2513.572348] ? perf_trace_lock+0x2bd/0x490 [ 2513.573089] ? __lockdep_reset_lock+0x180/0x180 [ 2513.573906] ___sys_sendmsg+0xf3/0x170 [ 2513.574589] ? sendmsg_copy_msghdr+0x160/0x160 [ 2513.575392] ? __fget_files+0x2cf/0x520 [ 2513.576090] ? lock_downgrade+0x6d0/0x6d0 [ 2513.576820] ? futex_exit_release+0x220/0x220 [ 2513.577605] ? lock_downgrade+0x6d0/0x6d0 [ 2513.578338] ? __fget_files+0x2f8/0x520 [ 2513.579046] ? __fget_light+0xea/0x290 [ 2513.579737] __sys_sendmsg+0xe5/0x1b0 [ 2513.580399] ? __sys_sendmsg_sock+0x40/0x40 [ 2513.581161] ? __do_sys_futex+0x2bb/0x480 [ 2513.581922] do_syscall_64+0x33/0x40 [ 2513.582570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2513.583460] RIP: 0033:0x7f277f764b19 [ 2513.584111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.587294] RSP: 002b:00007f277ccda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2513.588613] RAX: ffffffffffffffda RBX: 00007f277f877f60 RCX: 00007f277f764b19 [ 2513.589845] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 2513.591069] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2513.592298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2513.593528] R13: 00007fff5bc6ce3f R14: 00007f277ccda300 R15: 0000000000022000 [ 2513.682562] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2513.688458] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2513.690875] CPU: 1 PID: 16946 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2513.692250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.693900] Call Trace: [ 2513.694434] dump_stack+0x107/0x167 [ 2513.695168] sysfs_warn_dup.cold+0x1c/0x29 [ 2513.696012] sysfs_do_create_link_sd+0x122/0x140 [ 2513.696964] sysfs_create_link+0x5f/0xc0 [ 2513.697785] device_add+0x703/0x1c50 [ 2513.698532] ? devlink_add_symlinks+0x970/0x970 [ 2513.699461] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2513.700507] wiphy_register+0x1da6/0x2850 [ 2513.701349] ? wiphy_unregister+0xb90/0xb90 [ 2513.702222] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2513.703275] ieee80211_register_hw+0x23c5/0x38b0 [ 2513.704235] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2513.705193] ? net_generic+0xdb/0x2b0 [ 2513.705954] ? lockdep_init_map_type+0x2c7/0x780 [ 2513.706900] ? memset+0x20/0x50 [ 2513.707567] ? __hrtimer_init+0x12c/0x270 [ 2513.708406] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2513.709421] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2513.710335] ? hwsim_new_radio_nl+0x967/0x1080 [ 2513.711237] ? memcpy+0x39/0x60 [ 2513.711899] hwsim_new_radio_nl+0x991/0x1080 [ 2513.712769] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2513.713817] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2513.715124] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2513.716423] genl_family_rcv_msg_doit+0x22d/0x330 [ 2513.717394] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2513.718701] ? cap_capable+0x1cd/0x230 [ 2513.719484] ? ns_capable+0xe2/0x110 [ 2513.720236] genl_rcv_msg+0x36a/0x5a0 [ 2513.720990] ? genl_get_cmd+0x480/0x480 [ 2513.721784] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2513.722818] ? lock_release+0x680/0x680 [ 2513.723609] ? __lockdep_reset_lock+0x180/0x180 [ 2513.724543] netlink_rcv_skb+0x14b/0x430 [ 2513.725351] ? genl_get_cmd+0x480/0x480 [ 2513.726136] ? netlink_ack+0xab0/0xab0 [ 2513.726914] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2513.727823] ? is_vmalloc_addr+0x7b/0xb0 [ 2513.728633] genl_rcv+0x24/0x40 [ 2513.729293] netlink_unicast+0x54e/0x800 [ 2513.730108] ? netlink_attachskb+0x870/0x870 [ 2513.730999] netlink_sendmsg+0x90f/0xe00 [ 2513.731814] ? netlink_unicast+0x800/0x800 [ 2513.732663] ? netlink_unicast+0x800/0x800 [ 2513.733510] __sock_sendmsg+0x154/0x190 [ 2513.734310] ____sys_sendmsg+0x70d/0x870 [ 2513.735121] ? sock_write_iter+0x3d0/0x3d0 [ 2513.735948] ? do_recvmmsg+0x6d0/0x6d0 [ 2513.736727] ? __lockdep_reset_lock+0x180/0x180 [ 2513.737680] ___sys_sendmsg+0xf3/0x170 [ 2513.738448] ? sendmsg_copy_msghdr+0x160/0x160 [ 2513.739368] ? __fget_files+0x2cf/0x520 [ 2513.740163] ? lock_downgrade+0x6d0/0x6d0 [ 2513.740982] ? putname+0xe1/0x120 [ 2513.741686] ? futex_exit_release+0x220/0x220 [ 2513.742592] ? __fget_files+0x2f8/0x520 [ 2513.743395] ? __fget_light+0xea/0x290 [ 2513.744170] __sys_sendmsg+0xe5/0x1b0 [ 2513.744928] ? __sys_sendmsg_sock+0x40/0x40 [ 2513.745789] ? __do_sys_futex+0x2bb/0x480 [ 2513.746647] do_syscall_64+0x33/0x40 [ 2513.747390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2513.748416] RIP: 0033:0x7f277f764b19 [ 2513.749163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.752779] RSP: 002b:00007f277ccb9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2513.754303] RAX: ffffffffffffffda RBX: 00007f277f878020 RCX: 00007f277f764b19 [ 2513.755712] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 2513.757132] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2513.758546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2513.759953] R13: 00007fff5bc6ce3f R14: 00007f277ccb9300 R15: 0000000000022000 06:19:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e23, 0xffffffff, @mcast2, 0x7}}, {{0xa, 0x4e24, 0x81, @empty, 0x1ff}}}, 0x108) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./mnt\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000000700)='./mnt/file0\x00', 0x0, &(0x7f00000001c0)={{}, {}, [], {}, [{0x8, 0x0, 0xee00}, {}, {}]}, 0x3c, 0x0) unlinkat(r1, &(0x7f0000000000)='./mnt/file0\x00', 0x0) 06:19:09 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x13822, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="49001800000000002e2f2b8cb0d98d007f5d20722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:19:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) lseek(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$inet6(r2, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002b00)=[{0x0}, {0x0}, {&(0x7f0000002780)}, {0x0}, {0x0}, {&(0x7f0000002a40)}], 0x6}}], 0x2, 0x14) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040)=0x7fffffff, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) lseek(r3, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 06:19:09 executing program 5: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f0000019340)=""/102400, 0x19000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) 06:19:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 38) 06:19:09 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 06:19:09 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 50) 06:19:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2527.529392] FAULT_INJECTION: forcing a failure. [ 2527.529392] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.531344] FAULT_INJECTION: forcing a failure. [ 2527.531344] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.532532] CPU: 0 PID: 16956 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2527.532552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2527.538308] Call Trace: [ 2527.539038] dump_stack+0x107/0x167 [ 2527.540049] should_fail.cold+0x5/0xa [ 2527.541124] ? anon_vma_clone+0xdc/0x590 [ 2527.542254] should_failslab+0x5/0x20 [ 2527.543325] kmem_cache_alloc+0x5b/0x310 [ 2527.544451] anon_vma_clone+0xdc/0x590 [ 2527.545545] anon_vma_fork+0x82/0x640 [ 2527.546590] ? __vm_enough_memory+0x184/0x360 [ 2527.547824] copy_process+0x72c9/0x78b0 [ 2527.548964] ? __cleanup_sighand+0xb0/0xb0 [ 2527.550157] ? _copy_from_user+0xfb/0x1b0 [ 2527.551301] kernel_clone+0xe7/0x980 [ 2527.552322] ? __lockdep_reset_lock+0x180/0x180 [ 2527.553592] ? create_io_thread+0xf0/0xf0 [ 2527.554596] ? ksys_write+0x21a/0x260 [ 2527.555497] ? lock_downgrade+0x6d0/0x6d0 [ 2527.556501] __do_sys_clone3+0x1e5/0x320 [ 2527.557476] ? __do_sys_clone+0x110/0x110 [ 2527.558496] ? rcu_read_lock_any_held+0x75/0xa0 [ 2527.559610] ? vfs_write+0x354/0xb10 [ 2527.560501] ? fput_many+0x2f/0x1a0 [ 2527.561390] ? ksys_write+0x1a9/0x260 [ 2527.562311] ? __ia32_sys_read+0xb0/0xb0 [ 2527.563296] do_syscall_64+0x33/0x40 [ 2527.564195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2527.565432] RIP: 0033:0x7f2b50818b19 [ 2527.566330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2527.570764] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2527.572592] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2527.574304] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2527.575988] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2527.577680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2527.579348] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2527.581074] CPU: 1 PID: 16963 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2527.582053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2527.583189] Call Trace: [ 2527.583560] dump_stack+0x107/0x167 [ 2527.584066] should_fail.cold+0x5/0xa [ 2527.584594] ? io_wq_create+0xeb/0xc00 [ 2527.585141] should_failslab+0x5/0x20 [ 2527.585673] __kmalloc+0x72/0x390 [ 2527.586159] io_wq_create+0xeb/0xc00 [ 2527.586676] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2527.587376] ? io_import_iovec+0x1120/0x1120 [ 2527.587982] ? io_apoll_task_func+0x2d0/0x2d0 [ 2527.588596] ? __io_req_find_next+0x300/0x300 [ 2527.589228] ? do_raw_spin_lock+0x121/0x260 [ 2527.589828] ? rwlock_bug.part.0+0x90/0x90 [ 2527.590419] __io_uring_add_tctx_node+0x2c6/0x520 [ 2527.591080] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2527.591794] ? alloc_fd+0x2e7/0x670 [ 2527.592306] io_uring_setup+0x1fbb/0x2980 [ 2527.592880] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2527.593585] ? wait_for_completion_io+0x270/0x270 [ 2527.594262] do_syscall_64+0x33/0x40 [ 2527.594769] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2527.595467] RIP: 0033:0x7f8bb9614b19 [ 2527.595964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2527.598482] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2527.599519] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2527.600490] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2527.601473] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2527.602466] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2527.603446] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:19:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x220, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x6}, 0xa521}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x9286, 0x0, 0x0, 0xa6219d3}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="20010000100001000000000000000000ff020000000000000000000000000001fc0000000000000000000000000000000000000000000000000000005c000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ffffffff00000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000200000000000000000000000a000000000000000000000014000e00fe8000000000000000000000000000bb1c000400fdff4e214e220000200100"/216], 0x120}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x90100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="01005dda1d54000018", @ANYRES32=r0, @ANYBLOB="00000000000000002e2b66696c6530004f3373c2f9c62dd629892567ceb0da43aa021b9f067f2c0d1cf013c370092fc4b673b3f47e686d7095f4f90732ad48aa233aaf89ea32"]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000000)=""/128) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) write$binfmt_script(r3, &(0x7f0000000580)={'#! ', './file0', [{0x20, '#\xd9:'}, {0x20, 'trusted.overlay.redirect\x00'}, {0x20, '\x00'}], 0xa, "62a7ec04aa65f7f22a8d5734f016d3e31c890b8aabcc7f8973fdceff4590864a2d8d9e6a89681ed2e5d88c5baad64e1cda855aecf80c9e217646c765a87135cddb1b941d8ce04478f095e7f4de5323d694b94433c369716187e022f8bef64b92532a11815705af6230bcf201a541e2d84e67b68111f00d7d47f2e38562ce4f80365fa454a5911cb84141175bf89a90808a6d76f8a3e59d2ceaf6c107a1c10767b1e374b0a426618e23a645c09c4469ee169d2e63627dc403940c1caede71801cedc4e1e56dde8313ee771bd24282265f92913a074561b40344726ce80128d24c928914a07288d3517fba78744c"}, 0x118) getsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 06:19:10 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 51) 06:19:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 39) 06:19:10 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) 06:19:10 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x7, 0x1, 0x1, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6c, 0x25}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x7d, 0x1f}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x3, 0x3a, 0x20, 0x60, 0x9}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x0, 0xff0f, 0x5, [0x0, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x0, 0x8, 0x3, 0x4}]}, 0x1, [{0x37, &(0x7f00000000c0)=@string={0x37, 0x3, "ca26f7dca890ceeac05480163dfd912fb8bd4f9e2df2c7dbc34e10377f55b701300d304356d95a4120f568330f6ffa9f4581df8643"}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x20, 0x23, 0x10, {0x10, 0x9, "9ed24d9ad6363340e9854f8cdb1b"}}, &(0x7f00000001c0)={0x0, 0x3, 0xa1, @string={0xa1, 0x3, "a30700c94e5e7df9604333e823f19cd971698bad1dfa6027219e66bb4aeef8b0e2375ac6f5312c6c5303b979f0ba521601f517a18989eabc56c09cf2d2c64a05fb0961fc39e0d216e2f10d96d2f235fa9a1b82adc20177a83ebd6ef86cfa2b23757a4bc203fe3ed76454733f027bbd741160cc88f75a25388b75773292b0a18076d2d1f43e061e3130499ac13c8e7981b32c6a56c77a4dece5c4e6ae0566fc"}}}, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x40, 0x7, 0x16, "f5dfcf12f463bc4902cd47197c4076bcaec46a84a816"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000380)={0x20, 0x0, 0xc7, {0xc5, "3ab7a1d725a202e0576807aec7fb28e14ceca7831414cda2894a7afbb3b9270873a13e571302778d5c98732fcd6e8a175321fb4fcdea0c8fab8c401c8535a9291b61550a1a60c289c5b491faaa51cf50291113646d258fbfa0bb4a780c4bfa76fa22c5fe27bc1cd6924352a54fa909936eddcc625e5b3249c81f9ec1973847ae83c0a2456714b999bfcd9cc714528fabde278dfa313dc9f689de72f06ff902cdba35b7a6bbdb636606dc6d754c0f8e2f8b9ef9170084a2ec62ad66472f1ebd1ff308101734"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x3f}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x88}}) sendto$unix(0xffffffffffffffff, &(0x7f00000004c0)="8f48b49060446f6fdec0a238e4133b7250b76ef37f3904b53c01a74c554206ef484ad55220b54a2e6b6b3d71a88a044e2a98", 0x32, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x141080, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, 0x1, &(0x7f0000001680)=[{&(0x7f0000000680)="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", 0x69f}], 0x80, &(0x7f0000007640)={[{@shortname_winnt}, {@shortname_lower}, {@rodir}, {@fat=@quiet}, {@rodir}, {@fat=@check_normal}], [{@fowner_eq}]}) 06:19:10 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x10, 0x5, 0x0, 0x800}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3cf568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d6f3a1652bc9679b8", @ANYRES32, @ANYBLOB="09f60100000000000000a7ed000000000000002e2c2b8c8fd98df9"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000140), &(0x7f00000000c0), 0x5, &(0x7f0000ffe000/0x2000)=nil, 0x1) [ 2527.794795] FAULT_INJECTION: forcing a failure. [ 2527.794795] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.797710] CPU: 0 PID: 16984 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2527.799446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2527.801521] Call Trace: [ 2527.802183] dump_stack+0x107/0x167 [ 2527.803085] should_fail.cold+0x5/0xa [ 2527.804038] ? create_object.isra.0+0x3a/0xa20 [ 2527.805188] should_failslab+0x5/0x20 [ 2527.806133] kmem_cache_alloc+0x5b/0x310 [ 2527.807150] create_object.isra.0+0x3a/0xa20 [ 2527.808237] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2527.809507] kmem_cache_alloc+0x159/0x310 [ 2527.810536] anon_vma_clone+0xdc/0x590 [ 2527.811502] anon_vma_fork+0x82/0x640 [ 2527.812434] ? __vm_enough_memory+0x184/0x360 [ 2527.813549] copy_process+0x72c9/0x78b0 [ 2527.814567] ? __cleanup_sighand+0xb0/0xb0 [ 2527.815635] ? _copy_from_user+0xfb/0x1b0 [ 2527.816660] kernel_clone+0xe7/0x980 [ 2527.817588] ? __lockdep_reset_lock+0x180/0x180 [ 2527.818727] ? create_io_thread+0xf0/0xf0 [ 2527.819767] ? ksys_write+0x21a/0x260 [ 2527.820699] ? lock_downgrade+0x6d0/0x6d0 [ 2527.821731] __do_sys_clone3+0x1e5/0x320 [ 2527.822724] ? __do_sys_clone+0x110/0x110 [ 2527.823766] ? rcu_read_lock_any_held+0x75/0xa0 [ 2527.824898] ? vfs_write+0x354/0xb10 [ 2527.825817] ? fput_many+0x2f/0x1a0 [ 2527.826708] ? ksys_write+0x1a9/0x260 [ 2527.827632] ? __ia32_sys_read+0xb0/0xb0 [ 2527.828631] do_syscall_64+0x33/0x40 [ 2527.829537] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2527.830775] RIP: 0033:0x7f2b50818b19 [ 2527.831676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2527.836116] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2527.837964] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2527.839683] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2527.841414] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2527.843130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2527.844830] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2527.853262] udc-core: couldn't find an available UDC or it's busy [ 2527.854851] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2527.870329] FAULT_INJECTION: forcing a failure. [ 2527.870329] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.871847] CPU: 1 PID: 16990 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2527.872709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2527.873740] Call Trace: [ 2527.874074] dump_stack+0x107/0x167 [ 2527.874530] should_fail.cold+0x5/0xa [ 2527.875004] ? create_object.isra.0+0x3a/0xa20 [ 2527.875572] should_failslab+0x5/0x20 [ 2527.876046] kmem_cache_alloc+0x5b/0x310 [ 2527.876096] loop5: detected capacity change from 0 to 1536 [ 2527.876549] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 2527.876576] create_object.isra.0+0x3a/0xa20 [ 2527.879055] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2527.879681] __kmalloc+0x16e/0x390 [ 2527.880123] io_wq_create+0xeb/0xc00 [ 2527.880588] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2527.881218] ? io_import_iovec+0x1120/0x1120 [ 2527.881761] ? io_apoll_task_func+0x2d0/0x2d0 [ 2527.882312] ? __io_req_find_next+0x300/0x300 [ 2527.882864] ? do_raw_spin_lock+0x121/0x260 [ 2527.883389] ? rwlock_bug.part.0+0x90/0x90 [ 2527.883909] __io_uring_add_tctx_node+0x2c6/0x520 [ 2527.884507] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2527.885148] ? alloc_fd+0x2e7/0x670 [ 2527.885611] io_uring_setup+0x1fbb/0x2980 [ 2527.886127] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2527.886749] ? wait_for_completion_io+0x270/0x270 [ 2527.886887] FAT-fs (loop5): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 2527.887365] do_syscall_64+0x33/0x40 [ 2527.887378] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2527.887397] RIP: 0033:0x7f8bb9614b19 [ 2527.891055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2527.893328] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2527.894260] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2527.895133] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2527.896002] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2527.896873] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2527.897760] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2528.408576] udc-core: couldn't find an available UDC or it's busy [ 2528.410262] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2542.020924] FAULT_INJECTION: forcing a failure. [ 2542.020924] name failslab, interval 1, probability 0, space 0, times 0 [ 2542.022386] CPU: 0 PID: 17009 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2542.023252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2542.024291] Call Trace: [ 2542.024629] dump_stack+0x107/0x167 [ 2542.025097] should_fail.cold+0x5/0xa [ 2542.025671] ? anon_vma_fork+0xf1/0x640 [ 2542.026318] should_failslab+0x5/0x20 [ 2542.026800] kmem_cache_alloc+0x5b/0x310 [ 2542.027316] anon_vma_fork+0xf1/0x640 [ 2542.027790] ? __vm_enough_memory+0x184/0x360 [ 2542.028359] copy_process+0x72c9/0x78b0 [ 2542.028880] ? __cleanup_sighand+0xb0/0xb0 [ 2542.029432] ? _copy_from_user+0xfb/0x1b0 [ 2542.029957] kernel_clone+0xe7/0x980 [ 2542.030426] ? __lockdep_reset_lock+0x180/0x180 [ 2542.031009] ? create_io_thread+0xf0/0xf0 [ 2542.031541] ? ksys_write+0x21a/0x260 [ 2542.032020] ? lock_downgrade+0x6d0/0x6d0 [ 2542.032542] __do_sys_clone3+0x1e5/0x320 [ 2542.033048] ? __do_sys_clone+0x110/0x110 [ 2542.033589] ? rcu_read_lock_any_held+0x75/0xa0 [ 2542.034169] ? vfs_write+0x354/0xb10 [ 2542.034636] ? fput_many+0x2f/0x1a0 [ 2542.035092] ? ksys_write+0x1a9/0x260 [ 2542.035569] ? __ia32_sys_read+0xb0/0xb0 [ 2542.036088] do_syscall_64+0x33/0x40 [ 2542.036565] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2542.037209] RIP: 0033:0x7f2b50818b19 [ 2542.037682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2542.039986] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2542.040939] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2542.041837] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2542.042724] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2542.043612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2542.044503] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:19:24 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1b) syncfs(0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000240)) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x12) write$9p(0xffffffffffffffff, &(0x7f00000000c0)="0fb865562069ab2f32beb83e263962827b00d7d8b791e504b65c5ed26e6688d67a9796c1aedca0de65d21b4796fd1b3df0ccedf9739e29f6b965de85433255da7945b7a842ba5fa3dbe88cd26fc9b1b807bc2d59e5a9f2c2bdaccdb839190141ba0151232669cb02b3b076251c024d73f501a54d959dac7cdb3fc324ab47f2a3e1ef12691eac5cab96860e948ea4", 0x8e) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1ed) getsockname(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0xfff, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r3) 06:19:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000780)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast1, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x100000001}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}, 0x0, 0x200}}]}, 0x13c}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x6, 0x402080) dup3(r1, r0, 0x80000) 06:19:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:19:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 40) 06:19:24 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) 06:19:24 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x13) getuid() keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='%\x00', 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, r1, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7db00000000000000002f5a000080d27896176b6eeade62d836e053289e95ed9ed36e47356d2d4ac843d840710a9c093dbdef473b34", @ANYRES32, @ANYBLOB="165a80020000d9d48f79f0b944458b00c2a94a4854412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf580c04edc083b1854fb95d5782cbcf6836405382080096006401010014002000fe80000000000000feffffffffffffba08000a00ac1e01010000009996f4115b771c30435a208485849fb7c249e20754599197f3edb9e4a9eb9f4db621747bad219e73381e1b44fc1f66d9011418905c58065fd7f9872f03627273f48912c76f35df9e3afa837adb94272ca8da4a06bf449943"], 0x108}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000002c0)=0x5, 0x4) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\n', 0x1, 0xfffffffffffffffd) r5 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, r3, r5, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='id_legacy\x00', r3) 06:19:24 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0900b0d98df97f1ec4722c660000000000177e2c4759e939bda3df19c6546ad7b171a15c1c67fbca45a511f5dcc71fbbed99d6bccc3ee66936476d7023ebe1ca620736b683fb8624e678922645bdda8a6b3d980d62877c5971d00e855a8af8ff4060a7d1c6371e34dfcccb0d46cfafb9c757f4b1a0577541a9d47dde506c1776d728fc10ace41b24ce05dae367fc7005"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676203) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:19:24 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 52) [ 2542.098965] FAULT_INJECTION: forcing a failure. [ 2542.098965] name failslab, interval 1, probability 0, space 0, times 0 [ 2542.100441] CPU: 0 PID: 17020 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2542.101345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2542.102414] Call Trace: [ 2542.102759] dump_stack+0x107/0x167 [ 2542.103241] should_fail.cold+0x5/0xa [ 2542.103746] ? io_wq_create+0x6ef/0xc00 [ 2542.104274] should_failslab+0x5/0x20 [ 2542.104780] kmem_cache_alloc_node_trace+0x59/0x340 [ 2542.105449] io_wq_create+0x6ef/0xc00 [ 2542.105946] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2542.106602] ? io_import_iovec+0x1120/0x1120 [ 2542.107179] ? io_apoll_task_func+0x2d0/0x2d0 [ 2542.107760] ? __io_req_find_next+0x300/0x300 [ 2542.108339] ? do_raw_spin_lock+0x121/0x260 [ 2542.108894] ? rwlock_bug.part.0+0x90/0x90 [ 2542.109444] __io_uring_add_tctx_node+0x2c6/0x520 [ 2542.110068] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2542.110750] ? alloc_fd+0x2e7/0x670 [ 2542.111222] io_uring_setup+0x1fbb/0x2980 [ 2542.111763] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2542.112415] ? wait_for_completion_io+0x270/0x270 [ 2542.113063] do_syscall_64+0x33/0x40 [ 2542.113551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2542.114231] RIP: 0033:0x7f8bb9614b19 [ 2542.114714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2542.117119] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2542.118114] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2542.119056] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2542.119990] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2542.120928] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2542.121878] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:19:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:19:24 executing program 6: syz_io_uring_setup(0x758d, &(0x7f00000001c0), &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000740), 0x0) r1 = syz_io_uring_setup(0x5186, &(0x7f0000000000)={0x0, 0x2e58, 0x1, 0x0, 0x2fc, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x3ba1, &(0x7f0000000100)={0x0, 0xd4b8, 0x10, 0x0, 0x217, 0x0, r1}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000280)) 06:19:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 41) 06:19:24 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 53) [ 2542.347022] FAULT_INJECTION: forcing a failure. [ 2542.347022] name failslab, interval 1, probability 0, space 0, times 0 [ 2542.348588] CPU: 0 PID: 17034 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2542.349533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2542.350544] Call Trace: [ 2542.350880] dump_stack+0x107/0x167 [ 2542.351325] should_fail.cold+0x5/0xa [ 2542.351813] ? create_object.isra.0+0x3a/0xa20 [ 2542.352401] should_failslab+0x5/0x20 [ 2542.352883] kmem_cache_alloc+0x5b/0x310 [ 2542.353404] create_object.isra.0+0x3a/0xa20 [ 2542.353956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2542.354599] kmem_cache_alloc+0x159/0x310 [ 2542.355127] anon_vma_fork+0xf1/0x640 [ 2542.355606] ? __vm_enough_memory+0x184/0x360 [ 2542.356177] copy_process+0x72c9/0x78b0 [ 2542.356698] ? __cleanup_sighand+0xb0/0xb0 [ 2542.357246] ? _copy_from_user+0xfb/0x1b0 [ 2542.357780] kernel_clone+0xe7/0x980 [ 2542.358252] ? __lockdep_reset_lock+0x180/0x180 [ 2542.358840] ? create_io_thread+0xf0/0xf0 [ 2542.359374] ? ksys_write+0x21a/0x260 [ 2542.359852] ? lock_downgrade+0x6d0/0x6d0 [ 2542.360378] __do_sys_clone3+0x1e5/0x320 [ 2542.360896] ? __do_sys_clone+0x110/0x110 [ 2542.361443] ? rcu_read_lock_any_held+0x75/0xa0 [ 2542.362030] ? vfs_write+0x354/0xb10 [ 2542.362499] ? fput_many+0x2f/0x1a0 [ 2542.362960] ? ksys_write+0x1a9/0x260 [ 2542.363440] ? __ia32_sys_read+0xb0/0xb0 [ 2542.363960] do_syscall_64+0x33/0x40 [ 2542.364430] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2542.365075] RIP: 0033:0x7f2b50818b19 [ 2542.365557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2542.367866] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2542.368822] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2542.369734] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2542.370634] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2542.371542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2542.372444] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2542.401777] FAULT_INJECTION: forcing a failure. [ 2542.401777] name failslab, interval 1, probability 0, space 0, times 0 [ 2542.403228] CPU: 0 PID: 17037 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2542.404096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2542.405148] Call Trace: [ 2542.405484] dump_stack+0x107/0x167 [ 2542.405942] should_fail.cold+0x5/0xa [ 2542.406416] ? create_object.isra.0+0x3a/0xa20 [ 2542.406993] should_failslab+0x5/0x20 [ 2542.407482] kmem_cache_alloc+0x5b/0x310 [ 2542.407992] ? io_wq_create+0x114/0xc00 [ 2542.408493] create_object.isra.0+0x3a/0xa20 [ 2542.409039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2542.409681] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2542.410323] io_wq_create+0x6ef/0xc00 [ 2542.410810] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2542.411453] ? io_import_iovec+0x1120/0x1120 [ 2542.412005] ? io_apoll_task_func+0x2d0/0x2d0 [ 2542.412573] ? __io_req_find_next+0x300/0x300 [ 2542.413132] ? do_raw_spin_lock+0x121/0x260 [ 2542.413731] ? rwlock_bug.part.0+0x90/0x90 [ 2542.414261] __io_uring_add_tctx_node+0x2c6/0x520 [ 2542.414866] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2542.415532] ? alloc_fd+0x2e7/0x670 [ 2542.415994] io_uring_setup+0x1fbb/0x2980 [ 2542.416518] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2542.417162] ? wait_for_completion_io+0x270/0x270 [ 2542.417789] do_syscall_64+0x33/0x40 [ 2542.418258] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2542.418905] RIP: 0033:0x7f8bb9614b19 [ 2542.419377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2542.421716] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2542.422676] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2542.423571] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2542.424473] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2542.425380] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2542.426274] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:19:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 42) 06:19:38 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0900b0d98df97f1ec4722c660000000000177e2c4759e939bda3df19c6546ad7b171a15c1c67fbca45a511f5dcc71fbbed99d6bccc3ee66936476d7023ebe1ca620736b683fb8624e678922645bdda8a6b3d980d62877c5971d00e855a8af8ff4060a7d1c6371e34dfcccb0d46cfafb9c757f4b1a0577541a9d47dde506c1776d728fc10ace41b24ce05dae367fc7005"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676203) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:19:38 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 54) 06:19:38 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x220, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x6}, 0xa521}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x9286, 0x0, 0x0, 0xa6219d3}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000540)={0x4, {{0xa, 0x4e20, 0x0, @loopback, 0x4}}, {{0xa, 0x4e24, 0xa6, @remote, 0x8}}}, 0x108) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="20010000100001000000000000000000ff020000000000000000000000000001fc0000000000000000000000000000000000000000000000000000005c000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="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"], 0x120}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x7, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x90100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=r0, @ANYBLOB="00000000000000002e2b66696c6530004f3373c2f9c62dd629892567ceb0da43aa021b9f067f2c0d1cf013c370092fc4b673b3f47e686d7095f4f90732ad48aa233aaf89ea32"]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000000)=""/128) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x5408, 0x2, 0xef9c, 0x8, 0x7ff}, {0x627, 0x7, 0x6, 0x6, 0x91, 0x3ff}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r4, &(0x7f0000000000), 0x1b4000) write$binfmt_script(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x118) getsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 06:19:38 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) 06:19:38 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=ANY=[@ANYBLOB="280000002000210c00000000003ee394d8380f858590baefc100000002000000080000002e4584ec96761135b302fb5b6f53c1ccd075f931b7a6761b9acd38017f68e6fec9bcb3ffdaf549073c1a26612431cd1b6c121afa1b672fd8a997e69c6ad3d1d43519a79a0910f8362baeb049fd5abd946646729dfc122d71c0e2edf7410c63a625", @ANYRES32=0x0, @ANYBLOB="0c84a475e5844b52bdf6c5c2833c413eea9227cce79b3488e060110439e8eec7e4242321d04a0e6e32ae5055819332b920e8759fadfecb7ae5984d222ec0ff55bd04ff82aeab96deb50f243812654afa1168c9eea409247d4502d5e1a5029d17b84c94ee8701ee7df2"], 0x28}}, 0x0) close_range(r1, r0, 0x2) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40008800}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000301010800000000000000000100000a080007400000100008000c40000000042800048024000180050003000800000005000200e200000005000300400000000600050080e898238e18ad83910003400004000014080180080001006401010008000200640101020c0002800500010006000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000800) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r2, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) preadv2(r2, &(0x7f0000000400)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f00000017c0)=""/174, 0xae}], 0x3, 0x100, 0x83c, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f00000003c0)=[{{r3, r4/1000+60000}, 0x1f, 0xf4c, 0xbbd}], 0x18) request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000001880)='\x04@\\\x00', 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') unshare(0x48020200) 06:19:38 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e, 0xa4025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYBLOB="01fb11f6ff001800000000006fff972d7313f0ae1e5d38172d998c0297a2e273e6a4451fe349b613f3c2568b8a0559b643ed2d52cd304dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775910ae42025f9a48dccda0044ab4f464e7041d14a5b1278", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000140)=0x6, 0x4001, 0xd4db0fb921676207) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:19:38 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2556.015021] FAULT_INJECTION: forcing a failure. [ 2556.015021] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.016577] CPU: 1 PID: 17047 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2556.017536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2556.018674] Call Trace: [ 2556.019035] dump_stack+0x107/0x167 [ 2556.019546] should_fail.cold+0x5/0xa [ 2556.020075] ? anon_vma_fork+0x1ff/0x640 [ 2556.020641] should_failslab+0x5/0x20 [ 2556.021175] kmem_cache_alloc+0x5b/0x310 [ 2556.021746] anon_vma_fork+0x1ff/0x640 [ 2556.022289] copy_process+0x72c9/0x78b0 [ 2556.022862] ? __cleanup_sighand+0xb0/0xb0 [ 2556.023448] ? _copy_from_user+0xfb/0x1b0 [ 2556.024024] kernel_clone+0xe7/0x980 [ 2556.024541] ? __lockdep_reset_lock+0x180/0x180 [ 2556.025182] ? create_io_thread+0xf0/0xf0 [ 2556.025774] ? ksys_write+0x21a/0x260 [ 2556.026305] ? lock_downgrade+0x6d0/0x6d0 [ 2556.026888] __do_sys_clone3+0x1e5/0x320 [ 2556.027446] ? __do_sys_clone+0x110/0x110 [ 2556.028043] ? rcu_read_lock_any_held+0x75/0xa0 [ 2556.028681] ? vfs_write+0x354/0xb10 [ 2556.029197] ? fput_many+0x2f/0x1a0 [ 2556.029690] ? ksys_write+0x1a9/0x260 [ 2556.030197] ? __ia32_sys_read+0xb0/0xb0 [ 2556.030748] do_syscall_64+0x33/0x40 [ 2556.031245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2556.031928] RIP: 0033:0x7f2b50818b19 [ 2556.032423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.034861] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2556.035873] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2556.036814] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2556.037765] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2556.038704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2556.039641] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2556.056888] FAULT_INJECTION: forcing a failure. [ 2556.056888] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.059413] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2556.059739] CPU: 0 PID: 17051 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2556.062478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2556.064498] Call Trace: [ 2556.065138] dump_stack+0x107/0x167 [ 2556.066040] should_fail.cold+0x5/0xa [ 2556.066969] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2556.068181] should_failslab+0x5/0x20 [ 2556.069107] kmem_cache_alloc_trace+0x55/0x320 [ 2556.070229] __io_uring_add_tctx_node+0x15c/0x520 [ 2556.071393] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2556.072656] ? alloc_fd+0x2e7/0x670 [ 2556.073555] io_uring_setup+0x1fbb/0x2980 [ 2556.074573] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2556.075794] ? wait_for_completion_io+0x270/0x270 [ 2556.077006] do_syscall_64+0x33/0x40 [ 2556.077922] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2556.079167] RIP: 0033:0x7f8bb9614b19 [ 2556.080067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.084736] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2556.086589] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2556.088316] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2556.090053] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2556.091771] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2556.093510] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:19:38 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r0, 0x8000000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) [ 2556.116525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=17060 comm=syz-executor.1 06:19:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 43) [ 2556.154553] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2556.165965] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2556.229777] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2556.230883] CPU: 1 PID: 17060 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2556.231724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2556.232729] Call Trace: [ 2556.233057] dump_stack+0x107/0x167 [ 2556.233518] sysfs_warn_dup.cold+0x1c/0x29 [ 2556.234044] sysfs_do_create_link_sd+0x122/0x140 [ 2556.234625] sysfs_create_link+0x5f/0xc0 [ 2556.235123] device_add+0x703/0x1c50 [ 2556.235582] ? devlink_add_symlinks+0x970/0x970 [ 2556.236147] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2556.236791] wiphy_register+0x1da6/0x2850 [ 2556.237305] ? wiphy_unregister+0xb90/0xb90 [ 2556.237873] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2556.238522] ieee80211_register_hw+0x23c5/0x38b0 [ 2556.239146] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2556.239729] ? net_generic+0xdb/0x2b0 [ 2556.240195] ? lockdep_init_map_type+0x2c7/0x780 [ 2556.240772] ? memset+0x20/0x50 [ 2556.241173] ? __hrtimer_init+0x12c/0x270 [ 2556.241686] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2556.242301] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2556.242858] ? hwsim_new_radio_nl+0x967/0x1080 [ 2556.243436] ? memcpy+0x39/0x60 [ 2556.243842] hwsim_new_radio_nl+0x991/0x1080 [ 2556.244376] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2556.245016] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2556.245817] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2556.246610] genl_family_rcv_msg_doit+0x22d/0x330 [ 2556.247194] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2556.247990] ? cap_capable+0x1cd/0x230 [ 2556.248472] ? ns_capable+0xe2/0x110 [ 2556.248931] genl_rcv_msg+0x36a/0x5a0 [ 2556.249397] ? genl_get_cmd+0x480/0x480 [ 2556.249884] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2556.250508] ? lock_release+0x680/0x680 [ 2556.250985] ? __lockdep_reset_lock+0x180/0x180 [ 2556.251549] netlink_rcv_skb+0x14b/0x430 [ 2556.252036] ? genl_get_cmd+0x480/0x480 [ 2556.252517] ? netlink_ack+0xab0/0xab0 [ 2556.252988] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2556.253542] ? is_vmalloc_addr+0x7b/0xb0 [ 2556.254029] genl_rcv+0x24/0x40 [ 2556.254423] netlink_unicast+0x54e/0x800 [ 2556.254912] ? netlink_attachskb+0x870/0x870 [ 2556.255448] netlink_sendmsg+0x90f/0xe00 [ 2556.255946] ? netlink_unicast+0x800/0x800 [ 2556.256464] ? netlink_unicast+0x800/0x800 [ 2556.256971] __sock_sendmsg+0x154/0x190 [ 2556.257455] ____sys_sendmsg+0x70d/0x870 [ 2556.257752] FAULT_INJECTION: forcing a failure. [ 2556.257752] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.257943] ? sock_write_iter+0x3d0/0x3d0 [ 2556.257956] ? do_recvmmsg+0x6d0/0x6d0 [ 2556.257983] ? __lockdep_reset_lock+0x180/0x180 [ 2556.262239] ___sys_sendmsg+0xf3/0x170 [ 2556.262706] ? sendmsg_copy_msghdr+0x160/0x160 [ 2556.263258] ? __fget_files+0x2cf/0x520 [ 2556.263732] ? lock_downgrade+0x6d0/0x6d0 [ 2556.264235] ? clockevents_program_event+0x14b/0x360 [ 2556.264845] ? __fget_files+0x2f8/0x520 [ 2556.265330] ? __fget_light+0xea/0x290 [ 2556.265809] __sys_sendmsg+0xe5/0x1b0 [ 2556.266268] ? __sys_sendmsg_sock+0x40/0x40 [ 2556.266807] do_syscall_64+0x33/0x40 [ 2556.267249] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2556.267855] RIP: 0033:0x7f277f764b19 [ 2556.268299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.270471] RSP: 002b:00007f277ccda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2556.271371] RAX: ffffffffffffffda RBX: 00007f277f877f60 RCX: 00007f277f764b19 [ 2556.272212] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 2556.273052] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2556.273904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2556.274745] R13: 00007fff5bc6ce3f R14: 00007f277ccda300 R15: 0000000000022000 [ 2556.275618] CPU: 0 PID: 17072 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2556.277290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2556.279295] Call Trace: 06:19:38 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2556.279936] dump_stack+0x107/0x167 [ 2556.280956] should_fail.cold+0x5/0xa [ 2556.281884] ? create_object.isra.0+0x3a/0xa20 [ 2556.282990] should_failslab+0x5/0x20 [ 2556.283909] kmem_cache_alloc+0x5b/0x310 [ 2556.284898] create_object.isra.0+0x3a/0xa20 [ 2556.285963] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2556.287188] kmem_cache_alloc+0x159/0x310 [ 2556.288193] anon_vma_fork+0x1ff/0x640 [ 2556.289141] copy_process+0x72c9/0x78b0 [ 2556.290152] ? __cleanup_sighand+0xb0/0xb0 [ 2556.291204] ? _copy_from_user+0xfb/0x1b0 [ 2556.292211] kernel_clone+0xe7/0x980 [ 2556.293107] ? __lockdep_reset_lock+0x180/0x180 [ 2556.294247] ? create_io_thread+0xf0/0xf0 [ 2556.295271] ? ksys_write+0x21a/0x260 [ 2556.296191] ? lock_downgrade+0x6d0/0x6d0 [ 2556.297195] __do_sys_clone3+0x1e5/0x320 [ 2556.298183] ? __do_sys_clone+0x110/0x110 [ 2556.299203] ? rcu_read_lock_any_held+0x75/0xa0 [ 2556.300316] ? vfs_write+0x354/0xb10 [ 2556.301209] ? fput_many+0x2f/0x1a0 [ 2556.302095] ? ksys_write+0x1a9/0x260 [ 2556.303011] ? __ia32_sys_read+0xb0/0xb0 [ 2556.304001] do_syscall_64+0x33/0x40 [ 2556.304896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2556.306136] RIP: 0033:0x7f2b50818b19 [ 2556.307029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.311462] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2556.313292] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2556.315008] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2556.316730] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2556.318451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2556.320186] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:19:38 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5e, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xd}, 0x10300, 0x4143007d000, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:19:38 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:19:38 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0900b0d98df97f1ec4722c660000000000177e2c4759e939bda3df19c6546ad7b171a15c1c67fbca45a511f5dcc71fbbed99d6bccc3ee66936476d7023ebe1ca620736b683fb8624e678922645bdda8a6b3d980d62877c5971d00e855a8af8ff4060a7d1c6371e34dfcccb0d46cfafb9c757f4b1a0577541a9d47dde506c1776d728fc10ace41b24ce05dae367fc7005"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676203) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:19:38 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 55) 06:19:38 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21, 0x100000000000}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000014c0)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae285d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9bca72eeebeae9bb5d52bc9679b84e374371c2f000000000", @ANYRES32, @ANYBLOB="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"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2556.378499] FAULT_INJECTION: forcing a failure. [ 2556.378499] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.380036] CPU: 1 PID: 17080 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2556.381019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2556.382130] Call Trace: [ 2556.382464] dump_stack+0x107/0x167 [ 2556.382977] should_fail.cold+0x5/0xa [ 2556.383510] ? create_object.isra.0+0x3a/0xa20 [ 2556.384137] should_failslab+0x5/0x20 [ 2556.384676] kmem_cache_alloc+0x5b/0x310 [ 2556.385199] create_object.isra.0+0x3a/0xa20 [ 2556.385865] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2556.386573] kmem_cache_alloc_trace+0x151/0x320 [ 2556.387251] __io_uring_add_tctx_node+0x15c/0x520 [ 2556.387892] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2556.388572] ? alloc_fd+0x2e7/0x670 [ 2556.389082] io_uring_setup+0x1fbb/0x2980 [ 2556.389639] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2556.390298] ? wait_for_completion_io+0x270/0x270 [ 2556.390851] do_syscall_64+0x33/0x40 [ 2556.391268] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2556.392042] RIP: 0033:0x7f8bb9614b19 [ 2556.392573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.395098] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2556.396195] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2556.397143] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2556.398018] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2556.398803] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2556.399590] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:19:38 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x6, 0x0, @fd, 0x8, 0x0, 0x0, 0xc, 0x0, {0x0, r3}}, 0x8000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 06:19:38 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:19:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 44) 06:19:38 executing program 3: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:19:38 executing program 5: name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 2556.569374] FAULT_INJECTION: forcing a failure. [ 2556.569374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2556.572309] CPU: 0 PID: 17101 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2556.574006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2556.576035] Call Trace: [ 2556.576689] dump_stack+0x107/0x167 [ 2556.577588] should_fail.cold+0x5/0xa [ 2556.578529] __alloc_pages_nodemask+0x182/0x600 [ 2556.579654] ? __lockdep_reset_lock+0x180/0x180 [ 2556.580783] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2556.582255] ? copy_page_range+0x28e1/0x3810 [ 2556.583318] alloc_pages_current+0x187/0x280 [ 2556.584391] get_zeroed_page+0x14/0xb0 [ 2556.585336] __pud_alloc+0x33/0x270 [ 2556.586233] copy_page_range+0x2ca1/0x3810 [ 2556.587268] ? perf_trace_lock+0xac/0x490 [ 2556.588268] ? lock_chain_count+0x20/0x20 [ 2556.589297] ? lock_downgrade+0x6d0/0x6d0 [ 2556.590331] ? up_write+0x191/0x550 [ 2556.591222] ? vm_iomap_memory+0x190/0x190 [ 2556.592248] ? downgrade_write+0x3a0/0x3a0 [ 2556.593280] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2556.594634] ? __vma_link_rb+0x540/0x700 [ 2556.595630] copy_process+0x7654/0x78b0 [ 2556.596630] ? __cleanup_sighand+0xb0/0xb0 [ 2556.597683] ? _copy_from_user+0xfb/0x1b0 [ 2556.598695] kernel_clone+0xe7/0x980 [ 2556.599597] ? __lockdep_reset_lock+0x180/0x180 [ 2556.600733] ? create_io_thread+0xf0/0xf0 [ 2556.601764] ? ksys_write+0x21a/0x260 [ 2556.602690] ? lock_downgrade+0x6d0/0x6d0 [ 2556.603698] __do_sys_clone3+0x1e5/0x320 [ 2556.604689] ? __do_sys_clone+0x110/0x110 [ 2556.605724] ? rcu_read_lock_any_held+0x75/0xa0 [ 2556.606845] ? vfs_write+0x354/0xb10 [ 2556.607744] ? fput_many+0x2f/0x1a0 [ 2556.608635] ? ksys_write+0x1a9/0x260 [ 2556.609571] ? __ia32_sys_read+0xb0/0xb0 [ 2556.610569] do_syscall_64+0x33/0x40 [ 2556.611471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2556.612726] RIP: 0033:0x7f2b50818b19 [ 2556.613651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.618182] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2556.620036] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2556.621782] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2556.623541] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2556.625275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2556.627005] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2556.648152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=17070 comm=syz-executor.1 [ 2556.655297] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2556.667445] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! [ 2576.828474] FAULT_INJECTION: forcing a failure. 06:19:59 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 56) 06:19:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r3, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8e17, 0x2f}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc854}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r1, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r9, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r1, 0x602, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x2, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10001}, 0x40) 06:19:59 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0900b0d98df97f1ec4722c660000000000177e2c4759e939bda3df19c6546ad7b171a15c1c67fbca45a511f5dcc71fbbed99d6bccc3ee66936476d7023ebe1ca620736b683fb8624e678922645bdda8a6b3d980d62877c5971d00e855a8af8ff4060a7d1c6371e34dfcccb0d46cfafb9c757f4b1a0577541a9d47dde506c1776d728fc10ace41b24ce05dae367fc7005"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676203) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2576.828474] name failslab, interval 1, probability 0, space 0, times 0 06:19:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 45) 06:19:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:19:59 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:19:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(0x0, r0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000000)={0x1, 0x8, 0x401}) ioctl$BLKTRACESETUP(r0, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000082eec93b8a4297bdb6203fd3f4655bcca45e1c5a804530f13a012e2fdede9fcf4cfc5bf275dc3c1042604bc185306e607fc0b225286473f835f16b28094247927762697216bf3ef63198668f0409973b5a83a7034ed41fce4a0ad1fd2f6806997aae", @ANYRES16, @ANYBLOB="010200"/18, @ANYRES32=r1, @ANYRES16], 0x1c}}, 0x4000011) dup(0xffffffffffffffff) unshare(0x48020200) 06:19:59 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000140)=0x8, 0x1, 0xd4db0fb921676203) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2576.831135] CPU: 1 PID: 17118 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2576.832431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.833835] Call Trace: [ 2576.834287] dump_stack+0x107/0x167 [ 2576.834899] should_fail.cold+0x5/0xa [ 2576.835536] ? xas_alloc+0x336/0x440 [ 2576.836165] should_failslab+0x5/0x20 [ 2576.836802] kmem_cache_alloc+0x5b/0x310 [ 2576.837481] ? stack_trace_consume_entry+0x160/0x160 [ 2576.838345] xas_alloc+0x336/0x440 [ 2576.838949] xas_create+0x34a/0x10d0 [ 2576.839587] ? kernel_text_address+0xf2/0x120 [ 2576.840348] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2576.841231] xas_store+0x8c/0x1c40 [ 2576.841847] __xa_store+0x164/0x2d0 [ 2576.842461] ? xa_delete_node+0x280/0x280 [ 2576.843164] ? trace_hardirqs_on+0x5b/0x180 [ 2576.843890] xa_store+0x31/0x50 [ 2576.844443] __io_uring_add_tctx_node+0x1cf/0x520 [ 2576.845248] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2576.846130] ? alloc_fd+0x2e7/0x670 [ 2576.846748] io_uring_setup+0x1fbb/0x2980 [ 2576.847444] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2576.848293] ? wait_for_completion_io+0x270/0x270 [ 2576.849121] do_syscall_64+0x33/0x40 [ 2576.849754] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2576.850602] RIP: 0033:0x7f8bb9614b19 [ 2576.851216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.854752] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2576.856905] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2576.858707] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2576.859934] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2576.861164] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2576.862408] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2576.887370] FAULT_INJECTION: forcing a failure. [ 2576.887370] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2576.890376] CPU: 0 PID: 17117 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2576.892101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.894176] Call Trace: [ 2576.894842] dump_stack+0x107/0x167 [ 2576.895755] should_fail.cold+0x5/0xa [ 2576.896718] __alloc_pages_nodemask+0x182/0x600 [ 2576.897889] ? lock_acquire+0x197/0x470 [ 2576.898885] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2576.900391] ? lock_downgrade+0x6d0/0x6d0 [ 2576.901424] ? do_raw_spin_lock+0x121/0x260 [ 2576.902523] alloc_pages_current+0x187/0x280 [ 2576.903626] __pmd_alloc+0x37/0x5e0 [ 2576.904539] copy_page_range+0x2bd8/0x3810 [ 2576.905599] ? perf_trace_lock+0xac/0x490 [ 2576.906641] ? lock_chain_count+0x20/0x20 [ 2576.907722] ? up_write+0x191/0x550 [ 2576.908627] ? vm_iomap_memory+0x190/0x190 [ 2576.909691] ? downgrade_write+0x3a0/0x3a0 [ 2576.910749] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2576.912100] ? __vma_link_rb+0x540/0x700 [ 2576.913120] copy_process+0x7654/0x78b0 [ 2576.914160] ? __cleanup_sighand+0xb0/0xb0 [ 2576.915233] ? _copy_from_user+0xfb/0x1b0 [ 2576.916274] kernel_clone+0xe7/0x980 [ 2576.917195] ? __lockdep_reset_lock+0x180/0x180 [ 2576.918360] ? create_io_thread+0xf0/0xf0 [ 2576.919407] ? ksys_write+0x21a/0x260 [ 2576.920354] ? lock_downgrade+0x6d0/0x6d0 [ 2576.921407] __do_sys_clone3+0x1e5/0x320 [ 2576.922436] ? __do_sys_clone+0x110/0x110 [ 2576.923508] ? rcu_read_lock_any_held+0x75/0xa0 [ 2576.924674] ? vfs_write+0x354/0xb10 [ 2576.925608] ? fput_many+0x2f/0x1a0 [ 2576.926539] ? ksys_write+0x1a9/0x260 [ 2576.927497] ? __ia32_sys_read+0xb0/0xb0 [ 2576.928529] do_syscall_64+0x33/0x40 [ 2576.929461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2576.930753] RIP: 0033:0x7f2b50818b19 [ 2576.931681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.936303] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2576.938223] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2576.940015] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2576.941814] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.943604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2576.945391] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:19:59 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 57) [ 2577.010683] FAULT_INJECTION: forcing a failure. [ 2577.010683] name failslab, interval 1, probability 0, space 0, times 0 [ 2577.012479] CPU: 1 PID: 17134 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2577.013530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2577.014787] Call Trace: [ 2577.015195] dump_stack+0x107/0x167 [ 2577.015748] should_fail.cold+0x5/0xa [ 2577.016330] ? create_object.isra.0+0x3a/0xa20 [ 2577.017024] should_failslab+0x5/0x20 [ 2577.017774] kmem_cache_alloc+0x5b/0x310 [ 2577.018459] create_object.isra.0+0x3a/0xa20 [ 2577.019288] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2577.020061] kmem_cache_alloc+0x159/0x310 [ 2577.020876] xas_alloc+0x336/0x440 [ 2577.021418] xas_create+0x34a/0x10d0 [ 2577.022154] ? kernel_text_address+0xf2/0x120 [ 2577.023008] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2577.023993] xas_store+0x8c/0x1c40 [ 2577.024542] __xa_store+0x164/0x2d0 [ 2577.025244] ? xa_delete_node+0x280/0x280 [ 2577.026045] ? trace_hardirqs_on+0x5b/0x180 [ 2577.026882] xa_store+0x31/0x50 [ 2577.027523] __io_uring_add_tctx_node+0x1cf/0x520 [ 2577.028450] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2577.029455] ? alloc_fd+0x2e7/0x670 [ 2577.030173] io_uring_setup+0x1fbb/0x2980 [ 2577.030983] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2577.031942] ? wait_for_completion_io+0x270/0x270 [ 2577.032770] do_syscall_64+0x33/0x40 [ 2577.033484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2577.034502] RIP: 0033:0x7f8bb9614b19 [ 2577.035226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2577.038811] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2577.040396] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2577.041792] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2577.043170] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2577.044555] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2577.045938] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:19:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 46) 06:19:59 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000000fffffff627942c9129c625f3d4ceffffff08004500001cc8cc000000019078fffffffdac1414aa6000907801000000"], 0x0) syz_emit_ethernet(0x45e, &(0x7f0000000080)={@remote, @empty, @void, {@mpls_mc={0x8848, {[{0xffffc}, {0x3}, {0x2, 0x0, 0x1}], @ipv6=@gre_packet={0x1, 0x6, "49b823", 0x41c, 0x2f, 0x1, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@routing={0x3a, 0x8, 0x1, 0x9, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1]}, @srh={0x87, 0x14, 0x4, 0xa, 0x5, 0x58, 0xffff, [@private0, @mcast2, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x62, 0xe, 0x2, 0x81, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private1, @remote, @remote, @local]}, @hopopts={0x3b, 0x6, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x7, [0x6, 0x44bc8df3]}}, @ra={0x5, 0x2, 0x20}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x35}}, @jumbo={0xc2, 0x4, 0x1}]}, @srh={0x2f, 0x6, 0x4, 0x3, 0xda, 0x38, 0x2, [@empty, @local, @mcast1]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xc7, 0x3, [], "19589cef0732ac09ede03bbb3a3328fb7935f912329dedc3c031a695a48d4435ba6bf409dfe6b9e4c5c3274f6ecc8dff365eb8ef23d40bf689a90f08aa2fcd8e808246b3b9fc9526d9f90016292da108ee50a72f756cf51477378078d1721022664f2af04d228cf312a2c1efe628a29044204db3908ccf48db611e0dfe04dcaa6e89164255794929fb71a47374514ffb0f40aa2134c376ba0fc595b9ba8accf77e4496a89ef25d75c9f41146f3c89b7150460888a963a5b68debbb85898ea0ee5733157db27dc2"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x8, 0x4], "8dc6f7b778664ba9581d13ae6245669111debea40de52cd9a7e3a02424bfa649a247edcd7645106b7f5fe672b7cc080a79f559fabec904bf92a3f861f172b49dbe61bc02ad2a1d366368c1cdf71c2aa416221432f672fe6ae5405d7c319b388cabcdd763a40b8db84cf33556dd8269d8009b5a1e"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "7e635793817dde4406af3380f8493d780d7aab092b75458c5d21bee315070f979d254286481e4a4a1bfb85ca753be48f51a7679c8ce55a5b01"}, {0x8, 0x88be, 0x7b, {{0x3, 0x1, 0x1, 0x2, 0x0, 0x3, 0x7, 0x9}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x40, 0x3, 0x0, 0x2, 0x5, 0x8}, 0x2, {0x3, 0x2, 0x3, 0x8, 0x1, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "8a530fcf6d74478863819699b7f7e4d6ed396ab9ad5e95f932ae0d7e9ef4b5e0c26c94304cb0caa8c11df6db06c808ce072782e7990da8c33f0092f4646854123280b2cdc9e7f5e77db41dc3888a5cc4fdea74f7a747b80a050cb10ac21a98199853aa67f31db23f652ba6c5cdfbd847df41d47fca8c6412305996b744bc5bc6"}}}}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x878, 0xe8c, 0x45, 0xc2f]}) syz_emit_ethernet(0xd8, &(0x7f0000000500)={@empty, @multicast, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{}], @llc={@llc={0xbc, 0x8e, "e8", "cbea8a0070193d589c4618c9bf082abad3973b4b522b44df0dbc2ef6c1f8f19eb9278a87f5eba9e828ab95b689e4d365436191ffba1ef2555721e5e18257077dffb0ab973c5f8e260154fb21028cd12c417a3c060ab5b2b52fb3c52456bf5c9ee83032a8c3de9adec2d9ab9e8fbb70e9dfdce8a5343ca0443eb58ff2fcbea4e163b3e652081ce7957ec66956f6dce79f27ed5aa3692aefc4ebd9b80118b8ed38cec8e7ef1e9a5a5367dd8e9a1a8c1310f6d01d7df538edde46c910591eb27a"}}}}}}, &(0x7f0000000600)={0x1, 0x2, [0x39a, 0x704, 0x820, 0x5a1]}) 06:19:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:19:59 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:19:59 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000014c0)=ANY=[@ANYBLOB="01fb110000f11700000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a0451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc539b33c28b05f02526e05cf8e32a7d9b4ba52e2e261690ca72eeeb6ae9bb5d52bc9679b84e377557330c4d3502cf8b5b7cc921972a105a8c94f56b80c9be52102b873faee8c5ed371092c7771d7286bc696cd5bf936e453b9b22d505a46d9ef202c140e0aa8e860c909172e604a7bf0bace4462ad087666c205699cd1fcfbc2286aa2637e6bd03c15aca1e3076210e0b9458380f3025cf6ba873bc8129dc7fe04aa176a7ed4eebcbd5bb428a6a0430e066311616c7db", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:19:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "d42e147e8f142613", "ce375d1e5fce3835951ee26abde42853", "996bba02", "6cd3b81ddcf13a53"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000080)=0xa4c, 0x4) r2 = open(&(0x7f0000000100)='./file0\x00', 0xa14bde4754c3e866, 0x124) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x0, @multicast2, 0x4e20, 0x1, 'none\x00', 0x38, 0xffffff6c, 0x79}, {@remote, 0x4e23, 0x3, 0x19b, 0x2, 0x7}}, 0x44) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) dup2(r0, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') read(r3, &(0x7f00000002c0)=""/225, 0xe1) read(r3, &(0x7f00000003c0)=""/225, 0xe1) pidfd_open(0x0, 0x0) [ 2577.338583] FAULT_INJECTION: forcing a failure. [ 2577.338583] name failslab, interval 1, probability 0, space 0, times 0 [ 2577.340533] CPU: 1 PID: 17163 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2577.341881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2577.343473] Call Trace: [ 2577.343984] dump_stack+0x107/0x167 [ 2577.344694] should_fail.cold+0x5/0xa [ 2577.345425] ? __pmd_alloc+0x94/0x5e0 [ 2577.346178] should_failslab+0x5/0x20 [ 2577.346911] kmem_cache_alloc+0x5b/0x310 [ 2577.347702] __pmd_alloc+0x94/0x5e0 [ 2577.348408] copy_page_range+0x2bd8/0x3810 [ 2577.349213] ? perf_trace_lock+0xac/0x490 [ 2577.349905] ? lock_chain_count+0x20/0x20 [ 2577.350783] ? up_write+0x191/0x550 [ 2577.351480] ? vm_iomap_memory+0x190/0x190 [ 2577.352301] ? downgrade_write+0x3a0/0x3a0 [ 2577.353102] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2577.354170] ? __vma_link_rb+0x540/0x700 [ 2577.354946] copy_process+0x7654/0x78b0 [ 2577.355738] ? __cleanup_sighand+0xb0/0xb0 [ 2577.356574] ? _copy_from_user+0xfb/0x1b0 [ 2577.357374] kernel_clone+0xe7/0x980 [ 2577.357983] ? __lockdep_reset_lock+0x180/0x180 [ 2577.358862] ? create_io_thread+0xf0/0xf0 [ 2577.359690] ? ksys_write+0x21a/0x260 [ 2577.360423] ? lock_downgrade+0x6d0/0x6d0 [ 2577.361215] __do_sys_clone3+0x1e5/0x320 [ 2577.362000] ? __do_sys_clone+0x110/0x110 [ 2577.362824] ? rcu_read_lock_any_held+0x75/0xa0 [ 2577.363724] ? vfs_write+0x354/0xb10 [ 2577.364438] ? fput_many+0x2f/0x1a0 [ 2577.365127] ? ksys_write+0x1a9/0x260 [ 2577.365870] ? __ia32_sys_read+0xb0/0xb0 [ 2577.366670] do_syscall_64+0x33/0x40 [ 2577.367398] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2577.368368] RIP: 0033:0x7f2b50818b19 [ 2577.369084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2577.372640] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2577.374119] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2577.375500] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2577.376872] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2577.378260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2577.379635] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:20:14 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 58) 06:20:14 executing program 1: unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) unshare(0x20800) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "ebe9721bf5a36ab874eabc28af9589aa"}, 0x11, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0xc4, 0x7, @buffer={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000240)="3dc19c9f7bc3371c512d41607b19e4ff97e6d960a09c39818f37608daed0ba44e13508800a6ebc647a4976c982699309977aa7fc4c5772fc89e24125aa8e46d61f0b638068136018e8eea6d9070b6dce2a97982a5960cded403ffc4f57a948187bcd40d7b09862512ddfba11b933adfcf940990e1906573201dfdaea31fc56cf08a24d8925ff9c026e914e5300b300ee42b693c4c87d2c7a040d6f2f0a89aaf3d31e66c489dac480f691223991ccf4b29c98dd8b43e77309c9fa0acb7865e3c636d87834", &(0x7f0000000480)=""/253, 0x3, 0x10030, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000440)={0x3, 0x0, 0x0, "dbf57d"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x8b\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c6530200a863d9ccfbc3e6b07c1957f07147b07e33018b08994e2501ff24967f6954c302a9be464d1c9b0ad7314b67e0b74a733598cfe98"], 0x45) unshare(0x48020200) 06:20:14 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x8, 0x9, 0x1e, 0xff, 0x0, 0x5e, 0x10c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x10340, 0x7, 0x0, 0x5, 0x0, 0x80000000}, 0x0, 0x7, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000161800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r2, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r2, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:20:14 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}, 0x22}]}) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/156) 06:20:14 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2592.379034] tmpfs: Bad value for 'mpol' [ 2592.385624] FAULT_INJECTION: forcing a failure. [ 2592.385624] name failslab, interval 1, probability 0, space 0, times 0 [ 2592.386982] CPU: 1 PID: 17178 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2592.387803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.388785] Call Trace: [ 2592.389101] dump_stack+0x107/0x167 [ 2592.389532] should_fail.cold+0x5/0xa [ 2592.389996] ? create_object.isra.0+0x3a/0xa20 [ 2592.390539] should_failslab+0x5/0x20 [ 2592.390994] kmem_cache_alloc+0x5b/0x310 [ 2592.391477] create_object.isra.0+0x3a/0xa20 [ 2592.391995] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2592.392603] kmem_cache_alloc+0x159/0x310 [ 2592.393101] __pmd_alloc+0x94/0x5e0 [ 2592.393557] copy_page_range+0x2bd8/0x3810 [ 2592.394253] ? perf_trace_lock+0xac/0x490 [ 2592.394736] ? lock_chain_count+0x20/0x20 [ 2592.395245] ? up_write+0x191/0x550 [ 2592.395670] ? vm_iomap_memory+0x190/0x190 [ 2592.396163] ? downgrade_write+0x3a0/0x3a0 [ 2592.396660] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2592.397297] ? __vma_link_rb+0x540/0x700 [ 2592.397789] copy_process+0x7654/0x78b0 [ 2592.398275] ? __cleanup_sighand+0xb0/0xb0 [ 2592.398785] ? _copy_from_user+0xfb/0x1b0 [ 2592.399277] kernel_clone+0xe7/0x980 [ 2592.399713] ? __lockdep_reset_lock+0x180/0x180 [ 2592.400261] ? create_io_thread+0xf0/0xf0 [ 2592.400754] ? ksys_write+0x21a/0x260 [ 2592.401202] ? lock_downgrade+0x6d0/0x6d0 [ 2592.401691] __do_sys_clone3+0x1e5/0x320 [ 2592.402172] ? __do_sys_clone+0x110/0x110 [ 2592.402675] ? rcu_read_lock_any_held+0x75/0xa0 [ 2592.403220] ? vfs_write+0x354/0xb10 [ 2592.403658] ? fput_many+0x2f/0x1a0 [ 2592.404085] ? ksys_write+0x1a9/0x260 [ 2592.404535] ? __ia32_sys_read+0xb0/0xb0 [ 2592.405022] do_syscall_64+0x33/0x40 [ 2592.405461] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2592.406070] RIP: 0033:0x7f2b50818b19 [ 2592.406507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2592.408656] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2592.409550] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2592.410392] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2592.411228] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2592.412067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2592.412906] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2592.417863] FAULT_INJECTION: forcing a failure. [ 2592.417863] name failslab, interval 1, probability 0, space 0, times 0 [ 2592.421174] CPU: 0 PID: 17182 Comm: syz-executor.4 Not tainted 5.10.238 #1 06:20:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 47) 06:20:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:20:14 executing program 6: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) r2 = dup(r0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r4, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000008c0)={r6, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000500)={r6, 0x1, 0x7, 0x1}) sendfile(r1, r3, 0x0, 0x100000001) [ 2592.423182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.425716] Call Trace: [ 2592.426508] dump_stack+0x107/0x167 [ 2592.427575] should_fail.cold+0x5/0xa [ 2592.428687] ? xas_alloc+0x336/0x440 [ 2592.429856] should_failslab+0x5/0x20 [ 2592.431087] kmem_cache_alloc+0x5b/0x310 [ 2592.432336] xas_alloc+0x336/0x440 [ 2592.433429] xas_create+0x34a/0x10d0 [ 2592.434595] ? kernel_text_address+0xf2/0x120 [ 2592.435969] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2592.437564] xas_store+0x8c/0x1c40 [ 2592.438689] __xa_store+0x164/0x2d0 [ 2592.439807] ? xa_delete_node+0x280/0x280 [ 2592.441082] ? trace_hardirqs_on+0x5b/0x180 [ 2592.442424] xa_store+0x31/0x50 [ 2592.443311] __io_uring_add_tctx_node+0x1cf/0x520 [ 2592.444560] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2592.446145] ? alloc_fd+0x2e7/0x670 [ 2592.447282] io_uring_setup+0x1fbb/0x2980 [ 2592.448546] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2592.449876] ? wait_for_completion_io+0x270/0x270 [ 2592.451382] do_syscall_64+0x33/0x40 [ 2592.452350] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2592.453669] RIP: 0033:0x7f8bb9614b19 [ 2592.454910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2592.459667] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2592.461933] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2592.463813] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2592.465639] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2592.467466] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2592.469285] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2592.475296] tmpfs: Bad value for 'mpol' 06:20:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 48) [ 2592.513604] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. 06:20:15 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r0 = socket$netlink(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000840)=ANY=[]) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r1, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(0xffffffffffffffff, &(0x7f00000006c0)=""/135, 0x87) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000007c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000380)=""/45, 0x2d}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0008010a010000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010028bd7000fadbdf25010000000c000300fdffffffffffffff0c000400000001000000000008000100000000000c00030001000080000000000c0005000b000000000000000c0003000900000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x30004840) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/116, 0x74}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 06:20:15 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x0) [ 2592.548489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 06:20:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 2592.556412] FAULT_INJECTION: forcing a failure. [ 2592.556412] name failslab, interval 1, probability 0, space 0, times 0 [ 2592.557743] CPU: 1 PID: 17196 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2592.558567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.559542] Call Trace: [ 2592.559569] dump_stack+0x107/0x167 [ 2592.560628] should_fail.cold+0x5/0xa [ 2592.561081] ? create_object.isra.0+0x3a/0xa20 [ 2592.561623] should_failslab+0x5/0x20 [ 2592.562088] kmem_cache_alloc+0x5b/0x310 [ 2592.562574] create_object.isra.0+0x3a/0xa20 [ 2592.563089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2592.563691] kmem_cache_alloc+0x159/0x310 [ 2592.564185] __pmd_alloc+0x94/0x5e0 [ 2592.564615] copy_page_range+0x2bd8/0x3810 [ 2592.565113] ? perf_trace_lock+0xac/0x490 [ 2592.565598] ? lock_chain_count+0x20/0x20 [ 2592.566112] ? up_write+0x191/0x550 [ 2592.566548] ? vm_iomap_memory+0x190/0x190 [ 2592.567046] ? downgrade_write+0x3a0/0x3a0 [ 2592.567557] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2592.568198] ? __vma_link_rb+0x540/0x700 [ 2592.568679] copy_process+0x7654/0x78b0 [ 2592.569173] ? __cleanup_sighand+0xb0/0xb0 [ 2592.569692] ? _copy_from_user+0xfb/0x1b0 [ 2592.570183] kernel_clone+0xe7/0x980 [ 2592.570610] ? __lockdep_reset_lock+0x180/0x180 [ 2592.571147] ? create_io_thread+0xf0/0xf0 [ 2592.571635] ? ksys_write+0x21a/0x260 [ 2592.572070] ? lock_downgrade+0x6d0/0x6d0 [ 2592.572549] __do_sys_clone3+0x1e5/0x320 [ 2592.573011] ? __do_sys_clone+0x110/0x110 [ 2592.573499] ? rcu_read_lock_any_held+0x75/0xa0 [ 2592.574036] ? vfs_write+0x354/0xb10 [ 2592.574461] ? fput_many+0x2f/0x1a0 [ 2592.574591] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2592.574891] ? ksys_write+0x1a9/0x260 [ 2592.577236] ? __ia32_sys_read+0xb0/0xb0 [ 2592.577709] do_syscall_64+0x33/0x40 [ 2592.578144] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2592.578726] RIP: 0033:0x7f2b50818b19 [ 2592.579152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2592.581251] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2592.582127] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2592.582940] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2592.583756] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2592.584572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2592.585387] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2592.586256] CPU: 0 PID: 17193 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2592.587950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.589979] Call Trace: [ 2592.590643] dump_stack+0x107/0x167 [ 2592.591543] sysfs_warn_dup.cold+0x1c/0x29 [ 2592.592587] sysfs_do_create_link_sd+0x122/0x140 [ 2592.593746] sysfs_create_link+0x5f/0xc0 [ 2592.594759] device_add+0x703/0x1c50 [ 2592.595690] ? devlink_add_symlinks+0x970/0x970 [ 2592.596831] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2592.598147] wiphy_register+0x1da6/0x2850 06:20:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2592.599200] ? wiphy_unregister+0xb90/0xb90 [ 2592.600446] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2592.601804] ieee80211_register_hw+0x23c5/0x38b0 [ 2592.603016] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2592.604218] ? net_generic+0xdb/0x2b0 [ 2592.605185] ? lockdep_init_map_type+0x2c7/0x780 [ 2592.606390] ? memset+0x20/0x50 [ 2592.607222] ? __hrtimer_init+0x12c/0x270 [ 2592.608267] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2592.609545] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2592.610726] ? hwsim_new_radio_nl+0x967/0x1080 [ 2592.611882] ? memcpy+0x39/0x60 [ 2592.612726] hwsim_new_radio_nl+0x991/0x1080 [ 2592.613862] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2592.615325] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2592.616987] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2592.618645] genl_family_rcv_msg_doit+0x22d/0x330 [ 2592.619880] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2592.621557] ? cap_capable+0x1cd/0x230 [ 2592.622567] ? ns_capable+0xe2/0x110 [ 2592.623516] genl_rcv_msg+0x36a/0x5a0 [ 2592.624485] ? genl_get_cmd+0x480/0x480 [ 2592.625490] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2592.626808] ? lock_release+0x680/0x680 [ 2592.627813] ? __lockdep_reset_lock+0x180/0x180 [ 2592.628995] netlink_rcv_skb+0x14b/0x430 [ 2592.630045] ? genl_get_cmd+0x480/0x480 [ 2592.631078] ? netlink_ack+0xab0/0xab0 [ 2592.632101] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2592.633283] ? is_vmalloc_addr+0x7b/0xb0 [ 2592.634349] genl_rcv+0x24/0x40 [ 2592.635197] netlink_unicast+0x54e/0x800 [ 2592.636255] ? netlink_attachskb+0x870/0x870 [ 2592.637414] netlink_sendmsg+0x90f/0xe00 [ 2592.638470] ? netlink_unicast+0x800/0x800 [ 2592.639537] ? netlink_unicast+0x800/0x800 [ 2592.640587] __sock_sendmsg+0x154/0x190 [ 2592.641587] ____sys_sendmsg+0x70d/0x870 [ 2592.642616] ? sock_write_iter+0x3d0/0x3d0 [ 2592.643658] ? do_recvmmsg+0x6d0/0x6d0 [ 2592.644635] ? __lockdep_reset_lock+0x180/0x180 [ 2592.645816] ___sys_sendmsg+0xf3/0x170 [ 2592.646806] ? sendmsg_copy_msghdr+0x160/0x160 [ 2592.647972] ? __fget_files+0x2cf/0x520 [ 2592.648972] ? lock_downgrade+0x6d0/0x6d0 [ 2592.650026] ? __lockdep_reset_lock+0x180/0x180 [ 2592.651205] ? futex_exit_release+0x220/0x220 [ 2592.652349] ? __fget_files+0x2f8/0x520 [ 2592.653378] ? __fget_light+0xea/0x290 [ 2592.654395] __sys_sendmsg+0xe5/0x1b0 [ 2592.655374] ? __sys_sendmsg_sock+0x40/0x40 [ 2592.656468] ? __do_sys_futex+0x2bb/0x480 [ 2592.657553] do_syscall_64+0x33/0x40 [ 2592.658519] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2592.659833] RIP: 0033:0x7fc157d92b19 [ 2592.660791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2592.665533] RSP: 002b:00007fc155308188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2592.667518] RAX: ffffffffffffffda RBX: 00007fc157ea5f60 RCX: 00007fc157d92b19 [ 2592.669369] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2592.671228] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2592.673089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2592.674964] R13: 00007fff9c3d972f R14: 00007fc155308300 R15: 0000000000022000 06:20:15 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 59) [ 2592.739040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2592.740788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2592.744337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2592.751521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 06:20:15 executing program 3: unshare(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 2592.766775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2592.768528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2592.773525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2592.783584] FAULT_INJECTION: forcing a failure. [ 2592.783584] name failslab, interval 1, probability 0, space 0, times 0 [ 2592.784901] CPU: 1 PID: 17314 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2592.785676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.786607] Call Trace: [ 2592.786906] dump_stack+0x107/0x167 [ 2592.787314] should_fail.cold+0x5/0xa [ 2592.787736] ? xas_alloc+0x336/0x440 [ 2592.788166] should_failslab+0x5/0x20 [ 2592.788603] kmem_cache_alloc+0x5b/0x310 [ 2592.789057] xas_alloc+0x336/0x440 [ 2592.789454] xas_create+0x34a/0x10d0 [ 2592.789882] ? kernel_text_address+0xf2/0x120 [ 2592.790383] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2592.790967] xas_store+0x8c/0x1c40 [ 2592.791379] __xa_store+0x164/0x2d0 [ 2592.791784] ? xa_delete_node+0x280/0x280 [ 2592.792252] ? trace_hardirqs_on+0x5b/0x180 [ 2592.792732] xa_store+0x31/0x50 [ 2592.793101] __io_uring_add_tctx_node+0x1cf/0x520 [ 2592.793638] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2592.794230] ? alloc_fd+0x2e7/0x670 [ 2592.794643] io_uring_setup+0x1fbb/0x2980 [ 2592.795107] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2592.795672] ? wait_for_completion_io+0x270/0x270 [ 2592.796224] do_syscall_64+0x33/0x40 [ 2592.796638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2592.797203] RIP: 0033:0x7f8bb9614b19 [ 2592.797617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2592.799681] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2592.800520] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2592.801307] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2592.802122] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2592.802923] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2592.803718] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:20:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:20:15 executing program 3: unshare(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 2592.893795] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2592.896442] sd 0:0:0:0: [sg0] tag#0 CDB: Update Block [ 2592.897890] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 3d c1 9c 9f 7b c3 37 1c 51 2d 41 60 7b 19 e4 ff [ 2592.900189] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 97 e6 d9 60 a0 9c 39 81 8f 37 60 8d ae d0 ba 44 [ 2592.902494] sd 0:0:0:0: [sg0] tag#0 CDB[20]: e1 35 08 80 0a 6e bc 64 7a 49 76 c9 82 69 93 09 [ 2592.904789] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 97 7a a7 fc 4c 57 72 fc 89 e2 41 25 aa 8e 46 d6 [ 2592.907104] sd 0:0:0:0: [sg0] tag#0 CDB[40]: 1f 0b 63 80 68 13 60 18 e8 ee a6 d9 07 0b 6d ce [ 2592.909403] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 2a 97 98 2a 59 60 cd ed 40 3f fc 4f 57 a9 48 18 [ 2592.911681] sd 0:0:0:0: [sg0] tag#0 CDB[60]: 7b cd 40 d7 b0 98 62 51 2d df ba 11 b9 33 ad fc [ 2592.913960] sd 0:0:0:0: [sg0] tag#0 CDB[70]: f9 40 99 0e 19 06 57 32 01 df da ea 31 fc 56 cf [ 2592.916230] sd 0:0:0:0: [sg0] tag#0 CDB[80]: 08 a2 4d 89 25 ff 9c 02 6e 91 4e 53 00 b3 00 ee [ 2592.918509] sd 0:0:0:0: [sg0] tag#0 CDB[90]: 42 b6 93 c4 c8 7d 2c 7a 04 0d 6f 2f 0a 89 aa f3 [ 2592.920773] sd 0:0:0:0: [sg0] tag#0 CDB[a0]: d3 1e 66 c4 89 da c4 80 f6 91 22 39 91 cc f4 b2 [ 2592.923054] sd 0:0:0:0: [sg0] tag#0 CDB[b0]: 9c 98 dd 8b 43 e7 73 09 c9 fa 0a cb 78 65 e3 c6 [ 2592.925322] sd 0:0:0:0: [sg0] tag#0 CDB[c0]: 36 d8 78 34 06:20:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:20:29 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000480)=ANY=[@ANYBLOB="e0000002ac141429000000240500000000000000000000007f000001e00000010a010101c26fab9d8df43dc7fafce8bff847144467f8304344449fc85f2977c4c292acf289e07594e496daaf79b608eba965201cd6c214fa31eeb682674ff96ff03c9175517eac4a6cc69973b38a8bea94965f3ce73e1e43ace0b35b4de13c6b4c892c8c4b59d67d4dd9b9af15e2e1745a1819abf0dbe09e32ac4a3253c64878b0c5376ed51308ddb3d28fb2307b016f750f0cd6c81ac134e316e135caa199"], 0x24) setsockopt$inet_group_source_req(r0, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x181080, 0x2) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240)=0xb5, 0xfffffffffffff0b1) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x20000040}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_setup(0x2324, &(0x7f00000003c0)={0x0, 0x8bbb, 0x2, 0x3, 0x325, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r6, &(0x7f0000000080)={0x24, @long}, 0x14) sendmmsg$sock(r6, &(0x7f00000021c0)=[{{0x0, 0x2303, 0x0}}], 0x324, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r1, &(0x7f00000002c0)={0x4}}, 0x80000001) dup3(0xffffffffffffffff, r5, 0x0) io_uring_enter(r2, 0x3491, 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, r5, 0x10000000) syz_io_uring_submit(r3, r7, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x963) 06:20:29 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 60) 06:20:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 49) 06:20:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000680), 0x5}, 0x6010, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x1f, 0x3f, 0x8, 0x8, 0x0, 0x6, 0x20, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x100000000, 0x8}, 0x8005, 0x7f, 0x6, 0x6, 0xfffffffffffffd1b, 0x8, 0x3ff, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(r2, r3) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000280)={0x0, 0xfffffffffffffffd, 0x1000, 0x9, @buffer={0x0, 0x1, &(0x7f00000000c0)=""/1}, &(0x7f00000006c0)="1522407f6cf6ac2dfa0ec141cf2fc8014f8418f53fee9d6455eead42330a386be09fba33ef47897d1db78c4db2a3e55f6444a57f80c3187a93fe10664c10d569ee779026c9fd1d5138acc0740c0dafa55683db3617f8fc6ccd4d0bfadf0d2a68ab851cd4b2c0cba17ecfc8380c05895d9ba1b2d30e74ce1d1b80194153287fdb066da05e025947029e14461f839e6656cc88e2f0d4050a6df26ae672ee8db700484f9891e76f03fcecb92041dab5192cbaf9c69bd30a9c6384dcdc94c84d7dece7af02a01992bbfa1d4cd396393359c693561c7e66cf5d28d03217312ed16401b809fcbd3546cf0112bafead7bd289e82614ed4d664a493f9da1d7d53df104b94022ea6a82b9ba637240b5b67c2c9d74638789f7bb75fe86f3fa44acb3eeabd53495a6144fc6b3cd689a3262b2e7d701e49e893860c5fde4591dcdc81d8fe3ea206c6ad156011f11f07af79aacacf4bc1cb2554e4d67112553d92743ca5e182698971e65615955b04484c213069f69c8d93a2252ebe18cccc99216eab84d65e0f454f85e0789a066d3d2039a4f1c78f617915d8568585e79afc87330036f213c66cacc4c12501a51e8a41091090dd9554283cff92171a60bcb94bfa7deefbccd77332bcb4164ffd15267dd54e3d2811c78f3d0dc5b6c8ce5e48446e1b629d60bb1a5c8c809bd57f91f46cc36aa186acbdda8a839fe72ff097cdc65ef7b73545e4924a6be25baefbd886a1500becbe6404f4326ac2c902f9b2e07fb73026946c5b288f5905a98c79ea0cb4788272418c4562017cf8a924d156e00ee42548946aa82be202c51b03c28810c177b9505d6d95f71e8340f4b2732cba093f9a251ba0adf5c31c145fa940b34141bf672936068abb18d5e53febdaa9ef1c6f61d3f0a4a67936e1199755ea98356e0c88e9eadca2599d478211f043364e33850ab2485666ea7b7278386aa97266f3c7f3db31577bf4100e4440fbce79ef39ef09e337584da5f5882baed1324db93cdccac674d586f2a063a3f0f811a516ca9307d63ad878a1852d236a26f2bf92ba3ca7f1d80a29393969dcd132b4a6305b9bac36118b31b753a8fa8026eebc39d1d3fa594a00f580fc07ac9c21d739965ffde4d3cb7cdf051e33f3ee78a4ce8019e35a75c2fda1bce065b5fb7c198d1b8fd76598c26d0ce53dd4c155a9360d06cae6914dd726cbf700c86779bf0daca59e1556d99be16fc49dc6aeec9ae997280560f2540c51d916854ed374480880678c1cee51d6894fd51c5dd2506cb2545d15378ddf541eee8f1cccfd69759b8c6511efd587188cd378f6b2b7a4030f5ad5c7ee4fca0e0a119c3f6058e94abfd704eb307de56d9ae0fdea6613d99c0006c6107a58f07fc4fbffdb1446346baddb7f17e8519124842ac68880dc4e07554ec5507f84cf559c419e89eba2b941c1ef36c5ba73aa059e76c60dfa8ede86413ef7496c2c89db75b36eb6f5b014f0d3a808245fb2f6162184283db01dec9946fdb76b9e3b0ce5830c1c02e3fabcbcc6fd12fe2545e7d67e080e4960f18b7b1e0de9deea78ec4580379768cdbbf1563103c355c29dd693bbb91652f324066587945e0599f2053da0d5a22f608fb1d65dda16ef459796c0577a587f8af85fee321534d00e9f3fde2beb41520506f721b39263314a702249fc3ad091d1e8013bfdbc4decdb4032e4be73f1fc47a76a173fc9541552135b6aabffe4b843cff239fdf118b44269a3ebe855f9d3cf960fa445ef2325725e4995163e32e0e4bb9c2f03e3397ba0c24c7dd6ddc81e0aa2dc813da3825a5b31cd25bc76cd00f2141d52b428e30ec995a501818286c4423b8a9cf03078d6534f63e2192ba8e6d29491474e8ce4d4ef2637cb9d24349be1b115fe4e6dc84a736465d56e248139364e11bf6c59b74fa6271df1ffb7416816422440115e59858b109a7787379b30635de2e0127ad597401be7e7893cb52e0f8f55ddaf1de44bea6dbd820cb5f3d6134f0866a4dde3fa39bb5a8462146abe257674696b4d950c45a751aceb011916136aa03d2eba6d49d288475915f33ba8f94b971ed8a34a6343a4ec14547311c89b243243ae57dec507b61fbd43c285338bb8080aba557d35a2a4402d2bcd6257a61002b1f893045ab351a25883955affee5e2137bb78f5295127eac9514fc47ac5aea5ebdc136b60aa153fd73748a62d69eb5ecd39c914137cbef33fe28f6cfce81bd78a93c640e33f43bf28de18f6cd2d17003f22bda4cd36805abbf663acc5682fb87b4d03be47cf42b9f226fcbe6cebff9fe3aea32f61c3403cac68b5b53bf6e4c8757f08a7b5a204ec002ae5ee80f0884ec6881a9f255a4622197ba17a653bec289cdb56898276f753408e28c8e7c0d00bcf53b7dc19302191c89c705dcbbfb0e18277552c7f8521fcd1e47279e6d214b0e130e2002fe7a92c03122c462edd0fb11ea336a8e46558e29cf9f6a272484d0a902db547245c9e7677379c32002bdba63a1fff358bc4e2726c187d1f776ead41c6546bc44edae59bae9364273ce7ef8a2ef3f955d069841c993d434c1c122fb5e5b53028cd74058fdbd72bf0f9ed5c155cbe528d667d10aaeb95ec533c82e7c01d69b6ebc34188e8d56700f9db88c93604125c29459f82fe3199be71b76844a0f61ecf6e09799c687678f40da080f952541c81a1f9076841ce3eef89f7777181c8b5e7eefb0515e7053bc3dcb11581df8d437cff7e5b8211cf3db04d5c2651ea66faa3a10ce6ecdcc1751f51ff25e28f78290b0772404e13818fddd8741dd3f102d0c0daa7901f9974197fa2ed34c4f4c35c1689503bcf90a54fc75a45be22ed603c9772835222daff42fdccb5b140a3af6e01bf70efa722e89b925a578690451177b4fb8b33169f6d7d218332e20eda7080b1b5a6d7223ea191cf0d20787efe62c24e6ca9755598611c4f0bd7305473644d83f5307393b2c39e5c5f8cb1f556dfb23b88300abd4dc6a90844095c95a9c8a07e119f14e3d17c7ab200d829a9f0f18d17757a7d7a4c5f716e2947561e208d198a30082ea973afcf2f21679bdfb68c1d20a51eb7faa8344d9bec72134efc158ef6db2e3eb44ec51e229109c825b0f23af83a35fea64e0822da75a57bdecd377aa8eb705fa0ef03ce238c3dfec5c62e1b587ccac27cfa8c473519cf68e659700b78768cbc8c2fc469f7f0a365738b7cedeb4bd3a66dd90c56ca3c9631d6bfb8b6c619f98aa56369180bd59d95cd1007674a2aefa2717fbf58e96e0a186812bc76a43480bd2ff873eff7086547a2f00b5290d19d4ff33540dde7fdea30398da1996b22c1f267e29257beb154243ae4912984b841deea1afa6fc06c7b68682f76cef7c74d128d295643c88fa2a69e5bfe2474ccfc84a08274d091eee8c7b3d8f4ead2e7ef0e8a038992bd7a3b671bf3d5cd4247a40dbe754adbc0291ec3a12c74ee9a87223f52d63e20a0c87f69e36c65dc7aba1ca72799a5d617fe19c30e29c34e643dd9b8fcd7d7b69481edea2cd4ebf6d8b2651cc81757f7dbd40d374119d2bfbd417423144b297bc13c8140eaaf0f67fa638b92a3815b9836b916253500cee9ed699765b82d16bc942652e82c3dba6c67c300d65776d8886a0b0b70253539026ecc6b3dc602ff8d216d7bee097af38d515bd49056a401e382d44d2a4c764c11ebe11d6ce0a88518282dac0d1d99ca391bfe74e4dd573580247472a4d7ea52a2d905a7f901c2a68cca27e31bad89a73bba72fa63a1eaa677d70b61b1710edcbfda1ba41eb3521433edc26757b6169b33578c6d3496fb2fd8ae94aa9fea804169b282bb47c07213a72b4ceb041a70eeb066da81ef7d298f3674aa150503ac1ce3fe19df0088940467d6e027c3c3ffa6eac3debb44054c5945efebe80c1ab9fe6626e0e10e8077e68719436fecfddd26f354dc097edb4898c558435fd03cf03e063318a23fd168af7e2930813be6374bc72413683da3c04fe13249a231b553b86357e812a1b55b450c14a7f9c1465340918f398ee838424a3496f0c6524789867c03de0850b01b0e09e42649b0a5c964375dcf977b35ecff4f44be6f82ccd650804305792a48466f4155b20a4fb4df419cddc8a81968b12b9ffac4305b3e69f04b604b202a5c25ca9d803c5314a18c616d91776ba744042ffc31c7f2a0e557b00656198ec5273942de9a02c8e5748bb9c6120461a552cae1e403a6a55323914fd677b3fd0f08c36d47b61750b36101d091a0ea9e7f82fd64a656cfa7db9cc8ea89c2a2ed45578eef16b02b43040fe07730bddafe9f83db43a6b02807111972bbc17a870b5c450979399dc7ad333ca2dcb8c05fbfd9c9873eb77c33038f65a975a004fddc65158b86e4731033cf16a14a8115bcf4eac91d4310d011ef4adb19030de2f36c932351ce1b612831a10156e170ef8f70bbd20ba344b30a5b8ec174b341a0e5255f984ca99365a7a68bc07732c85353ebd0a120ced94c61322f74fde1b05939066e1c684e5cfd76b249c621e741a734db86ce6e195d61cd669f8afd9e4d5eaed45c4fc91c5829ddd5103aaf90cc04dafe5c1c5cb977431cb790cfc72e92cbc9fd63680957ac1bf6b252dcdacd0a597217aee9af4b345327d8c1b23dc1baad54f951c1a7315268ce276de237fc32162fd7743077579dbb6abb3d84415a39c36922cf01a7827ef39b3c2191f823229c0c668875d44fede3a2dcb0df5986cac29f60486dddef1597a406d78f1c94398eb041d1b16ec166c06b1c4e890517717206bb8552bfa46c543ffedd17f21c67e9ec7237ebbc27165ec0f87ea14f5d249991cf52147189dc85344631b60d3bd7650922d91fe83ddbdd07e95bef78da8aa06605a12be62cd38146227882c58f60f9d8213eb0669cd54dc3c909d35cadeb2fbf859b91dc680d83ab8e1c58ef24fc1cf62a1a394f186106995091e69b3fe3d17e0546927b9e1f395d5c7c7001640c5b63d36624939942705c51e0ccdd262d45899c73c4b44cdb70a63c7a4e23ab532218fc4d55f1a3631a6b6f1cc5a23e524b94f4febd8345e1a074402fb93e077c3e250e8589e38b961598ee6fb2d1de9ad6890b6f5bd31bf60534663dc2bfeb37a5511ee335d27445e54f7f939069a656dc6bf5995090758182136f1c3ef035c55c60964f60965654846b51084fc3c396eef538b74154f5b4ee0bf435118df81d84596b98d95339060f88c3bbeb2bbd30d5316e3864a6dcb0fc00d6fffd39f9f0479550cece7ef6fcf56080fd9195d36264567b44907e720e0d8f64da50b4cd9d7a906b67a745111b07df2a4f810c30c5e13245c266e2d28e18bd25210929538337cd4ea6776154ea707b8cd16a61c1bd3561d1ffce62e096b922961812a42ecd6211006ad1de01ae98d745c767ec710a01f6654c167249dd40ef8ba9cc566e332d49e1014b76fa98fe58150ff6e7c0c3363b88768ed19f978cd7fbcb3a7fdc280cfe37f51ea7177f2dde06286b846a988caea2d09a7724dd040cbd61db9cabcc86b3e03610b83e20ec3d40f35d8929f93e7f2fa7e6e30559ffc08ce30072e66f93557dbe8b8132d967baccd39e9848babce491d966c878d0aa166042d87f654bf117131fa7260d9d2c184f600514ab7bf6f32aa38e72db4b3cf44d98ffbdfdbd5ed69e5700c794c0cef60e1619add9572f39e27fe92111965f5e00d05ccce395df141b65aa94cebf9602090499e3b3f3f93d7e7a8ca444d620a2e40fa6f9c2bb95669082566b483e5a822c6964c09f4e7cf7bc924739db855a26e39eb69cd88df02c00ae9b2ee3506", &(0x7f0000000100)=""/23, 0x9, 0x10, 0x6, &(0x7f0000000180)}) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8040, 0x10a) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) 06:20:29 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="dc06000000cee6499b0000007f85aa259d4fdc6a4f571c77cab40a72d4f56f2c6600"/44]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:20:29 executing program 3: unshare(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:20:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a7c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x37c}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) accept(r0, 0x0, &(0x7f0000000080)=0xfffffffffffffd8f) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) dup2(0xffffffffffffffff, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2607.293563] FAULT_INJECTION: forcing a failure. [ 2607.293563] name failslab, interval 1, probability 0, space 0, times 0 [ 2607.294918] CPU: 1 PID: 17337 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2607.295693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.296667] Call Trace: [ 2607.296973] dump_stack+0x107/0x167 [ 2607.297414] should_fail.cold+0x5/0xa [ 2607.297871] ? ptlock_alloc+0x1d/0x70 [ 2607.298330] should_failslab+0x5/0x20 [ 2607.298785] kmem_cache_alloc+0x5b/0x310 [ 2607.299281] ptlock_alloc+0x1d/0x70 [ 2607.299716] pte_alloc_one+0x68/0x1a0 [ 2607.300166] __pte_alloc+0x1d/0x330 [ 2607.300603] copy_page_range+0x1b62/0x3810 [ 2607.301101] ? perf_trace_lock+0xac/0x490 [ 2607.301561] ? lock_chain_count+0x20/0x20 [ 2607.302082] ? up_write+0x191/0x550 [ 2607.302512] ? vm_iomap_memory+0x190/0x190 [ 2607.303010] ? downgrade_write+0x3a0/0x3a0 [ 2607.303485] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2607.304121] ? __vma_link_rb+0x540/0x700 [ 2607.304608] copy_process+0x7654/0x78b0 [ 2607.305097] ? __cleanup_sighand+0xb0/0xb0 [ 2607.305611] ? _copy_from_user+0xfb/0x1b0 [ 2607.306115] kernel_clone+0xe7/0x980 [ 2607.306556] ? __lockdep_reset_lock+0x180/0x180 [ 2607.307080] ? create_io_thread+0xf0/0xf0 [ 2607.307586] ? ksys_write+0x21a/0x260 [ 2607.308043] ? lock_downgrade+0x6d0/0x6d0 [ 2607.308532] __do_sys_clone3+0x1e5/0x320 [ 2607.309019] ? __do_sys_clone+0x110/0x110 [ 2607.309524] ? rcu_read_lock_any_held+0x75/0xa0 [ 2607.310089] ? vfs_write+0x354/0xb10 [ 2607.310506] ? fput_many+0x2f/0x1a0 [ 2607.310956] ? ksys_write+0x1a9/0x260 [ 2607.311415] ? __ia32_sys_read+0xb0/0xb0 [ 2607.311903] do_syscall_64+0x33/0x40 [ 2607.312343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2607.312925] RIP: 0033:0x7f2b50818b19 [ 2607.313367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.313935] FAULT_INJECTION: forcing a failure. [ 2607.313935] name failslab, interval 1, probability 0, space 0, times 0 [ 2607.315543] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2607.315557] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2607.315566] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2607.315573] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2607.315579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2607.315597] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2607.323327] CPU: 0 PID: 17343 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2607.325035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.327080] Call Trace: [ 2607.327728] dump_stack+0x107/0x167 06:20:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="1cef0000220011c78900000000ff00fffff391c4b258a112a5135b44817cbcf22f2d9de6"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r1, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000040)={r0}) [ 2607.328622] should_fail.cold+0x5/0xa [ 2607.329715] ? create_object.isra.0+0x3a/0xa20 [ 2607.330849] should_failslab+0x5/0x20 [ 2607.331783] kmem_cache_alloc+0x5b/0x310 [ 2607.332768] ? mark_held_locks+0x9e/0xe0 [ 2607.333765] create_object.isra.0+0x3a/0xa20 [ 2607.334843] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2607.336095] kmem_cache_alloc+0x159/0x310 [ 2607.337109] xas_alloc+0x336/0x440 [ 2607.337980] xas_create+0x34a/0x10d0 [ 2607.338902] ? kernel_text_address+0xf2/0x120 [ 2607.339995] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2607.341276] xas_store+0x8c/0x1c40 [ 2607.342163] __xa_store+0x164/0x2d0 [ 2607.343056] ? xa_delete_node+0x280/0x280 [ 2607.344079] ? trace_hardirqs_on+0x5b/0x180 [ 2607.345142] xa_store+0x31/0x50 [ 2607.345958] __io_uring_add_tctx_node+0x1cf/0x520 [ 2607.347136] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2607.348416] ? alloc_fd+0x2e7/0x670 [ 2607.349320] io_uring_setup+0x1fbb/0x2980 [ 2607.350349] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2607.351585] ? wait_for_completion_io+0x270/0x270 [ 2607.352795] do_syscall_64+0x33/0x40 [ 2607.353705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2607.354962] RIP: 0033:0x7f8bb9614b19 [ 2607.355872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.360376] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2607.362238] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2607.362949] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2607.363963] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2607.363976] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2607.363993] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2607.370087] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:20:29 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 2607.374613] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2607.375605] CPU: 1 PID: 17351 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2607.376399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.377355] Call Trace: [ 2607.377667] dump_stack+0x107/0x167 [ 2607.378106] sysfs_warn_dup.cold+0x1c/0x29 [ 2607.378595] sysfs_do_create_link_sd+0x122/0x140 [ 2607.379141] sysfs_create_link+0x5f/0xc0 [ 2607.379609] device_add+0x703/0x1c50 [ 2607.380041] ? devlink_add_symlinks+0x970/0x970 [ 2607.380583] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2607.381188] wiphy_register+0x1da6/0x2850 [ 2607.381670] ? wiphy_unregister+0xb90/0xb90 [ 2607.382161] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2607.382776] ieee80211_register_hw+0x23c5/0x38b0 [ 2607.383299] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2607.383854] ? net_generic+0xdb/0x2b0 [ 2607.384274] ? lockdep_init_map_type+0x2c7/0x780 [ 2607.384823] ? memset+0x20/0x50 [ 2607.385185] ? __hrtimer_init+0x12c/0x270 [ 2607.385634] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2607.386227] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2607.386725] ? hwsim_new_radio_nl+0x967/0x1080 [ 2607.387262] ? memcpy+0x39/0x60 [ 2607.387623] hwsim_new_radio_nl+0x991/0x1080 [ 2607.388134] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2607.388734] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2607.389444] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2607.390211] genl_family_rcv_msg_doit+0x22d/0x330 [ 2607.390768] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2607.391525] ? cap_capable+0x1cd/0x230 [ 2607.391980] ? ns_capable+0xe2/0x110 [ 2607.392410] genl_rcv_msg+0x36a/0x5a0 [ 2607.392851] ? genl_get_cmd+0x480/0x480 [ 2607.393310] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2607.393870] ? lock_release+0x680/0x680 [ 2607.394345] ? __lockdep_reset_lock+0x180/0x180 [ 2607.394852] netlink_rcv_skb+0x14b/0x430 [ 2607.395288] ? genl_get_cmd+0x480/0x480 [ 2607.395749] ? netlink_ack+0xab0/0xab0 [ 2607.396200] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2607.396731] ? is_vmalloc_addr+0x7b/0xb0 [ 2607.397203] genl_rcv+0x24/0x40 [ 2607.397580] netlink_unicast+0x54e/0x800 [ 2607.398057] ? netlink_attachskb+0x870/0x870 [ 2607.398567] netlink_sendmsg+0x90f/0xe00 [ 2607.399046] ? netlink_unicast+0x800/0x800 [ 2607.399540] ? netlink_unicast+0x800/0x800 [ 2607.400035] __sock_sendmsg+0x154/0x190 [ 2607.400493] ____sys_sendmsg+0x70d/0x870 [ 2607.400967] ? sock_write_iter+0x3d0/0x3d0 [ 2607.401449] ? do_recvmmsg+0x6d0/0x6d0 [ 2607.401900] ? __lockdep_reset_lock+0x180/0x180 [ 2607.402413] ___sys_sendmsg+0xf3/0x170 [ 2607.402861] ? sendmsg_copy_msghdr+0x160/0x160 [ 2607.403397] ? __fget_files+0x2cf/0x520 [ 2607.403850] ? lock_downgrade+0x6d0/0x6d0 [ 2607.404325] ? __lockdep_reset_lock+0x180/0x180 [ 2607.404859] ? futex_exit_release+0x220/0x220 [ 2607.405380] ? __fget_files+0x2f8/0x520 [ 2607.405843] ? __fget_light+0xea/0x290 [ 2607.406284] __sys_sendmsg+0xe5/0x1b0 [ 2607.406694] ? __sys_sendmsg_sock+0x40/0x40 [ 2607.407155] ? __do_sys_futex+0x2bb/0x480 [ 2607.407619] do_syscall_64+0x33/0x40 [ 2607.408020] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2607.408607] RIP: 0033:0x7f277f764b19 [ 2607.409017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.411127] RSP: 002b:00007f277ccda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2607.412002] RAX: ffffffffffffffda RBX: 00007f277f877f60 RCX: 00007f277f764b19 [ 2607.412819] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2607.413640] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2607.414460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2607.415279] R13: 00007fff5bc6ce3f R14: 00007f277ccda300 R15: 0000000000022000 06:20:29 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) clone3(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r1, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) clone3(&(0x7f00000004c0)={0x200000000, 0x0, &(0x7f0000000080), 0x0, {}, &(0x7f00000001c0), 0x0, &(0x7f00000001c0)=""/80, 0x0}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r2, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x7fffffff, 0x8, 0x0, 0x9, 0x6, 0x800}, {0x2, 0x8, 0x1, 0x0, 0x7ff, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=none,\x00'/24]) 06:20:29 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:20:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:20:29 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:20:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 50) 06:20:30 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 61) [ 2607.627867] FAULT_INJECTION: forcing a failure. [ 2607.627867] name failslab, interval 1, probability 0, space 0, times 0 [ 2607.629606] CPU: 1 PID: 17474 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2607.630587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.631543] Call Trace: [ 2607.631863] dump_stack+0x107/0x167 [ 2607.632382] should_fail.cold+0x5/0xa [ 2607.632917] ? create_object.isra.0+0x3a/0xa20 [ 2607.633569] should_failslab+0x5/0x20 [ 2607.634108] kmem_cache_alloc+0x5b/0x310 [ 2607.634672] ? mark_held_locks+0x9e/0xe0 [ 2607.635242] create_object.isra.0+0x3a/0xa20 [ 2607.635842] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2607.636553] kmem_cache_alloc+0x159/0x310 [ 2607.637148] xas_alloc+0x336/0x440 [ 2607.637649] xas_create+0x34a/0x10d0 [ 2607.638192] ? kernel_text_address+0xf2/0x120 [ 2607.638823] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2607.639563] xas_store+0x8c/0x1c40 [ 2607.640065] __xa_store+0x164/0x2d0 [ 2607.640582] ? xa_delete_node+0x280/0x280 [ 2607.641163] ? trace_hardirqs_on+0x5b/0x180 [ 2607.641774] xa_store+0x31/0x50 [ 2607.642244] __io_uring_add_tctx_node+0x1cf/0x520 [ 2607.642913] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2607.643640] ? alloc_fd+0x2e7/0x670 [ 2607.644082] io_uring_setup+0x1fbb/0x2980 [ 2607.644669] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2607.645380] ? wait_for_completion_io+0x270/0x270 [ 2607.646079] do_syscall_64+0x33/0x40 [ 2607.646615] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2607.647341] RIP: 0033:0x7f8bb9614b19 [ 2607.647853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.650433] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2607.650975] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2607.651474] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2607.651482] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2607.651489] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2607.651496] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2607.651503] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2607.653329] FAULT_INJECTION: forcing a failure. [ 2607.653329] name failslab, interval 1, probability 0, space 0, times 0 [ 2607.660281] CPU: 1 PID: 17475 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2607.661247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.662423] Call Trace: [ 2607.662798] dump_stack+0x107/0x167 [ 2607.663310] should_fail.cold+0x5/0xa [ 2607.663837] ? create_object.isra.0+0x3a/0xa20 [ 2607.664467] should_failslab+0x5/0x20 [ 2607.664480] kmem_cache_alloc+0x5b/0x310 [ 2607.664501] create_object.isra.0+0x3a/0xa20 [ 2607.666505] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2607.667227] kmem_cache_alloc+0x159/0x310 [ 2607.667812] __pmd_alloc+0x94/0x5e0 [ 2607.668325] copy_page_range+0x2bd8/0x3810 [ 2607.668384] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2607.668927] ? perf_trace_lock+0xac/0x490 [ 2607.671352] ? lock_chain_count+0x20/0x20 [ 2607.671961] ? up_write+0x191/0x550 [ 2607.672471] ? vm_iomap_memory+0x190/0x190 [ 2607.673065] ? downgrade_write+0x3a0/0x3a0 [ 2607.673652] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2607.674413] ? __vma_link_rb+0x540/0x700 [ 2607.674994] copy_process+0x7654/0x78b0 [ 2607.675575] ? __cleanup_sighand+0xb0/0xb0 [ 2607.676174] ? _copy_from_user+0xfb/0x1b0 [ 2607.676755] kernel_clone+0xe7/0x980 [ 2607.677278] ? __lockdep_reset_lock+0x180/0x180 [ 2607.677941] ? create_io_thread+0xf0/0xf0 [ 2607.678533] ? ksys_write+0x21a/0x260 [ 2607.679055] ? lock_downgrade+0x6d0/0x6d0 [ 2607.679629] __do_sys_clone3+0x1e5/0x320 [ 2607.680199] ? __do_sys_clone+0x110/0x110 [ 2607.680790] ? rcu_read_lock_any_held+0x75/0xa0 [ 2607.681421] ? vfs_write+0x354/0xb10 [ 2607.681936] ? fput_many+0x2f/0x1a0 [ 2607.682440] ? ksys_write+0x1a9/0x260 [ 2607.682966] ? __ia32_sys_read+0xb0/0xb0 [ 2607.683539] do_syscall_64+0x33/0x40 [ 2607.684058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2607.684777] RIP: 0033:0x7f2b50818b19 [ 2607.685298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.687854] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2607.688904] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2607.689899] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2607.690899] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2607.691885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2607.692872] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2607.693882] CPU: 0 PID: 17478 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2607.695594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.697613] Call Trace: [ 2607.698271] dump_stack+0x107/0x167 [ 2607.699161] sysfs_warn_dup.cold+0x1c/0x29 [ 2607.700194] sysfs_do_create_link_sd+0x122/0x140 [ 2607.701347] sysfs_create_link+0x5f/0xc0 [ 2607.702347] device_add+0x703/0x1c50 [ 2607.703261] ? devlink_add_symlinks+0x970/0x970 [ 2607.704401] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2607.705688] wiphy_register+0x1da6/0x2850 [ 2607.706722] ? wiphy_unregister+0xb90/0xb90 [ 2607.707789] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2607.709088] ieee80211_register_hw+0x23c5/0x38b0 [ 2607.710273] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2607.711441] ? net_generic+0xdb/0x2b0 [ 2607.712377] ? lockdep_init_map_type+0x2c7/0x780 [ 2607.713532] ? memset+0x20/0x50 [ 2607.714344] ? __hrtimer_init+0x12c/0x270 [ 2607.715358] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2607.716595] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2607.717720] ? hwsim_new_radio_nl+0x967/0x1080 [ 2607.718839] ? memcpy+0x39/0x60 [ 2607.719648] hwsim_new_radio_nl+0x991/0x1080 [ 2607.720729] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2607.722017] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2607.723615] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2607.725204] genl_family_rcv_msg_doit+0x22d/0x330 [ 2607.726387] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2607.727989] ? cap_capable+0x1cd/0x230 [ 2607.728953] ? ns_capable+0xe2/0x110 [ 2607.729865] genl_rcv_msg+0x36a/0x5a0 [ 2607.730804] ? genl_get_cmd+0x480/0x480 [ 2607.731773] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2607.733031] ? lock_release+0x680/0x680 [ 2607.734002] ? __lockdep_reset_lock+0x180/0x180 [ 2607.735139] netlink_rcv_skb+0x14b/0x430 [ 2607.736124] ? genl_get_cmd+0x480/0x480 [ 2607.737093] ? netlink_ack+0xab0/0xab0 [ 2607.738064] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2607.739176] ? is_vmalloc_addr+0x7b/0xb0 [ 2607.740168] genl_rcv+0x24/0x40 [ 2607.740971] netlink_unicast+0x54e/0x800 [ 2607.741983] ? netlink_attachskb+0x870/0x870 [ 2607.743066] netlink_sendmsg+0x90f/0xe00 [ 2607.744062] ? netlink_unicast+0x800/0x800 [ 2607.745106] ? netlink_unicast+0x800/0x800 [ 2607.746144] __sock_sendmsg+0x154/0x190 [ 2607.747113] ____sys_sendmsg+0x70d/0x870 [ 2607.748108] ? sock_write_iter+0x3d0/0x3d0 [ 2607.749132] ? do_recvmmsg+0x6d0/0x6d0 [ 2607.750100] ? __lockdep_reset_lock+0x180/0x180 [ 2607.751240] ___sys_sendmsg+0xf3/0x170 [ 2607.752191] ? sendmsg_copy_msghdr+0x160/0x160 [ 2607.753306] ? __fget_files+0x2cf/0x520 [ 2607.754282] ? lock_downgrade+0x6d0/0x6d0 [ 2607.755290] ? __lockdep_reset_lock+0x180/0x180 [ 2607.756421] ? futex_exit_release+0x220/0x220 [ 2607.757521] ? __fget_files+0x2f8/0x520 [ 2607.758508] ? __fget_light+0xea/0x290 [ 2607.759467] __sys_sendmsg+0xe5/0x1b0 [ 2607.760396] ? __sys_sendmsg_sock+0x40/0x40 [ 2607.761441] ? __do_sys_futex+0x2bb/0x480 [ 2607.762491] do_syscall_64+0x33/0x40 [ 2607.763401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2607.764644] RIP: 0033:0x7fc157d92b19 [ 2607.765549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.770038] RSP: 002b:00007fc1552c6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2607.771892] RAX: ffffffffffffffda RBX: 00007fc157ea60e0 RCX: 00007fc157d92b19 [ 2607.773627] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2607.775365] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2607.777096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2607.778839] R13: 00007fff9c3d972f R14: 00007fc1552c6300 R15: 0000000000022000 [ 2607.810066] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2607.816806] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2607.818122] CPU: 1 PID: 17463 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2607.819074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.820049] Call Trace: [ 2607.820419] dump_stack+0x107/0x167 [ 2607.820918] sysfs_warn_dup.cold+0x1c/0x29 [ 2607.821502] sysfs_do_create_link_sd+0x122/0x140 [ 2607.822162] sysfs_create_link+0x5f/0xc0 [ 2607.822734] device_add+0x703/0x1c50 [ 2607.823244] ? devlink_add_symlinks+0x970/0x970 [ 2607.823896] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2607.824617] wiphy_register+0x1da6/0x2850 [ 2607.825203] ? wiphy_unregister+0xb90/0xb90 [ 2607.825823] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2607.826577] ieee80211_register_hw+0x23c5/0x38b0 [ 2607.827239] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2607.827898] ? net_generic+0xdb/0x2b0 [ 2607.828343] ? lockdep_init_map_type+0x2c7/0x780 [ 2607.829011] ? memset+0x20/0x50 [ 2607.829397] ? __hrtimer_init+0x12c/0x270 [ 2607.829990] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2607.830587] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2607.831231] ? hwsim_new_radio_nl+0x967/0x1080 [ 2607.831764] ? memcpy+0x39/0x60 [ 2607.832230] hwsim_new_radio_nl+0x991/0x1080 [ 2607.832848] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2607.833582] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2607.834500] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2607.835410] genl_family_rcv_msg_doit+0x22d/0x330 [ 2607.836090] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2607.836999] ? cap_capable+0x1cd/0x230 [ 2607.837547] ? ns_capable+0xe2/0x110 [ 2607.838078] genl_rcv_msg+0x36a/0x5a0 [ 2607.838606] ? genl_get_cmd+0x480/0x480 [ 2607.839161] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2607.839886] ? lock_release+0x680/0x680 [ 2607.840429] ? __lockdep_reset_lock+0x180/0x180 [ 2607.841066] netlink_rcv_skb+0x14b/0x430 [ 2607.841622] ? genl_get_cmd+0x480/0x480 [ 2607.842180] ? netlink_ack+0xab0/0xab0 [ 2607.842718] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2607.843357] ? is_vmalloc_addr+0x7b/0xb0 [ 2607.843918] genl_rcv+0x24/0x40 [ 2607.844367] netlink_unicast+0x54e/0x800 [ 2607.844926] ? netlink_attachskb+0x870/0x870 [ 2607.845534] netlink_sendmsg+0x90f/0xe00 [ 2607.846106] ? netlink_unicast+0x800/0x800 [ 2607.846696] ? netlink_unicast+0x800/0x800 [ 2607.847280] __sock_sendmsg+0x154/0x190 [ 2607.847836] ____sys_sendmsg+0x70d/0x870 [ 2607.848399] ? sock_write_iter+0x3d0/0x3d0 [ 2607.848976] ? do_recvmmsg+0x6d0/0x6d0 [ 2607.849517] ? __lockdep_reset_lock+0x180/0x180 [ 2607.850172] ___sys_sendmsg+0xf3/0x170 [ 2607.850709] ? sendmsg_copy_msghdr+0x160/0x160 [ 2607.851343] ? __fget_files+0x2cf/0x520 [ 2607.851886] ? lock_downgrade+0x6d0/0x6d0 [ 2607.852369] ? __lockdep_reset_lock+0x180/0x180 [ 2607.853015] ? futex_exit_release+0x220/0x220 [ 2607.853544] ? __fget_files+0x2f8/0x520 [ 2607.854111] ? __fget_light+0xea/0x290 [ 2607.854650] __sys_sendmsg+0xe5/0x1b0 [ 2607.855178] ? __sys_sendmsg_sock+0x40/0x40 [ 2607.855772] ? __do_sys_futex+0x2bb/0x480 [ 2607.856369] do_syscall_64+0x33/0x40 [ 2607.856881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2607.857588] RIP: 0033:0x7fc157d92b19 [ 2607.858121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.860647] RSP: 002b:00007fc155308188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2607.861716] RAX: ffffffffffffffda RBX: 00007fc157ea5f60 RCX: 00007fc157d92b19 [ 2607.862700] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 2607.863684] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2607.864677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2607.865671] R13: 00007fff9c3d972f R14: 00007fc155308300 R15: 0000000000022000 [ 2607.977610] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2607.982873] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2607.984044] CPU: 1 PID: 17463 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2607.985007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.986171] Call Trace: [ 2607.986493] dump_stack+0x107/0x167 [ 2607.987000] sysfs_warn_dup.cold+0x1c/0x29 [ 2607.987592] sysfs_do_create_link_sd+0x122/0x140 [ 2607.988245] sysfs_create_link+0x5f/0xc0 [ 2607.988807] device_add+0x703/0x1c50 [ 2607.989317] ? devlink_add_symlinks+0x970/0x970 [ 2607.989974] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2607.990695] wiphy_register+0x1da6/0x2850 [ 2607.991279] ? wiphy_unregister+0xb90/0xb90 [ 2607.991886] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2607.992619] ieee80211_register_hw+0x23c5/0x38b0 [ 2607.993290] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2607.993956] ? net_generic+0xdb/0x2b0 [ 2607.994489] ? lockdep_init_map_type+0x2c7/0x780 [ 2607.995142] ? memset+0x20/0x50 [ 2607.995599] ? __hrtimer_init+0x12c/0x270 [ 2607.996173] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2607.996873] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2607.997521] ? hwsim_new_radio_nl+0x967/0x1080 [ 2607.998151] ? memcpy+0x39/0x60 [ 2607.998609] hwsim_new_radio_nl+0x991/0x1080 [ 2607.999217] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2607.999935] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2608.000842] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2608.001597] genl_family_rcv_msg_doit+0x22d/0x330 [ 2608.002276] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2608.003203] ? cap_capable+0x1cd/0x230 [ 2608.003754] ? ns_capable+0xe2/0x110 [ 2608.004267] genl_rcv_msg+0x36a/0x5a0 [ 2608.004786] ? genl_get_cmd+0x480/0x480 [ 2608.005339] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2608.005949] ? lock_release+0x680/0x680 [ 2608.006498] ? __lockdep_reset_lock+0x180/0x180 [ 2608.007042] netlink_rcv_skb+0x14b/0x430 [ 2608.007609] ? genl_get_cmd+0x480/0x480 [ 2608.008160] ? netlink_ack+0xab0/0xab0 [ 2608.008706] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2608.009337] ? is_vmalloc_addr+0x7b/0xb0 [ 2608.009904] genl_rcv+0x24/0x40 [ 2608.010302] netlink_unicast+0x54e/0x800 [ 2608.010869] ? netlink_attachskb+0x870/0x870 [ 2608.011480] netlink_sendmsg+0x90f/0xe00 [ 2608.012046] ? netlink_unicast+0x800/0x800 [ 2608.012638] ? netlink_unicast+0x800/0x800 [ 2608.013229] __sock_sendmsg+0x154/0x190 [ 2608.013791] ____sys_sendmsg+0x70d/0x870 [ 2608.014368] ? sock_write_iter+0x3d0/0x3d0 [ 2608.014939] ? do_recvmmsg+0x6d0/0x6d0 [ 2608.015494] ? __lockdep_reset_lock+0x180/0x180 [ 2608.016137] ___sys_sendmsg+0xf3/0x170 [ 2608.016679] ? sendmsg_copy_msghdr+0x160/0x160 [ 2608.017314] ? __fget_files+0x2cf/0x520 [ 2608.017858] ? lock_downgrade+0x6d0/0x6d0 [ 2608.018448] ? futex_exit_release+0x220/0x220 [ 2608.019063] ? __fget_files+0x2f8/0x520 [ 2608.019628] ? __fget_light+0xea/0x290 [ 2608.020167] __sys_sendmsg+0xe5/0x1b0 [ 2608.020691] ? __sys_sendmsg_sock+0x40/0x40 [ 2608.021187] ? __do_sys_futex+0x2bb/0x480 [ 2608.021776] do_syscall_64+0x33/0x40 [ 2608.022306] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2608.022898] RIP: 0033:0x7fc157d92b19 [ 2608.023414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2608.025944] RSP: 002b:00007fc155308188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2608.026986] RAX: ffffffffffffffda RBX: 00007fc157ea5f60 RCX: 00007fc157d92b19 [ 2608.027974] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 2608.028961] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2608.029951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2608.030771] R13: 00007fff9c3d972f R14: 00007fc155308300 R15: 0000000000022000 [ 2608.059004] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2608.077939] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2608.080196] CPU: 0 PID: 17478 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2608.081881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2608.083912] Call Trace: [ 2608.084558] dump_stack+0x107/0x167 [ 2608.085453] sysfs_warn_dup.cold+0x1c/0x29 [ 2608.086495] sysfs_do_create_link_sd+0x122/0x140 [ 2608.087651] sysfs_create_link+0x5f/0xc0 [ 2608.088647] device_add+0x703/0x1c50 [ 2608.089563] ? devlink_add_symlinks+0x970/0x970 [ 2608.090708] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2608.091993] wiphy_register+0x1da6/0x2850 [ 2608.093017] ? wiphy_unregister+0xb90/0xb90 [ 2608.094093] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2608.095397] ieee80211_register_hw+0x23c5/0x38b0 [ 2608.096566] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2608.097732] ? net_generic+0xdb/0x2b0 [ 2608.098673] ? lockdep_init_map_type+0x2c7/0x780 [ 2608.099826] ? memset+0x20/0x50 [ 2608.100633] ? __hrtimer_init+0x12c/0x270 [ 2608.101646] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2608.102893] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2608.104019] ? hwsim_new_radio_nl+0x967/0x1080 [ 2608.105130] ? memcpy+0x39/0x60 [ 2608.105949] hwsim_new_radio_nl+0x991/0x1080 [ 2608.107025] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2608.108303] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2608.109902] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2608.111498] genl_family_rcv_msg_doit+0x22d/0x330 [ 2608.112671] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2608.114285] ? cap_capable+0x1cd/0x230 [ 2608.115247] ? ns_capable+0xe2/0x110 [ 2608.116161] genl_rcv_msg+0x36a/0x5a0 [ 2608.117091] ? genl_get_cmd+0x480/0x480 [ 2608.118069] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2608.119327] ? lock_release+0x680/0x680 [ 2608.120290] ? __lockdep_reset_lock+0x180/0x180 [ 2608.121424] netlink_rcv_skb+0x14b/0x430 [ 2608.122419] ? genl_get_cmd+0x480/0x480 [ 2608.123390] ? netlink_ack+0xab0/0xab0 [ 2608.124347] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2608.125457] ? is_vmalloc_addr+0x7b/0xb0 [ 2608.126462] genl_rcv+0x24/0x40 [ 2608.127266] netlink_unicast+0x54e/0x800 [ 2608.128258] ? netlink_attachskb+0x870/0x870 [ 2608.129341] netlink_sendmsg+0x90f/0xe00 [ 2608.130347] ? netlink_unicast+0x800/0x800 [ 2608.131390] ? netlink_unicast+0x800/0x800 [ 2608.132420] __sock_sendmsg+0x154/0x190 [ 2608.133389] ____sys_sendmsg+0x70d/0x870 [ 2608.134389] ? sock_write_iter+0x3d0/0x3d0 [ 2608.135415] ? do_recvmmsg+0x6d0/0x6d0 [ 2608.136378] ? __lockdep_reset_lock+0x180/0x180 [ 2608.137514] ___sys_sendmsg+0xf3/0x170 [ 2608.138472] ? sendmsg_copy_msghdr+0x160/0x160 [ 2608.139587] ? __fget_files+0x2cf/0x520 [ 2608.140553] ? lock_downgrade+0x6d0/0x6d0 [ 2608.141561] ? __lockdep_reset_lock+0x180/0x180 [ 2608.142726] ? futex_exit_release+0x220/0x220 [ 2608.143828] ? __fget_files+0x2f8/0x520 [ 2608.144805] ? __fget_light+0xea/0x290 [ 2608.145763] __sys_sendmsg+0xe5/0x1b0 [ 2608.146698] ? __sys_sendmsg_sock+0x40/0x40 [ 2608.147744] ? __do_sys_futex+0x2bb/0x480 [ 2608.148784] do_syscall_64+0x33/0x40 [ 2608.149693] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2608.150943] RIP: 0033:0x7fc157d92b19 [ 2608.151851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2608.156337] RSP: 002b:00007fc1552c6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2608.158197] RAX: ffffffffffffffda RBX: 00007fc157ea60e0 RCX: 00007fc157d92b19 [ 2608.159937] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 2608.161675] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2608.163418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2608.165156] R13: 00007fff9c3d972f R14: 00007fc1552c6300 R15: 0000000000022000 06:20:46 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21, 0x2000000000}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:20:46 executing program 1: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r3, &(0x7f0000019340)=""/102400, 0x19000) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/95, 0x5f}], 0x1, &(0x7f00000004c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x10040) syz_io_uring_setup(0x3a62, &(0x7f0000000ac0)={0x0, 0x50f1, 0x20, 0x2, 0x209, 0x0, r5}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000c40)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xa4}, 0x101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x8041}, 0x0, {0x0, r7}}, 0x5) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2624.513450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 06:20:46 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002000210c00000000000000000200000008000000", @ANYRES32=0x0, @ANYBLOB="e1bbfaf12f75e4e6b900000100"/22], 0x20}}, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r3) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, r4, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0) unshare(0x48020200) keyctl$setperm(0x5, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000180)='logon\x00', &(0x7f00000002c0)={'syz', 0x1}, 0xfffffffffffffffd) 06:20:46 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400, 0x103) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xc0, 0x1, 0x3, 0x3, 0x0, 0x3, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82a9, 0x4, @perf_config_ext={0x1, 0x1ff}, 0xdc, 0x9, 0x6, 0x2, 0x200, 0xfffffffc, 0xffff, 0x0, 0x100, 0x0, 0x9}, 0xffffffffffffffff, 0x5, r0, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r3, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) signalfd(r3, &(0x7f0000000200)={[0x3]}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000000000000020073797a31e1ffffff130000001100010000000000000000000000000a0000000000000000000000000000000000000041000000000000000000"], 0x3c}}, 0x0) 06:20:46 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 62) 06:20:46 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 51) 06:20:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:20:46 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 2624.537901] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2624.543818] FAULT_INJECTION: forcing a failure. [ 2624.543818] name failslab, interval 1, probability 0, space 0, times 0 [ 2624.545566] CPU: 1 PID: 17500 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2624.546603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2624.547813] Call Trace: [ 2624.548215] dump_stack+0x107/0x167 [ 2624.548755] should_fail.cold+0x5/0xa [ 2624.549313] ? vm_area_dup+0x78/0x290 [ 2624.549870] should_failslab+0x5/0x20 [ 2624.550441] kmem_cache_alloc+0x5b/0x310 [ 2624.551026] ? lock_downgrade+0x6d0/0x6d0 [ 2624.551634] vm_area_dup+0x78/0x290 [ 2624.552182] ? _cond_resched+0x10/0x30 [ 2624.552752] ? copy_page_range+0x24e9/0x3810 [ 2624.553421] ? vm_area_alloc+0x110/0x110 [ 2624.554018] ? up_write+0x191/0x550 [ 2624.554583] ? vm_iomap_memory+0x190/0x190 [ 2624.555205] ? downgrade_write+0x3a0/0x3a0 [ 2624.555833] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2624.556636] ? __vma_link_rb+0x540/0x700 [ 2624.557242] copy_process+0x298b/0x78b0 [ 2624.557861] ? __cleanup_sighand+0xb0/0xb0 [ 2624.558522] ? _copy_from_user+0xfb/0x1b0 [ 2624.559139] kernel_clone+0xe7/0x980 [ 2624.559689] ? __lockdep_reset_lock+0x180/0x180 [ 2624.560377] ? create_io_thread+0xf0/0xf0 [ 2624.560994] ? ksys_write+0x21a/0x260 [ 2624.561551] ? lock_downgrade+0x6d0/0x6d0 [ 2624.561977] FAULT_INJECTION: forcing a failure. [ 2624.561977] name failslab, interval 1, probability 0, space 0, times 0 [ 2624.562170] __do_sys_clone3+0x1e5/0x320 [ 2624.562185] ? __do_sys_clone+0x110/0x110 [ 2624.562218] ? rcu_read_lock_any_held+0x75/0xa0 [ 2624.566646] ? vfs_write+0x354/0xb10 [ 2624.567192] ? fput_many+0x2f/0x1a0 [ 2624.567731] ? ksys_write+0x1a9/0x260 [ 2624.568284] ? __ia32_sys_read+0xb0/0xb0 [ 2624.568889] do_syscall_64+0x33/0x40 [ 2624.569442] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2624.570212] RIP: 0033:0x7f2b50818b19 [ 2624.570771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2624.573434] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2624.574538] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2624.575562] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2624.576585] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2624.577607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2624.578643] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2624.579695] CPU: 0 PID: 17501 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2624.581312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2624.583238] Call Trace: [ 2624.583853] dump_stack+0x107/0x167 [ 2624.584702] should_fail.cold+0x5/0xa [ 2624.585600] ? xas_alloc+0x336/0x440 [ 2624.586480] should_failslab+0x5/0x20 [ 2624.587363] kmem_cache_alloc+0x5b/0x310 [ 2624.588306] xas_alloc+0x336/0x440 [ 2624.589125] xas_create+0x34a/0x10d0 [ 2624.590005] ? kernel_text_address+0xf2/0x120 [ 2624.591055] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2624.592262] xas_store+0x8c/0x1c40 [ 2624.592300] __xa_store+0x164/0x2d0 [ 2624.592324] ? xa_delete_node+0x280/0x280 [ 2624.594639] ? trace_hardirqs_on+0x5b/0x180 [ 2624.595643] xa_store+0x31/0x50 [ 2624.596409] __io_uring_add_tctx_node+0x1cf/0x520 [ 2624.597524] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2624.598735] ? alloc_fd+0x2e7/0x670 [ 2624.599585] io_uring_setup+0x1fbb/0x2980 [ 2624.599890] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2624.600539] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2624.600566] ? wait_for_completion_io+0x270/0x270 [ 2624.604018] do_syscall_64+0x33/0x40 [ 2624.604877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2624.606047] RIP: 0033:0x7f8bb9614b19 [ 2624.606922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2624.611313] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2624.613052] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2624.614704] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2624.616349] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2624.617966] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2624.619628] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2624.621294] CPU: 1 PID: 17492 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2624.622297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2624.623464] Call Trace: [ 2624.623840] dump_stack+0x107/0x167 [ 2624.624352] sysfs_warn_dup.cold+0x1c/0x29 [ 2624.624950] sysfs_do_create_link_sd+0x122/0x140 [ 2624.625618] sysfs_create_link+0x5f/0xc0 [ 2624.626200] device_add+0x703/0x1c50 [ 2624.626726] ? devlink_add_symlinks+0x970/0x970 [ 2624.627389] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2624.628139] wiphy_register+0x1da6/0x2850 [ 2624.628741] ? wiphy_unregister+0xb90/0xb90 [ 2624.629364] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2624.630135] ieee80211_register_hw+0x23c5/0x38b0 [ 2624.630811] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2624.631486] ? net_generic+0xdb/0x2b0 [ 2624.632039] ? lockdep_init_map_type+0x2c7/0x780 [ 2624.632715] ? memset+0x20/0x50 [ 2624.633190] ? __hrtimer_init+0x12c/0x270 [ 2624.633775] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2624.634502] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2624.635163] ? hwsim_new_radio_nl+0x967/0x1080 [ 2624.635816] ? memcpy+0x39/0x60 [ 2624.636299] hwsim_new_radio_nl+0x991/0x1080 [ 2624.636922] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2624.637656] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2624.638582] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2624.639490] genl_family_rcv_msg_doit+0x22d/0x330 [ 2624.640163] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2624.641097] ? cap_capable+0x1cd/0x230 [ 2624.641661] ? ns_capable+0xe2/0x110 [ 2624.642196] genl_rcv_msg+0x36a/0x5a0 [ 2624.642739] ? genl_get_cmd+0x480/0x480 [ 2624.643296] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2624.644012] ? lock_release+0x680/0x680 [ 2624.644570] ? __lockdep_reset_lock+0x180/0x180 [ 2624.645217] netlink_rcv_skb+0x14b/0x430 [ 2624.645791] ? genl_get_cmd+0x480/0x480 [ 2624.646361] ? netlink_ack+0xab0/0xab0 [ 2624.646920] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2624.647556] ? is_vmalloc_addr+0x7b/0xb0 [ 2624.648124] genl_rcv+0x24/0x40 [ 2624.648584] netlink_unicast+0x54e/0x800 [ 2624.649148] ? netlink_attachskb+0x870/0x870 [ 2624.649768] netlink_sendmsg+0x90f/0xe00 [ 2624.650362] ? netlink_unicast+0x800/0x800 [ 2624.650949] ? netlink_unicast+0x800/0x800 [ 2624.651547] ? netlink_unicast+0x800/0x800 [ 2624.652133] __sock_sendmsg+0x154/0x190 [ 2624.652686] ____sys_sendmsg+0x70d/0x870 [ 2624.653256] ? sock_write_iter+0x3d0/0x3d0 [ 2624.653839] ? do_recvmmsg+0x6d0/0x6d0 [ 2624.654402] ? __lockdep_reset_lock+0x180/0x180 [ 2624.655055] ___sys_sendmsg+0xf3/0x170 [ 2624.655597] ? sendmsg_copy_msghdr+0x160/0x160 [ 2624.656242] ? __fget_files+0x2cf/0x520 [ 2624.656796] ? lock_downgrade+0x6d0/0x6d0 [ 2624.657378] ? __lockdep_reset_lock+0x180/0x180 [ 2624.658028] ? futex_exit_release+0x220/0x220 [ 2624.658668] ? __fget_files+0x2f8/0x520 [ 2624.659261] ? __fget_light+0xea/0x290 [ 2624.659835] __sys_sendmsg+0xe5/0x1b0 [ 2624.660406] ? __sys_sendmsg_sock+0x40/0x40 [ 2624.661041] ? __do_sys_futex+0x2bb/0x480 [ 2624.661665] do_syscall_64+0x33/0x40 [ 2624.662220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2624.662963] RIP: 0033:0x7fc157d92b19 [ 2624.663519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2624.666242] RSP: 002b:00007fc155308188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2624.667360] RAX: ffffffffffffffda RBX: 00007fc157ea5f60 RCX: 00007fc157d92b19 [ 2624.668406] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 2624.669452] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2624.670515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2624.671576] R13: 00007fff9c3d972f R14: 00007fc155308300 R15: 0000000000022000 06:20:47 executing program 1: r0 = syz_io_uring_setup(0x4d53, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x3659, 0xb295, 0x2, &(0x7f0000000080)={[0xd4f]}, 0x8) 06:20:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 52) 06:20:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:20:47 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 63) 06:20:47 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 2624.854868] FAULT_INJECTION: forcing a failure. [ 2624.854868] name failslab, interval 1, probability 0, space 0, times 0 [ 2624.856332] CPU: 1 PID: 17624 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2624.857198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2624.858234] Call Trace: [ 2624.858568] dump_stack+0x107/0x167 [ 2624.859021] should_fail.cold+0x5/0xa [ 2624.859504] ? create_object.isra.0+0x3a/0xa20 [ 2624.860073] FAULT_INJECTION: forcing a failure. [ 2624.860073] name failslab, interval 1, probability 0, space 0, times 0 [ 2624.861426] should_failslab+0x5/0x20 [ 2624.861907] kmem_cache_alloc+0x5b/0x310 [ 2624.862429] ? mark_held_locks+0x9e/0xe0 [ 2624.862936] create_object.isra.0+0x3a/0xa20 [ 2624.863476] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2624.864102] kmem_cache_alloc+0x159/0x310 [ 2624.864630] xas_alloc+0x336/0x440 [ 2624.865071] xas_create+0x34a/0x10d0 [ 2624.865540] ? kernel_text_address+0xf2/0x120 [ 2624.866106] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2624.866756] xas_store+0x8c/0x1c40 [ 2624.867205] __xa_store+0x164/0x2d0 [ 2624.867654] ? xa_delete_node+0x280/0x280 [ 2624.868174] ? trace_hardirqs_on+0x5b/0x180 [ 2624.868710] xa_store+0x31/0x50 [ 2624.869121] __io_uring_add_tctx_node+0x1cf/0x520 [ 2624.869720] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2624.870377] ? alloc_fd+0x2e7/0x670 [ 2624.870836] io_uring_setup+0x1fbb/0x2980 [ 2624.871358] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2624.871989] ? wait_for_completion_io+0x270/0x270 [ 2624.872601] do_syscall_64+0x33/0x40 [ 2624.873058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2624.873679] RIP: 0033:0x7f8bb9614b19 [ 2624.874151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2624.876374] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2624.877297] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2624.878172] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2624.879036] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2624.879898] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2624.880761] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2624.881659] CPU: 0 PID: 17623 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2624.883505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 06:20:47 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="09000000000000002e6507042b0a902f2b8cb0d98df97f1ec4722c17e6997caf0d9e4f0bc18ff97bc16de3b1c075ba463fdff096fee5eaa6a7a13960b8c9941dba0cff89437b100a532dd585c5ba9a87431dd0c5ee452ae9fcbb4e9025a596e29703de6a011ee50e31328023c6acf883310447065719bf0171f4a98faa5e96b3a07df32b333b201edd967a759a362524310c7a1eccad75468422c046844f40764b0fb8"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2624.883512] Call Trace: [ 2624.883539] dump_stack+0x107/0x167 [ 2624.883560] should_fail.cold+0x5/0xa [ 2624.883582] ? create_object.isra.0+0x3a/0xa20 [ 2624.883604] should_failslab+0x5/0x20 [ 2624.883624] kmem_cache_alloc+0x5b/0x310 [ 2624.883649] create_object.isra.0+0x3a/0xa20 [ 2624.883665] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2624.883689] kmem_cache_alloc+0x159/0x310 [ 2624.883716] vm_area_dup+0x78/0x290 [ 2624.883748] ? _cond_resched+0x10/0x30 [ 2624.883765] ? copy_page_range+0x24e9/0x3810 [ 2624.883822] ? vm_area_alloc+0x110/0x110 [ 2624.883845] ? up_write+0x191/0x550 [ 2624.883863] ? vm_iomap_memory+0x190/0x190 [ 2624.883881] ? downgrade_write+0x3a0/0x3a0 [ 2624.883903] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2624.883924] ? __vma_link_rb+0x540/0x700 [ 2624.883951] copy_process+0x298b/0x78b0 [ 2624.884006] ? __cleanup_sighand+0xb0/0xb0 [ 2624.884047] ? _copy_from_user+0xfb/0x1b0 [ 2624.884076] kernel_clone+0xe7/0x980 [ 2624.884094] ? __lockdep_reset_lock+0x180/0x180 [ 2624.884114] ? create_io_thread+0xf0/0xf0 [ 2624.884149] ? ksys_write+0x21a/0x260 [ 2624.884168] ? lock_downgrade+0x6d0/0x6d0 [ 2624.884194] __do_sys_clone3+0x1e5/0x320 [ 2624.884219] ? __do_sys_clone+0x110/0x110 [ 2624.884284] ? rcu_read_lock_any_held+0x75/0xa0 06:20:47 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 2624.884306] ? vfs_write+0x354/0xb10 [ 2624.884326] ? fput_many+0x2f/0x1a0 [ 2624.884348] ? ksys_write+0x1a9/0x260 [ 2624.884368] ? __ia32_sys_read+0xb0/0xb0 [ 2624.884402] do_syscall_64+0x33/0x40 [ 2624.884421] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2624.884434] RIP: 0033:0x7f2b50818b19 [ 2624.884453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2624.884463] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2624.884484] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2624.884496] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2624.884506] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 06:20:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2624.884517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2624.884528] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2624.939340] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2624.946088] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2624.946136] CPU: 1 PID: 17629 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2624.946143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2624.946148] Call Trace: [ 2624.946167] dump_stack+0x107/0x167 [ 2624.946187] sysfs_warn_dup.cold+0x1c/0x29 [ 2624.946204] sysfs_do_create_link_sd+0x122/0x140 [ 2624.946218] sysfs_create_link+0x5f/0xc0 [ 2624.946232] device_add+0x703/0x1c50 [ 2624.946248] ? devlink_add_symlinks+0x970/0x970 [ 2624.946263] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2624.946281] wiphy_register+0x1da6/0x2850 06:20:47 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 2624.946301] ? wiphy_unregister+0xb90/0xb90 [ 2624.946322] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2624.946337] ieee80211_register_hw+0x23c5/0x38b0 [ 2624.946359] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2624.946369] ? net_generic+0xdb/0x2b0 [ 2624.946386] ? lockdep_init_map_type+0x2c7/0x780 [ 2624.946400] ? memset+0x20/0x50 [ 2624.946413] ? __hrtimer_init+0x12c/0x270 [ 2624.946428] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2624.946452] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2624.946461] ? hwsim_new_radio_nl+0x967/0x1080 [ 2624.946472] ? memcpy+0x39/0x60 [ 2624.946487] hwsim_new_radio_nl+0x991/0x1080 [ 2624.946502] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2624.946526] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2624.946538] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2624.946554] genl_family_rcv_msg_doit+0x22d/0x330 [ 2624.946569] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2624.946583] ? cap_capable+0x1cd/0x230 [ 2624.946605] ? ns_capable+0xe2/0x110 [ 2624.946620] genl_rcv_msg+0x36a/0x5a0 [ 2624.946634] ? genl_get_cmd+0x480/0x480 [ 2624.946646] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2624.946661] ? lock_release+0x680/0x680 [ 2624.946672] ? __lockdep_reset_lock+0x180/0x180 [ 2624.946687] netlink_rcv_skb+0x14b/0x430 [ 2624.946699] ? genl_get_cmd+0x480/0x480 06:20:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 53) [ 2624.946711] ? netlink_ack+0xab0/0xab0 [ 2624.946729] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2624.946741] ? is_vmalloc_addr+0x7b/0xb0 [ 2624.946755] genl_rcv+0x24/0x40 [ 2624.946765] netlink_unicast+0x54e/0x800 [ 2624.946780] ? netlink_attachskb+0x870/0x870 [ 2624.946799] netlink_sendmsg+0x90f/0xe00 [ 2624.946815] ? netlink_unicast+0x800/0x800 [ 2624.946834] ? netlink_unicast+0x800/0x800 [ 2624.946848] __sock_sendmsg+0x154/0x190 [ 2624.946860] ____sys_sendmsg+0x70d/0x870 [ 2624.946874] ? sock_write_iter+0x3d0/0x3d0 [ 2624.946885] ? do_recvmmsg+0x6d0/0x6d0 [ 2624.946904] ? __lockdep_reset_lock+0x180/0x180 [ 2624.946919] ___sys_sendmsg+0xf3/0x170 [ 2624.946933] ? sendmsg_copy_msghdr+0x160/0x160 [ 2624.946948] ? __fget_files+0x2cf/0x520 [ 2624.946960] ? lock_downgrade+0x6d0/0x6d0 [ 2624.946972] ? __might_fault+0xd3/0x180 [ 2624.946985] ? futex_exit_release+0x220/0x220 [ 2624.947003] ? __fget_files+0x2f8/0x520 [ 2624.947020] ? __fget_light+0xea/0x290 [ 2624.947038] __sys_sendmsg+0xe5/0x1b0 [ 2624.947050] ? __sys_sendmsg_sock+0x40/0x40 [ 2624.947060] ? __do_sys_futex+0x2bb/0x480 [ 2624.947090] do_syscall_64+0x33/0x40 [ 2624.947103] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2624.947110] RIP: 0033:0x7fc157d92b19 [ 2624.947122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2624.947129] RSP: 002b:00007fc1552c6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2624.947141] RAX: ffffffffffffffda RBX: 00007fc157ea60e0 RCX: 00007fc157d92b19 [ 2624.947148] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 2624.947155] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2624.947161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2624.947168] R13: 00007fff9c3d972f R14: 00007fc1552c6300 R15: 0000000000022000 [ 2625.210268] FAULT_INJECTION: forcing a failure. [ 2625.210268] name failslab, interval 1, probability 0, space 0, times 0 [ 2625.212997] CPU: 0 PID: 17644 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2625.213008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.213015] Call Trace: [ 2625.213041] dump_stack+0x107/0x167 [ 2625.213064] should_fail.cold+0x5/0xa [ 2625.213087] ? vm_area_dup+0x78/0x290 [ 2625.213117] should_failslab+0x5/0x20 [ 2625.213138] kmem_cache_alloc+0x5b/0x310 [ 2625.213165] vm_area_dup+0x78/0x290 [ 2625.213200] ? copy_page_range+0x24e9/0x3810 [ 2625.213259] ? vm_area_alloc+0x110/0x110 [ 2625.213289] ? vm_iomap_memory+0x190/0x190 [ 2625.213323] ? __vma_link_rb+0x540/0x700 [ 2625.213352] copy_process+0x298b/0x78b0 [ 2625.213410] ? __cleanup_sighand+0xb0/0xb0 [ 2625.213454] ? _copy_from_user+0xfb/0x1b0 [ 2625.213483] kernel_clone+0xe7/0x980 [ 2625.213504] ? __lockdep_reset_lock+0x180/0x180 [ 2625.213526] ? create_io_thread+0xf0/0xf0 [ 2625.213564] ? ksys_write+0x21a/0x260 [ 2625.213585] ? lock_downgrade+0x6d0/0x6d0 [ 2625.213610] __do_sys_clone3+0x1e5/0x320 [ 2625.213630] ? __do_sys_clone+0x110/0x110 [ 2625.213673] ? rcu_read_lock_any_held+0x75/0xa0 [ 2625.213691] ? vfs_write+0x354/0xb10 [ 2625.213712] ? fput_many+0x2f/0x1a0 [ 2625.213734] ? ksys_write+0x1a9/0x260 [ 2625.213755] ? __ia32_sys_read+0xb0/0xb0 [ 2625.213790] do_syscall_64+0x33/0x40 [ 2625.213811] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2625.213825] RIP: 0033:0x7f2b50818b19 [ 2625.213843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.213855] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2625.213877] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2625.213889] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2625.213901] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.213912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:20:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:20:47 executing program 6: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0x80000004}) 06:20:47 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 64) 06:20:47 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x1800, 0x0, 0x0, 0x5, 0x0, 0xfd5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280), 0x0) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998ca2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000c46eab6322b273870afc13aa7b00af9acc93d187bfe6c59c301843ce00feaf85d4bfe300eaec8100000000000000994cda46a92ae5ccdd213a3f4c5c6bf9fb98e05651020000000000c8ca7ac557943d1309e1082fe8b645002417bec9633292bf92c1beb3cea489f9c23e0101000080000000018c5ca23cb874429425c9c8550fa638677c0a4f0fd7635b2005509fafc9bfc8dcd32322e02941f9"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2625.213925] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2625.287935] FAULT_INJECTION: forcing a failure. [ 2625.287935] name failslab, interval 1, probability 0, space 0, times 0 [ 2625.287948] CPU: 1 PID: 17653 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2625.287954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.287958] Call Trace: [ 2625.287974] dump_stack+0x107/0x167 [ 2625.287987] should_fail.cold+0x5/0xa [ 2625.288000] ? xas_alloc+0x336/0x440 [ 2625.288013] should_failslab+0x5/0x20 [ 2625.288025] kmem_cache_alloc+0x5b/0x310 [ 2625.288038] xas_alloc+0x336/0x440 06:20:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 54) [ 2625.288051] xas_create+0x34a/0x10d0 [ 2625.288067] ? kernel_text_address+0xf2/0x120 [ 2625.288080] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2625.288098] xas_store+0x8c/0x1c40 [ 2625.288117] __xa_store+0x164/0x2d0 [ 2625.288129] ? xa_delete_node+0x280/0x280 [ 2625.288145] ? trace_hardirqs_on+0x5b/0x180 06:20:47 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1a) pread64(r0, &(0x7f0000000140)=""/149, 0x95, 0x100000000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x105441, 0x20) open$dir(&(0x7f00000000c0)='./file1\x00', 0x100240, 0x2) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x8}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x6e) fallocate(r1, 0x8, 0x0, 0x8000) [ 2625.288160] xa_store+0x31/0x50 [ 2625.288173] __io_uring_add_tctx_node+0x1cf/0x520 [ 2625.288184] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2625.288194] ? alloc_fd+0x2e7/0x670 [ 2625.288212] io_uring_setup+0x1fbb/0x2980 [ 2625.288228] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2625.288238] ? wait_for_completion_io+0x270/0x270 [ 2625.288267] do_syscall_64+0x33/0x40 [ 2625.288278] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2625.288285] RIP: 0033:0x7f8bb9614b19 [ 2625.288296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.288302] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2625.288315] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2625.288321] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2625.288327] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2625.288334] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2625.288340] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2625.351501] FAULT_INJECTION: forcing a failure. [ 2625.351501] name failslab, interval 1, probability 0, space 0, times 0 [ 2625.351515] CPU: 1 PID: 17658 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2625.351521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.351525] Call Trace: [ 2625.351539] dump_stack+0x107/0x167 [ 2625.351553] should_fail.cold+0x5/0xa [ 2625.351566] ? create_object.isra.0+0x3a/0xa20 [ 2625.351579] should_failslab+0x5/0x20 [ 2625.351590] kmem_cache_alloc+0x5b/0x310 [ 2625.351605] create_object.isra.0+0x3a/0xa20 [ 2625.351614] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2625.351628] kmem_cache_alloc+0x159/0x310 [ 2625.351644] vm_area_dup+0x78/0x290 [ 2625.351662] ? copy_page_range+0x24e9/0x3810 [ 2625.351693] ? vm_area_alloc+0x110/0x110 [ 2625.351708] ? vm_iomap_memory+0x190/0x190 [ 2625.351727] ? __vma_link_rb+0x540/0x700 [ 2625.351741] copy_process+0x298b/0x78b0 [ 2625.351772] ? __cleanup_sighand+0xb0/0xb0 [ 2625.351796] ? _copy_from_user+0xfb/0x1b0 [ 2625.351811] kernel_clone+0xe7/0x980 [ 2625.351823] ? __lockdep_reset_lock+0x180/0x180 [ 2625.351834] ? create_io_thread+0xf0/0xf0 [ 2625.351854] ? ksys_write+0x21a/0x260 [ 2625.351865] ? lock_downgrade+0x6d0/0x6d0 [ 2625.351878] __do_sys_clone3+0x1e5/0x320 [ 2625.351888] ? __do_sys_clone+0x110/0x110 [ 2625.351911] ? rcu_read_lock_any_held+0x75/0xa0 [ 2625.351921] ? vfs_write+0x354/0xb10 [ 2625.351932] ? fput_many+0x2f/0x1a0 [ 2625.351944] ? ksys_write+0x1a9/0x260 [ 2625.351955] ? __ia32_sys_read+0xb0/0xb0 [ 2625.351973] do_syscall_64+0x33/0x40 [ 2625.351984] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2625.351992] RIP: 0033:0x7f2b50818b19 [ 2625.352003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.352009] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2625.352021] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2625.352028] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2625.352034] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2625.352041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2625.352048] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:21:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:21:03 executing program 5: ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)={0x3, 0x80}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000040)={0xfe, 0x1, 0x0, 0x2}) 06:21:03 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x101800, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x4000096) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r4, &(0x7f00000027c0)=[{&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000002640)=""/249, 0xf9}, {&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000002740)=""/102, 0x66}], 0x6) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x0, &(0x7f0000000240)={0x3, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x0, @loopback}}}, 0x108) ioctl$FITHAW(r1, 0xc0045878) close(0xffffffffffffffff) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'nat\x00', 0x0, [0x10000, 0x0, 0xff, 0x8, 0x401]}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x22b80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2641.065765] FAULT_INJECTION: forcing a failure. [ 2641.065765] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.067407] CPU: 0 PID: 17680 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2641.068371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2641.069536] Call Trace: [ 2641.069912] dump_stack+0x107/0x167 [ 2641.070430] should_fail.cold+0x5/0xa [ 2641.070974] ? vm_area_dup+0x78/0x290 [ 2641.071526] should_failslab+0x5/0x20 [ 2641.072059] kmem_cache_alloc+0x5b/0x310 [ 2641.072630] vm_area_dup+0x78/0x290 [ 2641.073145] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2641.073794] ? lock_downgrade+0x6d0/0x6d0 [ 2641.074382] ? perf_trace_lock+0xac/0x490 [ 2641.074959] ? copy_page_range+0x24e9/0x3810 [ 2641.075573] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2641.076311] ? __lockdep_reset_lock+0x180/0x180 [ 2641.076964] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2641.077621] ? avc_has_extended_perms+0xf40/0xf40 [ 2641.078363] ? copy_process+0x2bdd/0x78b0 [ 2641.079015] ? vm_area_alloc+0x110/0x110 [ 2641.079591] ? selinux_vm_enough_memory+0x114/0x180 [ 2641.080288] ? selinux_sb_statfs+0x250/0x250 [ 2641.080897] ? up_write+0x191/0x550 [ 2641.081409] ? percpu_counter_add_batch+0x8b/0x140 06:21:03 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRESOCT, @ANYRES32]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r1, &(0x7f0000000140)={0xf0002002}}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:21:03 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 65) 06:21:03 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:21:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 55) 06:21:03 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f800002000400000eb4e408f4c9170db", 0x25}], 0x0, &(0x7f0000001500)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x8221, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/5) getuid() openat(r0, &(0x7f0000000080)='./file0\x00', 0x101002, 0x1) [ 2641.082282] ? __vm_enough_memory+0x184/0x360 [ 2641.082977] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 2641.083698] copy_process+0x298b/0x78b0 [ 2641.084279] ? __cleanup_sighand+0xb0/0xb0 [ 2641.084884] ? _copy_from_user+0xfb/0x1b0 [ 2641.085471] kernel_clone+0xe7/0x980 [ 2641.085990] ? __lockdep_reset_lock+0x180/0x180 [ 2641.086649] ? create_io_thread+0xf0/0xf0 [ 2641.087241] ? ksys_write+0x21a/0x260 [ 2641.087778] ? lock_downgrade+0x6d0/0x6d0 [ 2641.088389] __do_sys_clone3+0x1e5/0x320 [ 2641.088956] ? __do_sys_clone+0x110/0x110 [ 2641.089574] ? rcu_read_lock_any_held+0x75/0xa0 [ 2641.090255] ? vfs_write+0x354/0xb10 [ 2641.090804] ? fput_many+0x2f/0x1a0 [ 2641.091329] ? ksys_write+0x1a9/0x260 [ 2641.091923] ? __ia32_sys_read+0xb0/0xb0 [ 2641.092539] do_syscall_64+0x33/0x40 [ 2641.093094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2641.093847] RIP: 0033:0x7f2b50818b19 [ 2641.094377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2641.095146] FAULT_INJECTION: forcing a failure. [ 2641.095146] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.097058] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2641.097072] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2641.097080] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2641.097087] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2641.097108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2641.104901] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2641.105969] CPU: 1 PID: 17683 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2641.107689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2641.109664] Call Trace: [ 2641.110309] dump_stack+0x107/0x167 [ 2641.111176] should_fail.cold+0x5/0xa [ 2641.112083] ? create_object.isra.0+0x3a/0xa20 [ 2641.113302] should_failslab+0x5/0x20 [ 2641.114365] kmem_cache_alloc+0x5b/0x310 [ 2641.115328] ? mark_held_locks+0x9e/0xe0 [ 2641.116306] create_object.isra.0+0x3a/0xa20 [ 2641.117341] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2641.118560] kmem_cache_alloc+0x159/0x310 [ 2641.119552] xas_alloc+0x336/0x440 [ 2641.120400] xas_create+0x34a/0x10d0 [ 2641.121296] ? kernel_text_address+0xf2/0x120 [ 2641.122374] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2641.123614] xas_store+0x8c/0x1c40 [ 2641.124475] __xa_store+0x164/0x2d0 [ 2641.125336] ? xa_delete_node+0x280/0x280 [ 2641.126336] ? trace_hardirqs_on+0x5b/0x180 [ 2641.127363] xa_store+0x31/0x50 [ 2641.128147] __io_uring_add_tctx_node+0x1cf/0x520 [ 2641.129288] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2641.130544] ? alloc_fd+0x2e7/0x670 [ 2641.131429] io_uring_setup+0x1fbb/0x2980 [ 2641.132423] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2641.133617] ? wait_for_completion_io+0x270/0x270 [ 2641.134816] do_syscall_64+0x33/0x40 [ 2641.135687] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2641.136908] RIP: 0033:0x7f8bb9614b19 [ 2641.137793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2641.142194] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2641.143987] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2641.145674] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2641.147393] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2641.149093] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2641.150753] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:21:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 56) 06:21:03 executing program 6: r0 = semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000, 0x0, 0x0, 0x400000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2}, {0x3, 0xff00}, {0x4, 0x6469}, {0x0, 0x45, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semctl$IPC_RMID(r0, 0x0, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000100)=[{0x1, 0x9c9, 0x1800}, {0x3, 0xf9a1, 0x800}, {0x3, 0x1ff, 0x800}, {0x1, 0x9, 0x800}, {0x4, 0xe21c}, {0x4, 0x0, 0x800}, {0x1, 0x9}], 0x7, &(0x7f0000000180)={r2, r3+60000000}) r4 = semget$private(0x0, 0x6, 0x10) semop(r4, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000300)=""/240) r5 = semget(0x1, 0x0, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6900) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r7, 0x0) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000280)={{0x2, 0x0, r6, r7, 0xffffffffffffffff, 0x19, 0x2}, 0x7, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x8}) semctl$SEM_INFO(r4, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) [ 2641.202918] FAULT_INJECTION: forcing a failure. [ 2641.202918] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.204499] CPU: 0 PID: 17691 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2641.205453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2641.206604] Call Trace: [ 2641.206968] dump_stack+0x107/0x167 [ 2641.207468] should_fail.cold+0x5/0xa [ 2641.207993] ? create_object.isra.0+0x3a/0xa20 [ 2641.208624] should_failslab+0x5/0x20 [ 2641.209147] kmem_cache_alloc+0x5b/0x310 [ 2641.209715] create_object.isra.0+0x3a/0xa20 [ 2641.210330] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2641.211039] kmem_cache_alloc+0x159/0x310 [ 2641.211611] vm_area_dup+0x78/0x290 [ 2641.212117] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2641.212756] ? lock_downgrade+0x6d0/0x6d0 [ 2641.213320] ? perf_trace_lock+0xac/0x490 [ 2641.213885] ? copy_page_range+0x24e9/0x3810 [ 2641.214497] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2641.215216] ? __lockdep_reset_lock+0x180/0x180 [ 2641.215857] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2641.216493] ? avc_has_extended_perms+0xf40/0xf40 [ 2641.217162] ? copy_process+0x2bdd/0x78b0 [ 2641.217729] ? vm_area_alloc+0x110/0x110 [ 2641.218298] ? selinux_vm_enough_memory+0x114/0x180 [ 2641.218982] ? selinux_sb_statfs+0x250/0x250 [ 2641.219666] ? up_write+0x191/0x550 [ 2641.220172] ? percpu_counter_add_batch+0x8b/0x140 [ 2641.220841] ? __vm_enough_memory+0x184/0x360 [ 2641.221456] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 2641.222158] copy_process+0x298b/0x78b0 [ 2641.222732] ? __cleanup_sighand+0xb0/0xb0 [ 2641.223318] ? _copy_from_user+0xfb/0x1b0 [ 2641.223868] kernel_clone+0xe7/0x980 [ 2641.224375] ? __lockdep_reset_lock+0x180/0x180 [ 2641.225006] ? create_io_thread+0xf0/0xf0 [ 2641.225575] ? ksys_write+0x21a/0x260 [ 2641.226101] ? lock_downgrade+0x6d0/0x6d0 [ 2641.226677] __do_sys_clone3+0x1e5/0x320 [ 2641.227232] ? __do_sys_clone+0x110/0x110 [ 2641.227805] ? rcu_read_lock_any_held+0x75/0xa0 [ 2641.228430] ? vfs_write+0x354/0xb10 [ 2641.228940] ? fput_many+0x2f/0x1a0 [ 2641.229432] ? ksys_write+0x1a9/0x260 [ 2641.229946] ? __ia32_sys_read+0xb0/0xb0 [ 2641.230518] do_syscall_64+0x33/0x40 [ 2641.231025] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2641.231718] RIP: 0033:0x7f2b50818b19 [ 2641.232219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2641.234719] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2641.235755] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2641.236691] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2641.237620] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2641.238559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2641.239489] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:21:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 57) 06:21:18 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 66) 06:21:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x65e1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffd, 0x3af, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$inet(0x2, 0xa, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25", 0x17}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe14, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000000) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80101) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_open_dev$rtc(&(0x7f0000000380), 0x12e, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r5, 0x1010003) ioctl$FS_IOC_FSSETXATTR(r5, 0x40086602, &(0x7f0000000000)) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) 06:21:18 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:21:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x9, 0x103800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0400000100ffff55aa5c76a451f4ff2d23f9ec5fe424df49631bffbb02be70dd447db92844ef8c20723076a57381ac5f6ca47f674d1c8e0edc60b101683ab28289f358d8df374908f386e92b4600190535515b1f000084a71b69c4278206c9d706a0d13cc1a4ea36a39eefed332b0e824c7f90774f5a199654ed2d3757d7673c13e2afff8ed0dc1fb4b7ebabb9b826964a84cc658d1cd5845643214967753735e7ec58ca14a8942b98d019524f7cbcf9549edf56cb23ccadbfdd8115263c8ede43491d41a285c98c3f524c9f68b1f96938f6eba7f921d48412f54ed5d40c1b7675a48218b277c6715916ded2ecf6027d1d879ad8b3af258566322480d639d5c4000000000000000400000000000000fd10a8043847d417fa82a2e33e4aae21d527eaff66d36bf31607698b328b400a0f304856f11ca9a0488be5ea699f96f2a9903bca656e24b64095abfcafe2c471e7a9788030c4412e8a6f21b532db9d76e745ec982db7e71844146d980c464e29bda9f910c9426db90ccec8091abff7e117ca1756cffb19c2508daeb885d4018eaced3608c0d123e44929da2ddefecb463a53390257253bd29e37dd9b9c23bd6a000000378a2a673226c3e9406acdf8c100cb546f00cf847c8a99784962c76441865ac9abf18a9024fcd8df44be0000f993b1d664447ac17eb377c791a139468d6c0100000001000000edd53995a092888ff9e94c8b672da1d5120e15fa71435cd39d0c43a82850b284d1b165bc0c67384d298c5d00000000000000000991d231535f60b9e7482faa4a5109a90a5fc57c99259b819509f0e5864585bf82420f8c9c7db71773ced71e6a457f3b8f657be8bf46300cbd82e2cad64177c6b90078a1b541e41ed642a456e9d21c4205a49f4dab9070799365431a2fa204c11f3ca7b90685c5029cb2192ea1ea00004052f59600000000000000000000000000596cccf123b9eafaf8b909b9441801907ebf49bb139215224866b2497e6f08a2c2367b81da8be0a463d50875e3867bb70e6c26978c1d4c5c9a336f3f4e061182bc89be662e9d03214e"]) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f00000001c0)={0x2, 0x1, 0x1a, 0x5, 0x148, &(0x7f0000001e00)="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"}) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400, 0x7}}, './file0/file0\x00'}) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) unshare(0x48020200) 06:21:18 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:21:18 executing program 5: r0 = open(&(0x7f0000000000)='./file1\x00', 0x600000, 0x1b2) r1 = perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x0, 0x0, 0x7, 0x100000001, 0x800, 0x200}, 0x0, 0x10, r0, 0x9) lseek(r1, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x3, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0xffffffff, @loopback={0x0, 0x7}, 0xc3a}, 0x1c) fallocate(r1, 0x3, 0x52, 0x6) fstat(0xffffffffffffffff, &(0x7f0000000300)) openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x5f42, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x3, 0xff) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@private0, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast2, 0x0, 0xffff, 0x80, 0x100, 0x7f, 0x400032}) r4 = syz_mount_image$nfs4(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x8000, 0x3, &(0x7f0000000500)=[{&(0x7f0000000440), 0x0, 0x800000000000001}, {&(0x7f0000000880)="d5474e32ae2cf35f2d53994783f3dd8809cb4e9d8b3dfd1b685e42bdd034345c423eedabea04ab050a4c6c1acf61eae72c3a491b08f45deb3ac2ce167b509f4a4e5808169076133452a654a16f9ab635e7365e8c0f43a104c8d931667523fde26845941bf82f72942f909c539eb25719efd7366f4cf300889eaddfd4450377936ff275023b553244e8c570590de467d54f2da33f179c947c1701b796497cf629ae875c12cbb1fb126391889483e740486f96d1c15257be2092b2c57bb2e78af7f12d8a22712dfc718bf6b377035cea1baeb3e1e8280b32408bcb117765ae68ab1517c02ef5415c8286759021b592452d901861862eb9fbb5ec751411704f5be09cd87330b2709bef905bc9f6ce8684db42109f0d9bb2df7d5c9b74b0d921f9a346c4ddebd60a83ed2e970ab4e02e793d956479c2885a2b5c9191bccdd4d153bb87d586a783fe9d723ae63e73f39ca415026ba688be300db375b79e6a56cb6d27767075d530fca5577e554114f8aeaef1ff05bcb730b322d452ae9f760aa4c53ea6c49e8e5689b7cf5cb351dedbbb4ce343fbe96ad104427a9eed9fd37567866f59852d900e909efca58257bcf0d7cc046f1ef1131ce64915e3f7f77601a59e1924492fbe01d47ef50722c530a97d8c3155f7e4387ed07c24697ccf4d4623be7306c971493ed588d0dd8b0809a1780d58771071b1e92fab0d4be9f5d4c8dc7ed6ecc2aff8ec3603a0a0ac6ef644846b95087d70d68b44140e270ca203930b9cc48a3f2b5e01210f46cab6aadb389de0c7702372f66db728408fb11687f7fe8042c44291e096a230114189f7ae8577bf5414549a660acabcf0e6fffd1f2a82897a5d519e55b4b2903a060efe225e335377f3c50d01122e170db5c11311492d0bf030edb1a7bcdcb92c20bec96ed7f58bf179efe0a682b374f1912bcacd2e7b069a3b4c117ae0e5399521f38f0f6d2c9d6ea5b7123dd3b09466d6d6e8cde0edb9344a043aea438f7b79a67f4b952959be8ef15bb87bb1015d1ca2e6f70a332010fc24cbf9208db11464e9d9d5dc32adf80da0a90988e6d352a0d19421528597a2bbe0d4223d63e4420e9ed47d79bc0924ee6cbe83024faa579553652820ddcf7c5dc393a0e10487b6a004db84a65f7e274b786c27546933629b12db2d0f89a149f5de31526737ca39aeb620d2cb193c2b105a25c9bf9991571d86569a67fee0585b2c87844cd7a6ba4d4cb0f5cca5af5ecb8bfc5e3908942fecd57bbfd74358d7993bd0b0e40b951c46a5c075f340c26aa154a9af3901e8394abedd8b9e3f2bb012c6ff9763a52026afd8d09ebe6ad3910806e1d4d0aaed99ae4cc05ee5dadb5414de1b8d4339790713bc18ebe17b8edeb93a07bb6a9d6663cd2846f65539ee9765528fe90e0568d1b9d0f4c5d3c67f0354f70e35cb24d02bb35189ac4b44b81c5193ce39171884d0f72329511229519c12dad2e83f23adfa2506964b7e1e5a2249379c7c84d7cea05eb81895d19d6a01d254a7cb1eb180ac1f1cd328caca1ef12d14e9b6662af2033f261be4ce8896fac10550e33c97e2d88597abf59ba7981218d30a1db5f69c32f7caf54cdfec6a7661d89c5e0f90ebb4e259efb389d84273e90bb75b605b17daf9a27f57f875241f48bdadc71e9b33d6abf7bb476df1c0052fe4e58a45db32f97bd3b58c1116fe7fc4676066a22e62100caed6efc940f34dee5aa43789833a28a0bd4be2bc192d5247d9ec1ca0725087bdd4cf2a340e877e0fa6ebae78475692848bf1b5cd4ac5df115533366cc2795a63e49ac2f34fcd1a3ea0098816b05d654da6e1991a78e127c209a60c0dc7adeba7ce0bf631ffe386e61614bc2bce9e26a1a5512c74d8dde814a5f0182d8634eb4245b023c9f2ae66269d4ec859cfc6e496f8f2b05a78c22c92d71d729c3a7c93d5d4486d6a662a52db96288d4620daf177591425b1a4cc877fd6560c6d604e32855df2152aae68c73af4787e6297478bb9bedd951307ff8deb55320bc493beb3edd5d08fe19abf19fe791015fee9d5e28cccca8761a91dd15f54ada523d7335080d16e1d8bf26e5aac4cebad3d48e9af5cbca4a295789fbfd8ebb9de3f1db326fe1c7c232514f1c78d188ad028368e972c7d4ac26af77928d3b85625b06080a151611790f5f9fbd8a611ec97db8ce929323383582cc7e0d5212074d933034a0cb20d04c773f5ccf605de97ea4586cec0a8bfb9ed72bfde9cc1edd27f5a91316b4ee79ba6666270433ba38ffe1d9657edbb370a83ea49f5025d35d319ec29fb79361fa53df4139514bf6111358b210a74b6fe255a96bc023c2dad7e67b1f31b00f70da493430cc715be1b52dbe33c00acea9df2c4b394b03b1ce1bf9730e24366a88de7a76031f92da2d50c9935b797fdd908ba9e177894801f4e5d4cade1c15b7938c1662ffabc36a46a72639cc0092a1a751e4d0af568cf3349aafb3e29fdcb084b702d7ad8eb88ca8f46193956f8adc97d737599493439843bdfa86c5c0c3a8fe8c5b7b42bfca80cb8429b01e35afb7507ed29a6f378c03f07788ec63d9df5d708234c992014cf30c557fe5d6e2ceac9fdefc1e0a14814cff1fa375c960d8c9577e9eefbf93eed43ad9c4ac6b024b5f7409c69f12b4281986fdafcc196f0bad156f9fed3b76434a367bee9ca4a8f482017b9c0b5d53a571d666d1efc380db243c2f456597943e953416aaa35501abca5493a196c21f5dbbbae338061182743f29ac1bcb662fbd6d96aaa1867f6c7d95f9b3d4120225d8c05c047a8d4b24a6dd12275240542ca701648dca36d87d238b58e5d730bfb813c0cfa77e0c4eaf28e870d8b48fc73bda3c4abc70c9285b5b78ae5e183357a66d7defd9b0bacf80ae682990d540f586332b39451dd91413e99065a6f2661d2fc5cfdba5e66733433dacce324781b154e250c2bb4b5d7afedfab27cabb9c439dfedbae9a4971b10952a06462115d6d168d52c59c2226deb2d3a09df3a53e5742111a599d24caa465276170fd09162ed04e9938507b588aabf23ee55ae26c5b38d85541741f1ed1456415625de2cb682cb4035b450b2a5cbf9b571fdaf6716371604d625c0c43b67bc68a341f0a07cdc64317f4aad5116b805e27bfc1eab05ac64590bac8496426370fef904d93155b5371ded16f5d3cadf27006bf77c0ce1077ff71d95b08d978887ca465a22a17fd21140585fd55a1cc597dd2c7ad13eddacaed9858443f8efd6eb5e44718d41b52ea709aceb97d1c244f5e3ee3c3824cda4d8838110e1febf539db8d2c8c09f211d08a0c6701efa277d5f4e50eb312f6e84e5816eb727f2dfd57bf54523a92591b0c2aa7d0102deed14bd5ea87abbba5f0a0bed110b022e7e7a25bc22ce96ee7fe21d2ecae835d32f0541c87d04387685dbad44f00b13cdf326a0972c11a14846d983bd4bac169e5f19fe1f3f45e6bfcefe969b3230ecad49b3578e2d5bebaa60542559b1726f8675601cb4a840abe2ccbe5dfca059466ee70772d73875faf2626ae007c0ca964ee0d1ab9016b2c58e07900d54835b35f20bd7916ac3604dd68624f0d239883fe5deb1442d1380738ec275adccef8cdf377243098978ed3688a0d88387442f9daaefb7b04af981b3ae6412baacc9f4936b840db1c70664613d679814efcb5db44e85918c5246303bcb9aa25a159b3d50e3e5190ce75cdb332da22c27a92d36c3ba77948c05db27a6de9ff887a0a7180cafd6f8fa40f8b5cecb12c33dbe8262e99370bc142c1692f5f8c17b3e1ae9294fa90863df0eaba27d538bd300ba70a5c1eb7de0205213d7cb658125c73da6ef4332aff4440565615bbd9136d4c3f5f4525a9876ed616e67afd11f8166cbf384bf1acdc8d633c378d10dcfd0a8f181a80fcf19a72a612ce79bbfa6eff0351f01bb8463361302b5f5df7b11d3d14309d40ddabe058d026772c7640e9c29c7f7f94c7b4c9a19e86f0321ef6a26a62c169dddf6ef7826848597983c3405318f34c8c5df0d5fb5a94fd2b309639b30a7c3bfc75e4aab0e1dbe83714245e69032847cea4bd60d5cd3ac69d2bb9eace3b27471986ca87cf738612e1910d95005ac2d702eb39062f2d07769685b0d4701348b3feacff4cbdbe97c30da9c6feb46becf6361a8e70d74e7f4d7311615c91c048b0723762667b22ff9ddd1ebd870556f719797a0c0f9d66675bdfc5d1543cf443fa9cd31466d53ec7f201bbbc89c24e5cef723d1d4bd330f3005562eb33cb030b32858ee1f0f905438fbef57e97d1598fc957602f5b93f5672cd2fe19929ac3be235a01b9e615653489cb4ad79a86f0373f681568d1694ba5e531c27b933f6da3a6780c2db694ec2281ae5edaec82347865d0cc5fe62505ffa8089faa7140df259ca17a6b1b9f0cc5c1461ba9970f0b302f8b2d336dc16d17d0c59f76736b9c9bac361c9fc1a3a70531ff894304b78d23e54a80bb0b105702698b6bae95cd74adbca1b1d6a40acec522a17cd6ec7f4ca291faa6edda592e24ede6e413484da121b83b1e73a735fbb172fa2cbb970dfb742dbea0990324e0f0b2d0a7317001a82a535510e354cffb18d1c9c9c559de4775d4b58a32941ad4ba14eeb2d7e055ba648b88b948de9e94aa125fd17a9f157995902d26052fe1d3bf6b54f7a2bea38853dbe80f3e3160b532e3e33b1066066532a25684f10e267bbb4a35a45e44d6b64f8c65019cd7b7702220d243ca91ffeea5ff9814d8ab29d123afa28b5bd56b9a4ef952c256c28c37d46953f2fe9974a2df3154f7addc5bba6c13b90728e6ab4fa8710d370d9c3de7d434570689490feb1c3063fae631603aa74740f62bbd6788f6f1b4b9884d7368b07bed5eac01aeb0c12a1a9297c20eafcbe05337a689e6fb78af17ef51aebc35065bf20b328c4b65e8e06ce87f497460c25eaea40789c225429db489385876bb03d253ee4c41dac47f3d4e9e271281d761af678a9e456d170b6481b4c6e052b2a7b7cea5b19c5c42a09a96172a102d0de21d23c13e1c5f6e2a17d79f8c8052e1718c8a128eb8059a91cd55e40ecba7c81102b9b49f5d6a5a5fcf857aebc64cee6dcd05e22e208333a5b1b9725d7008aa807783bd7785a50b213b7e8a05c1a06d50d29511232d3efb639659722deac7f364b7676d95896d22c639330eddc3318044375e9091afd6e28f0086761866d7e3cd0606d299b8b6b381843c81b18b2d82bc45962bd2bde1efeec7be049fad436300b91b97cffcd0d45d62a485be36dec46101fc0cdeb585272b03cc4b4d130bc415cbfb788e9e18d7022f0cfcba22f079a2b1d7f1b8cf06f61a8d1e6f9448bf79149f3df27409c6788110ef153221e1470a031c3e670d821fa9061b6f8f201e77908e9bd1edff3d7dfadba909ce601bee80dc49ef683c07d38be8b87092b17143a45233bb9280502ffdf6ee4948dec6b099dacc7f0e6d94e02f1549b81f06aaf7034c8fedd283eaf7bf2e7af250ec04b2cce058fe4c9d0f3aab5e5173b9f7a55fd8b5da47cfc6a582d75ba597b38eaffad747e287d3abfe9fd51cbe341cf43eecda79dbbce57856166ee402235dcfe70a04af59c17499a75ca329a9152cdb5c41325ed0f1f14e5830e9319a04d72bd517dc54bc0a31349fa005a26a425209f13ad82a0924e389f52da8383ad9d78b0ae0086cd274b18e8925077619f33e2a5d97b0f3b803af20580df7df4696bd07b16ff501ede9f422ca87a29bb386e740c1ad375d4ac2c85df8faceb0e57d1e4b5514d39299de6e2955266e57c4284332c0de4d2f8051692a614a614", 0x1000, 0x6}, {&(0x7f0000000480)="5f8307ffd6d44cf6d3c85055bdaa6286ff1656ac47b749054a0da10a861b942bec1e2317a2ec68b82554595128df9f6cff0a1871aabfb394282edde040ce926ec52c858ffd56147502d4fa4635b46b0fd9", 0x51, 0x1000}], 0x206000c, &(0x7f00000006c0)=ANY=[@ANYBLOB="88e408badf7092a86d61636b66736861743d2f6465762f7663736123003f48aa9285d7aa6fc0f657dd9685946262e193080eb75bff103f070000005f2f72190f5667b716f1efc9c742c7357b6a4b490e4e0bb7f3c599d2388fb59ac836943b0ce478b2fe563d43efc26b995818ca2c646566636f6e74657874"]) fcntl$setstatus(r4, 0x4, 0x400) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x950) syz_open_dev$vcsa(&(0x7f0000000840), 0x0, 0x28180) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000280)=0x80) pwrite64(r5, &(0x7f00000000c0)="041a3a4985d424bdce9675f286982a09f7fe7569cb2c6e71f89e8019678c585aa70cc9e2435235dcb0b3434020d0f4d5613bb8bde96608eaf4af1834720900b040007af6d3edc14cd7ab81c733b614b0835ac6af8173be3b00015a826f2562ae98feb0d40000f80000", 0xff69, 0x3ff03) 06:21:18 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x31000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0bfe18eba06b39a5d19c0281412fb5b515d68f4fe2b2b1f8009000000000000000297a2dc73e6a4451f5f97fd959d01995b13f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc96", @ANYRES32, @ANYBLOB="2b8cb0d98df95d1ec4720b6600"/27]) flock(r1, 0xd69f0b97d7161db7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000)=0x200000000000000, 0x7, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2655.905031] FAULT_INJECTION: forcing a failure. [ 2655.905031] name failslab, interval 1, probability 0, space 0, times 0 [ 2655.906704] CPU: 1 PID: 17716 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2655.907683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2655.908844] Call Trace: [ 2655.909226] dump_stack+0x107/0x167 [ 2655.909741] should_fail.cold+0x5/0xa [ 2655.910277] ? xas_alloc+0x336/0x440 [ 2655.910814] should_failslab+0x5/0x20 [ 2655.911347] kmem_cache_alloc+0x5b/0x310 [ 2655.911918] xas_alloc+0x336/0x440 [ 2655.912417] xas_create+0x34a/0x10d0 [ 2655.912947] ? kernel_text_address+0xf2/0x120 [ 2655.913591] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2655.914328] xas_store+0x8c/0x1c40 [ 2655.914845] __xa_store+0x164/0x2d0 [ 2655.915357] ? xa_delete_node+0x280/0x280 [ 2655.915944] ? trace_hardirqs_on+0x5b/0x180 [ 2655.916552] xa_store+0x31/0x50 [ 2655.917018] __io_uring_add_tctx_node+0x1cf/0x520 [ 2655.917693] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2655.918433] ? alloc_fd+0x2e7/0x670 [ 2655.918952] io_uring_setup+0x1fbb/0x2980 [ 2655.919541] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2655.920248] ? wait_for_completion_io+0x270/0x270 [ 2655.920947] do_syscall_64+0x33/0x40 [ 2655.921470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2655.922184] RIP: 0033:0x7f8bb9614b19 [ 2655.922729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2655.925307] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2655.926397] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2655.927398] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2655.928398] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2655.929395] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2655.930399] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2655.940669] FAULT_INJECTION: forcing a failure. [ 2655.940669] name failslab, interval 1, probability 0, space 0, times 0 [ 2655.942162] CPU: 0 PID: 17723 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2655.943054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2655.944113] Call Trace: [ 2655.944462] dump_stack+0x107/0x167 [ 2655.944943] should_fail.cold+0x5/0xa [ 2655.945433] ? anon_vma_clone+0xdc/0x590 [ 2655.945970] should_failslab+0x5/0x20 [ 2655.946493] kmem_cache_alloc+0x5b/0x310 [ 2655.947038] anon_vma_clone+0xdc/0x590 [ 2655.947547] anon_vma_fork+0x82/0x640 [ 2655.948043] ? __vm_enough_memory+0x184/0x360 [ 2655.948632] copy_process+0x72c9/0x78b0 [ 2655.949164] ? __cleanup_sighand+0xb0/0xb0 [ 2655.949859] ? _copy_from_user+0xfb/0x1b0 [ 2655.950436] kernel_clone+0xe7/0x980 [ 2655.950924] ? __lockdep_reset_lock+0x180/0x180 [ 2655.951510] ? create_io_thread+0xf0/0xf0 [ 2655.952053] ? ksys_write+0x21a/0x260 [ 2655.952527] ? lock_downgrade+0x6d0/0x6d0 [ 2655.953059] __do_sys_clone3+0x1e5/0x320 [ 2655.953571] ? __do_sys_clone+0x110/0x110 [ 2655.954115] ? rcu_read_lock_any_held+0x75/0xa0 [ 2655.954707] ? vfs_write+0x354/0xb10 [ 2655.955175] ? fput_many+0x2f/0x1a0 [ 2655.955633] ? ksys_write+0x1a9/0x260 [ 2655.956132] ? __ia32_sys_read+0xb0/0xb0 [ 2655.956668] do_syscall_64+0x33/0x40 [ 2655.957134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2655.957776] RIP: 0033:0x7f2b50818b19 [ 2655.958238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2655.960540] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2655.961485] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2655.962389] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2655.963287] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2655.964171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2655.965059] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2656.030016] loop5: detected capacity change from 0 to 135266304 06:21:18 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 67) 06:21:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 58) 06:21:18 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:21:18 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c661000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2656.082040] FAULT_INJECTION: forcing a failure. [ 2656.082040] name failslab, interval 1, probability 0, space 0, times 0 [ 2656.083658] CPU: 1 PID: 17734 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2656.084637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2656.085825] Call Trace: [ 2656.086204] dump_stack+0x107/0x167 [ 2656.086747] should_fail.cold+0x5/0xa [ 2656.087295] ? create_object.isra.0+0x3a/0xa20 [ 2656.087939] should_failslab+0x5/0x20 [ 2656.088474] kmem_cache_alloc+0x5b/0x310 [ 2656.089049] create_object.isra.0+0x3a/0xa20 [ 2656.089662] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2656.090385] kmem_cache_alloc+0x159/0x310 [ 2656.090974] anon_vma_clone+0xdc/0x590 [ 2656.091531] anon_vma_fork+0x82/0x640 [ 2656.092064] ? __vm_enough_memory+0x184/0x360 [ 2656.092698] copy_process+0x72c9/0x78b0 [ 2656.093282] ? __cleanup_sighand+0xb0/0xb0 [ 2656.093898] ? _copy_from_user+0xfb/0x1b0 [ 2656.094496] kernel_clone+0xe7/0x980 [ 2656.095021] ? __lockdep_reset_lock+0x180/0x180 [ 2656.095675] ? create_io_thread+0xf0/0xf0 [ 2656.096266] ? ksys_write+0x21a/0x260 [ 2656.096818] ? lock_downgrade+0x6d0/0x6d0 [ 2656.097402] __do_sys_clone3+0x1e5/0x320 [ 2656.097970] ? __do_sys_clone+0x110/0x110 [ 2656.098575] ? rcu_read_lock_any_held+0x75/0xa0 [ 2656.099222] ? vfs_write+0x354/0xb10 [ 2656.099745] ? fput_many+0x2f/0x1a0 [ 2656.100255] ? ksys_write+0x1a9/0x260 [ 2656.100789] ? __ia32_sys_read+0xb0/0xb0 [ 2656.101376] do_syscall_64+0x33/0x40 [ 2656.101907] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2656.102637] RIP: 0033:0x7f2b50818b19 [ 2656.103162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2656.105727] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2656.106807] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2656.107806] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2656.108840] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2656.109834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2656.110837] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2656.115871] FAULT_INJECTION: forcing a failure. [ 2656.115871] name failslab, interval 1, probability 0, space 0, times 0 [ 2656.117496] CPU: 1 PID: 17740 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2656.118484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2656.119635] Call Trace: [ 2656.120017] dump_stack+0x107/0x167 [ 2656.120535] should_fail.cold+0x5/0xa [ 2656.121071] ? create_object.isra.0+0x3a/0xa20 [ 2656.121709] should_failslab+0x5/0x20 [ 2656.122241] kmem_cache_alloc+0x5b/0x310 [ 2656.122821] ? mark_held_locks+0x9e/0xe0 [ 2656.123393] create_object.isra.0+0x3a/0xa20 [ 2656.124002] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2656.124715] kmem_cache_alloc+0x159/0x310 [ 2656.125301] xas_alloc+0x336/0x440 [ 2656.125803] xas_create+0x34a/0x10d0 [ 2656.126331] ? kernel_text_address+0xf2/0x120 [ 2656.126981] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2656.127712] xas_store+0x8c/0x1c40 [ 2656.128223] __xa_store+0x164/0x2d0 [ 2656.128739] ? xa_delete_node+0x280/0x280 [ 2656.129328] ? trace_hardirqs_on+0x5b/0x180 [ 2656.129959] xa_store+0x31/0x50 [ 2656.130443] __io_uring_add_tctx_node+0x1cf/0x520 [ 2656.131115] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2656.131849] ? alloc_fd+0x2e7/0x670 [ 2656.132365] io_uring_setup+0x1fbb/0x2980 [ 2656.132952] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2656.133655] ? wait_for_completion_io+0x270/0x270 [ 2656.134353] do_syscall_64+0x33/0x40 [ 2656.134882] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2656.135595] RIP: 0033:0x7f8bb9614b19 [ 2656.136118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2656.138692] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2656.139754] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2656.140752] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2656.141755] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2656.142759] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2656.143777] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:21:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 59) 06:21:32 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482db"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) dup(0xffffffffffffffff) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0005000000000000040106142b9384acc194db5e0212fa866035729354d71dcc1f0d512f7733e70fb2d4631cffffffff0000000000000000"], 0x38) syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4004, @fd=r6, 0x5, 0x401, 0x80000000, 0x22, 0x1, {0x1}}, 0x20000000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a863e343d08000000000000000665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853f595ab5f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43db7e4116e6031e00000000000000000000000000005e0f4582c821a13d829836b7a6eee8526b0ae0321446d2695d1a4919ba1f36cb191fe70a839b61e974783b252bd9438e3ca5d00a0a39146460ea6fd76cd455e2afe7be0ead569d7848912e7bddef825dd9cdb059736b5df4390d57025acb2b53bb99db40918a4575991a88151499328c99f3861fddbd3c00605aceb7b0ff68257caa1be565bf4cee1edb6990f5ccbc7de5b287b91a6a8f624072", @ANYRES16=r3, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto(r1, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 06:21:32 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 68) 06:21:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r2, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd5376080000001d258d85415d153269a728d9cccbdb994fb4b9815f6abf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x0) pwrite64(r2, &(0x7f0000000340)='t', 0x1, 0x0) fallocate(r1, 0x3, 0x4077, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2800, 0x48) 06:21:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:21:32 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:21:32 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0xfffffffffffffe6c, 0x73, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x4, 0x0, 0x80, 0x0, 0x1, 0x91003, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x81e, 0x5}, 0x204c, 0x0, 0x8, 0x7, 0x80000001, 0x3, 0x5da0, 0x0, 0xfd5, 0x0, 0x2}, 0x0, 0x4, r0, 0x2) shmdt(0x0) 06:21:32 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2670.114214] FAULT_INJECTION: forcing a failure. [ 2670.114214] name failslab, interval 1, probability 0, space 0, times 0 [ 2670.117636] CPU: 0 PID: 17756 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2670.119322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2670.121361] Call Trace: [ 2670.122004] dump_stack+0x107/0x167 [ 2670.122894] should_fail.cold+0x5/0xa [ 2670.123811] ? down_write+0xe0/0x160 [ 2670.124763] ? anon_vma_clone+0xdc/0x590 [ 2670.125860] should_failslab+0x5/0x20 [ 2670.126809] kmem_cache_alloc+0x5b/0x310 [ 2670.127808] anon_vma_clone+0xdc/0x590 [ 2670.128786] anon_vma_fork+0x82/0x640 [ 2670.129713] ? __vm_enough_memory+0x184/0x360 [ 2670.130819] copy_process+0x72c9/0x78b0 [ 2670.131826] ? __cleanup_sighand+0xb0/0xb0 [ 2670.132874] ? _copy_from_user+0xfb/0x1b0 [ 2670.133895] kernel_clone+0xe7/0x980 [ 2670.134806] ? __lockdep_reset_lock+0x180/0x180 [ 2670.135940] ? create_io_thread+0xf0/0xf0 [ 2670.136963] ? ksys_write+0x21a/0x260 [ 2670.137895] ? lock_downgrade+0x6d0/0x6d0 [ 2670.138926] __do_sys_clone3+0x1e5/0x320 [ 2670.139910] ? __do_sys_clone+0x110/0x110 [ 2670.140955] ? rcu_read_lock_any_held+0x75/0xa0 [ 2670.142083] ? vfs_write+0x354/0xb10 [ 2670.142989] ? fput_many+0x2f/0x1a0 [ 2670.143870] ? ksys_write+0x1a9/0x260 [ 2670.144790] ? __ia32_sys_read+0xb0/0xb0 [ 2670.145784] do_syscall_64+0x33/0x40 [ 2670.146697] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2670.147934] RIP: 0033:0x7f2b50818b19 [ 2670.148831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2670.153280] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2670.155121] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2670.156835] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2670.158560] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2670.160289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2670.162008] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2670.190437] FAULT_INJECTION: forcing a failure. [ 2670.190437] name failslab, interval 1, probability 0, space 0, times 0 [ 2670.193361] CPU: 0 PID: 17797 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2670.195024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2670.197012] Call Trace: [ 2670.197645] dump_stack+0x107/0x167 [ 2670.198537] should_fail.cold+0x5/0xa [ 2670.199451] ? xas_alloc+0x336/0x440 [ 2670.200361] should_failslab+0x5/0x20 [ 2670.201273] kmem_cache_alloc+0x5b/0x310 [ 2670.202253] xas_alloc+0x336/0x440 [ 2670.203116] xas_create+0x34a/0x10d0 [ 2670.204017] ? kernel_text_address+0xf2/0x120 [ 2670.205093] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2670.206390] xas_store+0x8c/0x1c40 [ 2670.207286] __xa_store+0x164/0x2d0 06:21:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 60) [ 2670.208173] ? xa_delete_node+0x280/0x280 [ 2670.209372] ? trace_hardirqs_on+0x5b/0x180 [ 2670.210440] xa_store+0x31/0x50 [ 2670.211253] __io_uring_add_tctx_node+0x1cf/0x520 [ 2670.212434] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2670.213717] ? alloc_fd+0x2e7/0x670 [ 2670.214634] io_uring_setup+0x1fbb/0x2980 [ 2670.215661] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2670.216894] ? wait_for_completion_io+0x270/0x270 [ 2670.218110] do_syscall_64+0x33/0x40 [ 2670.219037] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2670.220290] RIP: 0033:0x7f8bb9614b19 [ 2670.221190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2670.221338] FAULT_INJECTION: forcing a failure. [ 2670.221338] name failslab, interval 1, probability 0, space 0, times 0 [ 2670.225682] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2670.225706] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2670.225725] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2670.232498] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2670.234242] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2670.235998] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2670.237775] CPU: 1 PID: 17805 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2670.238769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2670.239869] Call Trace: [ 2670.240230] dump_stack+0x107/0x167 [ 2670.240721] should_fail.cold+0x5/0xa [ 2670.241284] ? anon_vma_clone+0xdc/0x590 [ 2670.241839] should_failslab+0x5/0x20 [ 2670.242347] kmem_cache_alloc+0x5b/0x310 [ 2670.242904] anon_vma_clone+0xdc/0x590 [ 2670.243446] anon_vma_fork+0x82/0x640 [ 2670.243952] ? __vm_enough_memory+0x184/0x360 [ 2670.244556] copy_process+0x72c9/0x78b0 [ 2670.245109] ? __cleanup_sighand+0xb0/0xb0 [ 2670.245717] ? _copy_from_user+0xfb/0x1b0 [ 2670.246275] kernel_clone+0xe7/0x980 [ 2670.246797] ? __lockdep_reset_lock+0x180/0x180 [ 2670.247461] ? create_io_thread+0xf0/0xf0 [ 2670.248023] ? ksys_write+0x21a/0x260 [ 2670.248535] ? lock_downgrade+0x6d0/0x6d0 [ 2670.249125] __do_sys_clone3+0x1e5/0x320 [ 2670.249688] ? __do_sys_clone+0x110/0x110 [ 2670.250246] ? rcu_read_lock_any_held+0x75/0xa0 [ 2670.250876] ? vfs_write+0x354/0xb10 [ 2670.251366] ? fput_many+0x2f/0x1a0 [ 2670.251853] ? ksys_write+0x1a9/0x260 [ 2670.252356] ? __ia32_sys_read+0xb0/0xb0 [ 2670.252905] do_syscall_64+0x33/0x40 [ 2670.253439] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2670.254133] RIP: 0033:0x7f2b50818b19 [ 2670.254690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2670.257142] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2670.258199] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2670.259199] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2670.260163] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2670.261136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2670.262072] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2670.301550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 06:21:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 61) [ 2670.309563] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2670.330564] FAULT_INJECTION: forcing a failure. [ 2670.330564] name failslab, interval 1, probability 0, space 0, times 0 [ 2670.332186] CPU: 1 PID: 17867 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2670.333132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2670.334239] Call Trace: [ 2670.334611] dump_stack+0x107/0x167 [ 2670.335105] should_fail.cold+0x5/0xa [ 2670.335626] ? anon_vma_clone+0xdc/0x590 [ 2670.336167] should_failslab+0x5/0x20 [ 2670.336670] kmem_cache_alloc+0x5b/0x310 [ 2670.337214] anon_vma_clone+0xdc/0x590 [ 2670.337738] anon_vma_fork+0x82/0x640 [ 2670.338240] ? __vm_enough_memory+0x184/0x360 [ 2670.338848] copy_process+0x72c9/0x78b0 [ 2670.339409] ? __cleanup_sighand+0xb0/0xb0 [ 2670.339987] ? _copy_from_user+0xfb/0x1b0 [ 2670.340539] kernel_clone+0xe7/0x980 [ 2670.341036] ? __lockdep_reset_lock+0x180/0x180 [ 2670.341658] ? create_io_thread+0xf0/0xf0 [ 2670.342223] ? ksys_write+0x21a/0x260 [ 2670.342745] ? lock_downgrade+0x6d0/0x6d0 [ 2670.343300] __do_sys_clone3+0x1e5/0x320 [ 2670.343837] ? __do_sys_clone+0x110/0x110 [ 2670.344407] ? rcu_read_lock_any_held+0x75/0xa0 [ 2670.345032] ? vfs_write+0x354/0xb10 [ 2670.345528] ? fput_many+0x2f/0x1a0 [ 2670.346012] ? ksys_write+0x1a9/0x260 [ 2670.346528] ? __ia32_sys_read+0xb0/0xb0 [ 2670.347081] do_syscall_64+0x33/0x40 [ 2670.347582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2670.348267] RIP: 0033:0x7f2b50818b19 [ 2670.348761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2670.351187] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2670.352195] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2670.353143] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2670.354099] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2670.355052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2670.355995] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2670.375701] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2670.377975] CPU: 0 PID: 17801 Comm: syz-executor.1 Not tainted 5.10.238 #1 06:21:32 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 69) [ 2670.379663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2670.381786] Call Trace: [ 2670.382430] dump_stack+0x107/0x167 [ 2670.383317] sysfs_warn_dup.cold+0x1c/0x29 [ 2670.384331] sysfs_do_create_link_sd+0x122/0x140 [ 2670.385455] sysfs_create_link+0x5f/0xc0 [ 2670.386424] device_add+0x703/0x1c50 [ 2670.387331] ? devlink_add_symlinks+0x970/0x970 [ 2670.388443] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2670.389700] wiphy_register+0x1da6/0x2850 [ 2670.390717] ? wiphy_unregister+0xb90/0xb90 [ 2670.391768] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2670.393040] ieee80211_register_hw+0x23c5/0x38b0 [ 2670.394195] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2670.395357] ? net_generic+0xdb/0x2b0 [ 2670.396277] ? lockdep_init_map_type+0x2c7/0x780 [ 2670.397407] ? memset+0x20/0x50 [ 2670.398199] ? __hrtimer_init+0x12c/0x270 [ 2670.399205] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2670.400418] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2670.401531] ? hwsim_new_radio_nl+0x967/0x1080 [ 2670.402624] ? memcpy+0x39/0x60 [ 2670.403425] hwsim_new_radio_nl+0x991/0x1080 [ 2670.404475] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2670.405723] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2670.407295] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2670.408843] genl_family_rcv_msg_doit+0x22d/0x330 [ 2670.409997] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2670.411564] ? cap_capable+0x1cd/0x230 [ 2670.412527] ? ns_capable+0xe2/0x110 [ 2670.413425] genl_rcv_msg+0x36a/0x5a0 [ 2670.414338] ? genl_get_cmd+0x480/0x480 [ 2670.415291] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2670.416520] ? lock_release+0x680/0x680 [ 2670.417473] ? __lockdep_reset_lock+0x180/0x180 [ 2670.418597] netlink_rcv_skb+0x14b/0x430 [ 2670.419573] ? genl_get_cmd+0x480/0x480 [ 2670.420518] ? netlink_ack+0xab0/0xab0 [ 2670.421462] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2670.422574] ? is_vmalloc_addr+0x7b/0xb0 [ 2670.423560] genl_rcv+0x24/0x40 [ 2670.424351] netlink_unicast+0x54e/0x800 [ 2670.425334] ? netlink_attachskb+0x870/0x870 [ 2670.426408] netlink_sendmsg+0x90f/0xe00 [ 2670.427401] ? netlink_unicast+0x800/0x800 [ 2670.428430] ? netlink_unicast+0x800/0x800 [ 2670.429452] __sock_sendmsg+0x154/0x190 [ 2670.430416] ____sys_sendmsg+0x70d/0x870 [ 2670.431412] ? sock_write_iter+0x3d0/0x3d0 [ 2670.432433] ? do_recvmmsg+0x6d0/0x6d0 [ 2670.433382] ? __lockdep_reset_lock+0x180/0x180 [ 2670.434502] ? __delete_object+0xb3/0x100 [ 2670.435518] ___sys_sendmsg+0xf3/0x170 [ 2670.436464] ? sendmsg_copy_msghdr+0x160/0x160 [ 2670.437567] ? __fget_files+0x2cf/0x520 [ 2670.438539] ? lock_downgrade+0x6d0/0x6d0 [ 2670.439535] ? __kasan_slab_free+0x122/0x160 [ 2670.440597] ? futex_exit_release+0x220/0x220 [ 2670.441689] ? __fget_files+0x2f8/0x520 [ 2670.442664] ? __fget_light+0xea/0x290 [ 2670.443614] __sys_sendmsg+0xe5/0x1b0 [ 2670.444531] ? __sys_sendmsg_sock+0x40/0x40 [ 2670.445564] ? __do_sys_futex+0x2bb/0x480 [ 2670.446579] ? __x64_sys_creat+0x1/0x120 [ 2670.447571] do_syscall_64+0x33/0x40 [ 2670.448467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2670.449704] RIP: 0033:0x7f277f764b19 [ 2670.450607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2670.455027] RSP: 002b:00007f277ccda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2670.456854] RAX: ffffffffffffffda RBX: 00007f277f877f60 RCX: 00007f277f764b19 [ 2670.458571] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 2670.460285] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2670.462004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2670.463727] R13: 00007fff5bc6ce3f R14: 00007f277ccda300 R15: 0000000000022000 06:21:32 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2670.482065] FAULT_INJECTION: forcing a failure. [ 2670.482065] name failslab, interval 1, probability 0, space 0, times 0 [ 2670.483576] CPU: 1 PID: 17881 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2670.484450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2670.485490] Call Trace: [ 2670.485834] dump_stack+0x107/0x167 [ 2670.486302] should_fail.cold+0x5/0xa [ 2670.486792] ? create_object.isra.0+0x3a/0xa20 [ 2670.487366] should_failslab+0x5/0x20 [ 2670.487846] kmem_cache_alloc+0x5b/0x310 [ 2670.488358] ? mark_held_locks+0x9e/0xe0 [ 2670.488872] create_object.isra.0+0x3a/0xa20 [ 2670.489416] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2670.490063] kmem_cache_alloc+0x159/0x310 [ 2670.490602] xas_alloc+0x336/0x440 [ 2670.491058] xas_create+0x34a/0x10d0 [ 2670.491534] ? kernel_text_address+0xf2/0x120 [ 2670.492097] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2670.492760] xas_store+0x8c/0x1c40 [ 2670.493217] __xa_store+0x164/0x2d0 [ 2670.493680] ? xa_delete_node+0x280/0x280 [ 2670.494206] ? trace_hardirqs_on+0x5b/0x180 [ 2670.494754] xa_store+0x31/0x50 [ 2670.495171] __io_uring_add_tctx_node+0x1cf/0x520 [ 2670.495777] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2670.496438] ? alloc_fd+0x2e7/0x670 [ 2670.496904] io_uring_setup+0x1fbb/0x2980 [ 2670.497427] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2670.498058] ? wait_for_completion_io+0x270/0x270 [ 2670.498687] do_syscall_64+0x33/0x40 [ 2670.499150] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2670.499792] RIP: 0033:0x7f8bb9614b19 [ 2670.500260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2670.502528] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2670.503461] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2670.504336] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2670.505211] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2670.506083] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2670.506964] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:21:33 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 2670.517467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2670.519252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2670.527966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2670.554575] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2670.563196] kauditd_printk_skb: 31 callbacks suppressed [ 2670.563208] audit: type=1326 audit(1749882093.049:260): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17760 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc157d92b19 code=0x7ffc0000 [ 2670.567756] audit: type=1326 audit(1749882093.050:261): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17760 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc157d92b19 code=0x7ffc0000 [ 2670.570462] audit: type=1326 audit(1749882093.051:262): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17760 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc157d92b19 code=0x7ffc0000 [ 2670.579492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2670.589720] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2670.590836] CPU: 1 PID: 17878 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2670.591670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2670.592652] Call Trace: [ 2670.592968] dump_stack+0x107/0x167 [ 2670.593403] sysfs_warn_dup.cold+0x1c/0x29 [ 2670.593901] sysfs_do_create_link_sd+0x122/0x140 [ 2670.594456] sysfs_create_link+0x5f/0xc0 [ 2670.594946] device_add+0x703/0x1c50 [ 2670.595388] ? devlink_add_symlinks+0x970/0x970 [ 2670.595936] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2670.596558] wiphy_register+0x1da6/0x2850 [ 2670.597060] ? wiphy_unregister+0xb90/0xb90 [ 2670.597576] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2670.598206] ieee80211_register_hw+0x23c5/0x38b0 [ 2670.598782] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2670.599344] ? net_generic+0xdb/0x2b0 [ 2670.599800] ? lockdep_init_map_type+0x2c7/0x780 [ 2670.600355] ? memset+0x20/0x50 [ 2670.600745] ? __hrtimer_init+0x12c/0x270 [ 2670.601233] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2670.601830] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2670.602374] ? hwsim_new_radio_nl+0x967/0x1080 [ 2670.602918] ? memcpy+0x39/0x60 [ 2670.603309] hwsim_new_radio_nl+0x991/0x1080 [ 2670.603835] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2670.604452] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2670.605230] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2670.605997] genl_family_rcv_msg_doit+0x22d/0x330 [ 2670.606576] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2670.607349] ? cap_capable+0x1cd/0x230 [ 2670.607819] ? ns_capable+0xe2/0x110 [ 2670.608272] genl_rcv_msg+0x36a/0x5a0 [ 2670.608724] ? genl_get_cmd+0x480/0x480 [ 2670.609188] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2670.609790] ? lock_release+0x680/0x680 [ 2670.610254] ? __lockdep_reset_lock+0x180/0x180 [ 2670.610809] netlink_rcv_skb+0x14b/0x430 [ 2670.611281] ? genl_get_cmd+0x480/0x480 [ 2670.611746] ? netlink_ack+0xab0/0xab0 [ 2670.612206] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2670.612736] ? is_vmalloc_addr+0x7b/0xb0 [ 2670.613213] genl_rcv+0x24/0x40 [ 2670.613597] netlink_unicast+0x54e/0x800 [ 2670.614076] ? netlink_attachskb+0x870/0x870 [ 2670.614603] netlink_sendmsg+0x90f/0xe00 [ 2670.615079] ? netlink_unicast+0x800/0x800 [ 2670.615581] ? netlink_unicast+0x800/0x800 [ 2670.616074] __sock_sendmsg+0x154/0x190 [ 2670.616541] ____sys_sendmsg+0x70d/0x870 [ 2670.617015] ? sock_write_iter+0x3d0/0x3d0 [ 2670.617510] ? do_recvmmsg+0x6d0/0x6d0 [ 2670.617971] ? __lockdep_reset_lock+0x180/0x180 [ 2670.618525] ___sys_sendmsg+0xf3/0x170 [ 2670.618982] ? sendmsg_copy_msghdr+0x160/0x160 [ 2670.619518] ? __fget_files+0x2cf/0x520 [ 2670.619982] ? lock_downgrade+0x6d0/0x6d0 [ 2670.620466] ? __lockdep_reset_lock+0x180/0x180 [ 2670.621008] ? futex_exit_release+0x220/0x220 [ 2670.621535] ? __fget_files+0x2f8/0x520 [ 2670.622005] ? __fget_light+0xea/0x290 [ 2670.622463] __sys_sendmsg+0xe5/0x1b0 [ 2670.622917] ? __sys_sendmsg_sock+0x40/0x40 [ 2670.623421] ? __do_sys_futex+0x2bb/0x480 [ 2670.623905] ? __x64_sys_creat+0x1/0x120 [ 2670.624386] do_syscall_64+0x33/0x40 [ 2670.624819] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2670.625411] RIP: 0033:0x7f277f764b19 [ 2670.625843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2670.627982] RSP: 002b:00007f277ccb9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2670.628861] RAX: ffffffffffffffda RBX: 00007f277f878020 RCX: 00007f277f764b19 [ 2670.629686] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2670.630519] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2670.631346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2670.632172] R13: 00007fff5bc6ce3f R14: 00007f277ccb9300 R15: 0000000000022000 06:21:33 executing program 6: r0 = syz_io_uring_setup(0x68d0, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x1, 0x399}, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x40010, r0, 0x10000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x2e982, 0x0) dup2(r1, r2) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x20010, r2, 0x0) [ 2670.655466] audit: type=1326 audit(1749882093.052:263): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17760 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc157d92b19 code=0x7ffc0000 [ 2670.692288] audit: type=1326 audit(1749882093.052:264): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17760 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc157d92b19 code=0x7ffc0000 [ 2670.711965] audit: type=1326 audit(1749882093.052:265): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17760 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc157d92b19 code=0x7ffc0000 [ 2670.729236] audit: type=1326 audit(1749882093.059:266): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17760 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc157d92b19 code=0x7ffc0000 [ 2670.747227] audit: type=1326 audit(1749882093.059:267): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17760 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc157d92b19 code=0x7ffc0000 06:21:47 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 70) 06:21:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 62) 06:21:47 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:21:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300)) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000200)={0xe1, 0xffffffffffff7fff, 0x6}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) fallocate(0xffffffffffffffff, 0x3, 0x4077, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00000000000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r3, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) sendfile(r0, r3, 0x0, 0x100000003) write$P9_RREADLINK(r0, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) 06:21:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_setup(0x1c63, &(0x7f00000004c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 06:21:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:21:47 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x100000000000029a) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:21:47 executing program 6: r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {r18}, {}, {}, {r16}, {}, {}, {}, {}, {r11}, {}, {}, {r12}, {}, {}, {0x0, r17}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r15}], 0x80, "9d3a1cc960e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054c00)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}], 0x1, "336545c2542a4c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051ac0)={0xc993, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r20}], 0x9, "d018288c5e6e95"}) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000500)) r23 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000003, 0x10010, r0, 0x10000000) syz_io_uring_submit(r4, r23, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0xb05) sendfile(r1, r2, 0x0, 0x100000001) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) [ 2684.888052] loop1: detected capacity change from 0 to 41948160 [ 2684.917238] FAULT_INJECTION: forcing a failure. [ 2684.917238] name failslab, interval 1, probability 0, space 0, times 0 [ 2684.919929] CPU: 1 PID: 17916 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2684.921484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2684.923371] Call Trace: [ 2684.923970] dump_stack+0x107/0x167 [ 2684.924798] should_fail.cold+0x5/0xa [ 2684.925668] ? xas_alloc+0x336/0x440 [ 2684.926534] should_failslab+0x5/0x20 [ 2684.927426] kmem_cache_alloc+0x5b/0x310 [ 2684.928378] xas_alloc+0x336/0x440 [ 2684.929208] xas_create+0x34a/0x10d0 [ 2684.930083] ? kernel_text_address+0xf2/0x120 [ 2684.931106] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2684.932321] xas_store+0x8c/0x1c40 [ 2684.933140] __xa_store+0x164/0x2d0 [ 2684.933991] ? xa_delete_node+0x280/0x280 [ 2684.934949] ? trace_hardirqs_on+0x5b/0x180 [ 2684.935964] xa_store+0x31/0x50 [ 2684.936732] __io_uring_add_tctx_node+0x1cf/0x520 [ 2684.937844] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2684.939057] ? alloc_fd+0x2e7/0x670 [ 2684.939914] io_uring_setup+0x1fbb/0x2980 [ 2684.940883] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2684.942046] ? wait_for_completion_io+0x270/0x270 [ 2684.943201] do_syscall_64+0x33/0x40 [ 2684.944064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2684.945250] RIP: 0033:0x7f8bb9614b19 [ 2684.946114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2684.950407] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2684.952181] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2684.953834] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2684.955494] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2684.957144] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2684.958805] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2684.972209] FAULT_INJECTION: forcing a failure. [ 2684.972209] name failslab, interval 1, probability 0, space 0, times 0 [ 2684.975182] CPU: 1 PID: 17922 Comm: syz-executor.0 Not tainted 5.10.238 #1 06:21:47 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 2684.976991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2684.979032] Call Trace: [ 2684.979679] dump_stack+0x107/0x167 [ 2684.980523] should_fail.cold+0x5/0xa [ 2684.981405] ? create_object.isra.0+0x3a/0xa20 [ 2684.982463] should_failslab+0x5/0x20 [ 2684.983352] kmem_cache_alloc+0x5b/0x310 [ 2684.984292] create_object.isra.0+0x3a/0xa20 [ 2684.985301] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2684.986472] kmem_cache_alloc+0x159/0x310 [ 2684.987471] anon_vma_clone+0xdc/0x590 [ 2684.988421] anon_vma_fork+0x82/0x640 [ 2684.989307] ? __vm_enough_memory+0x184/0x360 [ 2684.990331] copy_process+0x72c9/0x78b0 [ 2684.991306] ? __cleanup_sighand+0xb0/0xb0 [ 2684.992312] ? _copy_from_user+0xfb/0x1b0 [ 2684.993284] kernel_clone+0xe7/0x980 [ 2684.994148] ? __lockdep_reset_lock+0x180/0x180 [ 2684.995243] ? create_io_thread+0xf0/0xf0 [ 2684.996221] ? ksys_write+0x21a/0x260 [ 2684.997126] ? lock_downgrade+0x6d0/0x6d0 [ 2684.998099] __do_sys_clone3+0x1e5/0x320 [ 2684.999053] ? __do_sys_clone+0x110/0x110 [ 2685.000040] ? rcu_read_lock_any_held+0x75/0xa0 [ 2685.001091] ? vfs_write+0x354/0xb10 [ 2685.001956] ? fput_many+0x2f/0x1a0 [ 2685.002793] ? ksys_write+0x1a9/0x260 [ 2685.003677] ? __ia32_sys_read+0xb0/0xb0 [ 2685.004616] do_syscall_64+0x33/0x40 [ 2685.005480] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2685.006635] RIP: 0033:0x7f2b50818b19 [ 2685.007508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2685.011773] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2685.013545] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2685.015200] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2685.016858] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2685.018512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2685.020179] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:21:47 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 71) 06:21:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xb, &(0x7f00000000c0)=0xba, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3fb, 0x25, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0x80) 06:21:47 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:21:47 executing program 5: unshare(0x8000000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40010000) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x4040000) io_uring_enter(0xffffffffffffffff, 0x5c33, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r1, 0x0) r3 = dup3(r1, r0, 0x80000) unshare(0x10000000) unshare(0x800) mq_timedreceive(r3, &(0x7f0000000140)=""/188, 0xbc, 0xffffffffffffdcff, &(0x7f0000000040)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000019, 0x100010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r4, 0x0, &(0x7f0000000300)='./file0\x00', 0x50, 0x4a3082, 0x23456}, 0x10000000) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x4010, r5, 0xd59c0000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x400000000000fff) 06:21:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x5a7083, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x20, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_open_procfs(0x0, &(0x7f0000000280)='net/protocols\x00') ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x3fd, 0x9, 0x7}) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000080), 0x4) syz_io_uring_complete(r2) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8, 0x1}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r6, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x3, 0x80, 0x6, 0xd8, 0x2, 0xe9, 0x0, 0x5, 0x180000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000180)}, 0x1471d, 0x7, 0x4, 0x6378ebc06f83347a, 0x1, 0x1, 0x4, 0x0, 0xd2c, 0x0, 0xab8}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x9, &(0x7f0000000100)=[r6, r1, r3], 0x3, 0x0, 0x1}, 0x63) perf_event_open(&(0x7f0000001700)={0x3, 0x80, 0x6, 0x6, 0x20, 0x6, 0x0, 0x1ff, 0x80100, 0x1c, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xb2, 0x742}, 0x10c00, 0xffffffffffffff74, 0x3ff, 0x3, 0xb39e, 0x2, 0x1, 0x0, 0xe5a3, 0x0, 0x2}, 0x0, 0x3, r5, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 06:21:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 63) [ 2685.211468] FAULT_INJECTION: forcing a failure. [ 2685.211468] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.213288] CPU: 0 PID: 18041 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2685.214365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2685.215691] Call Trace: [ 2685.216109] dump_stack+0x107/0x167 [ 2685.216686] should_fail.cold+0x5/0xa [ 2685.217293] ? xas_alloc+0x336/0x440 [ 2685.217877] should_failslab+0x5/0x20 [ 2685.218471] kmem_cache_alloc+0x5b/0x310 [ 2685.219121] xas_alloc+0x336/0x440 [ 2685.219675] xas_create+0x34a/0x10d0 [ 2685.220236] ? kernel_text_address+0xf2/0x120 [ 2685.220945] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2685.221787] xas_store+0x8c/0x1c40 [ 2685.222356] __xa_store+0x164/0x2d0 [ 2685.222936] ? xa_delete_node+0x280/0x280 [ 2685.223571] ? trace_hardirqs_on+0x5b/0x180 [ 2685.224260] xa_store+0x31/0x50 [ 2685.224779] __io_uring_add_tctx_node+0x1cf/0x520 [ 2685.225538] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2685.226356] ? alloc_fd+0x2e7/0x670 [ 2685.226918] io_uring_setup+0x1fbb/0x2980 [ 2685.227573] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2685.228370] ? wait_for_completion_io+0x270/0x270 [ 2685.229156] do_syscall_64+0x33/0x40 [ 2685.229745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2685.230548] RIP: 0033:0x7f8bb9614b19 [ 2685.231117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2685.233598] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18047 comm=syz-executor.1 [ 2685.234011] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2685.236808] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18047 comm=syz-executor.1 [ 2685.237940] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 06:21:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2685.237949] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2685.237957] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2685.237964] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2685.237972] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2685.245079] FAULT_INJECTION: forcing a failure. [ 2685.245079] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.249886] CPU: 0 PID: 18048 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2685.250982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2685.252273] Call Trace: [ 2685.252683] dump_stack+0x107/0x167 [ 2685.253244] should_fail.cold+0x5/0xa [ 2685.253845] ? create_object.isra.0+0x3a/0xa20 [ 2685.254571] should_failslab+0x5/0x20 [ 2685.255147] kmem_cache_alloc+0x5b/0x310 [ 2685.255780] create_object.isra.0+0x3a/0xa20 [ 2685.256460] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2685.257260] kmem_cache_alloc+0x159/0x310 [ 2685.257917] anon_vma_clone+0xdc/0x590 [ 2685.258520] anon_vma_fork+0x82/0x640 [ 2685.259097] ? __vm_enough_memory+0x184/0x360 [ 2685.259788] copy_process+0x72c9/0x78b0 [ 2685.260427] ? __cleanup_sighand+0xb0/0xb0 [ 2685.261108] ? _copy_from_user+0xfb/0x1b0 [ 2685.261769] kernel_clone+0xe7/0x980 [ 2685.262357] ? __lockdep_reset_lock+0x180/0x180 [ 2685.263101] ? create_io_thread+0xf0/0xf0 [ 2685.263760] ? ksys_write+0x21a/0x260 [ 2685.264358] ? lock_downgrade+0x6d0/0x6d0 [ 2685.265017] __do_sys_clone3+0x1e5/0x320 [ 2685.265641] ? __do_sys_clone+0x110/0x110 [ 2685.266314] ? rcu_read_lock_any_held+0x75/0xa0 [ 2685.267055] ? vfs_write+0x354/0xb10 [ 2685.267638] ? fput_many+0x2f/0x1a0 [ 2685.268201] ? ksys_write+0x1a9/0x260 [ 2685.268780] ? __ia32_sys_read+0xb0/0xb0 [ 2685.269427] do_syscall_64+0x33/0x40 [ 2685.270010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2685.270805] RIP: 0033:0x7f2b50818b19 [ 2685.271378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2685.274332] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2685.274347] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2685.274355] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 06:21:47 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYRES32=r0]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2685.274362] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2685.274369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2685.274377] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:21:47 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 2685.274880] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2685.298184] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18052 comm=syz-executor.1 [ 2685.298207] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18052 comm=syz-executor.1 [ 2685.328668] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2685.328693] CPU: 1 PID: 18049 Comm: syz-executor.6 Not tainted 5.10.238 #1 06:21:47 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2_parent={0x18, 0x2, {{0x7f, 0xffffffff}, {0x2}}}, 0x0) [ 2685.328705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2685.328712] Call Trace: [ 2685.328744] dump_stack+0x107/0x167 [ 2685.328769] sysfs_warn_dup.cold+0x1c/0x29 [ 2685.328799] sysfs_do_create_link_sd+0x122/0x140 [ 2685.328823] sysfs_create_link+0x5f/0xc0 [ 2685.328848] device_add+0x703/0x1c50 [ 2685.328876] ? devlink_add_symlinks+0x970/0x970 06:21:47 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) [ 2685.328902] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2685.328934] wiphy_register+0x1da6/0x2850 [ 2685.328971] ? wiphy_unregister+0xb90/0xb90 06:21:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 64) 06:21:47 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 72) [ 2685.329009] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2685.329035] ieee80211_register_hw+0x23c5/0x38b0 06:21:47 executing program 6: syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4000, @fd_index=0x3, 0x4, 0x0, 0x0, 0x2}, 0x3) 06:21:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2685.329076] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2685.329093] ? net_generic+0xdb/0x2b0 [ 2685.329122] ? lockdep_init_map_type+0x2c7/0x780 [ 2685.329145] ? memset+0x20/0x50 [ 2685.329167] ? __hrtimer_init+0x12c/0x270 [ 2685.329193] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2685.329238] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2685.329255] ? hwsim_new_radio_nl+0x967/0x1080 06:21:48 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000014c0)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="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"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2685.329276] ? memcpy+0x39/0x60 [ 2685.329303] hwsim_new_radio_nl+0x991/0x1080 [ 2685.329331] ? mac80211_hwsim_new_radio+0x4290/0x4290 06:21:48 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x800000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_open(0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40040) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec00000000008f84158e66f57946271acf69220bc43185f54423f543d654959c611bb55b7c162628836b9faec3f8b07d16e9bf78837fadddde1c5e840fc8bc"]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c000006000000a9cd685676972493fb5de5288c2a367df5f13900ea53d200030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8"]}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x20000004}}, 0x81) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close(0xffffffffffffffff) 06:21:48 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2685.329373] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2685.329395] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 06:21:48 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 73) [ 2685.329425] genl_family_rcv_msg_doit+0x22d/0x330 [ 2685.329453] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2685.329475] ? cap_capable+0x1cd/0x230 [ 2685.329513] ? ns_capable+0xe2/0x110 [ 2685.329540] genl_rcv_msg+0x36a/0x5a0 [ 2685.329567] ? genl_get_cmd+0x480/0x480 [ 2685.329589] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2685.329618] ? lock_release+0x680/0x680 [ 2685.329639] ? __lockdep_reset_lock+0x180/0x180 [ 2685.329667] netlink_rcv_skb+0x14b/0x430 [ 2685.329689] ? genl_get_cmd+0x480/0x480 [ 2685.329712] ? netlink_ack+0xab0/0xab0 [ 2685.329745] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2685.329766] ? is_vmalloc_addr+0x7b/0xb0 [ 2685.329792] genl_rcv+0x24/0x40 [ 2685.329811] netlink_unicast+0x54e/0x800 [ 2685.329839] ? netlink_attachskb+0x870/0x870 [ 2685.329875] netlink_sendmsg+0x90f/0xe00 [ 2685.329905] ? netlink_unicast+0x800/0x800 [ 2685.329942] ? netlink_unicast+0x800/0x800 [ 2685.329965] __sock_sendmsg+0x154/0x190 [ 2685.329988] ____sys_sendmsg+0x70d/0x870 [ 2685.330014] ? sock_write_iter+0x3d0/0x3d0 [ 2685.330033] ? do_recvmmsg+0x6d0/0x6d0 [ 2685.330069] ? __lockdep_reset_lock+0x180/0x180 [ 2685.330086] ? __update_load_avg_se+0x680/0xbf0 [ 2685.330114] ___sys_sendmsg+0xf3/0x170 [ 2685.330139] ? sendmsg_copy_msghdr+0x160/0x160 [ 2685.330166] ? __fget_files+0x2cf/0x520 [ 2685.330188] ? lock_downgrade+0x6d0/0x6d0 [ 2685.330217] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2685.330240] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2685.330257] ? trace_hardirqs_on+0x5b/0x180 [ 2685.330281] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2685.330316] ? sockfd_lookup_light+0xca/0x180 [ 2685.330338] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 2685.330373] __sys_sendmsg+0xe5/0x1b0 [ 2685.330396] ? __sys_sendmsg_sock+0x40/0x40 [ 2685.330417] ? trace_hardirqs_on+0x5b/0x180 [ 2685.330466] do_syscall_64+0x33/0x40 [ 2685.330487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2685.330501] RIP: 0033:0x7fc157d92b19 [ 2685.330522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2685.330534] RSP: 002b:00007fc155308188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2685.330558] RAX: ffffffffffffffda RBX: 00007fc157ea5f60 RCX: 00007fc157d92b19 [ 2685.330570] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 2685.330583] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2685.330595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2685.330608] R13: 00007fff9c3d972f R14: 00007fc155308300 R15: 0000000000022000 [ 2685.520460] FAULT_INJECTION: forcing a failure. [ 2685.520460] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.520476] CPU: 0 PID: 18074 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2685.520483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2685.520487] Call Trace: [ 2685.520504] dump_stack+0x107/0x167 [ 2685.520517] should_fail.cold+0x5/0xa [ 2685.520529] ? create_object.isra.0+0x3a/0xa20 [ 2685.520542] should_failslab+0x5/0x20 [ 2685.520553] kmem_cache_alloc+0x5b/0x310 [ 2685.520567] create_object.isra.0+0x3a/0xa20 [ 2685.520577] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2685.520591] kmem_cache_alloc+0x159/0x310 [ 2685.520606] anon_vma_clone+0xdc/0x590 [ 2685.520624] anon_vma_fork+0x82/0x640 [ 2685.520633] ? __vm_enough_memory+0x184/0x360 [ 2685.520648] copy_process+0x72c9/0x78b0 [ 2685.520679] ? __cleanup_sighand+0xb0/0xb0 [ 2685.520704] ? _copy_from_user+0xfb/0x1b0 [ 2685.520719] kernel_clone+0xe7/0x980 [ 2685.520732] ? create_io_thread+0xf0/0xf0 [ 2685.520751] ? perf_event_sched_in.isra.0+0x80/0x80 [ 2685.520768] __do_sys_clone3+0x1e5/0x320 [ 2685.520778] ? __do_sys_clone+0x110/0x110 [ 2685.520788] ? finish_task_switch+0x126/0x5d0 [ 2685.520796] ? finish_task_switch+0xef/0x5d0 [ 2685.520821] ? io_schedule_timeout+0x140/0x140 [ 2685.520837] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 2685.520849] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2685.520860] ? ksys_write+0x1a9/0x260 [ 2685.520880] do_syscall_64+0x33/0x40 [ 2685.520891] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2685.520898] RIP: 0033:0x7f2b50818b19 [ 2685.520909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2685.520915] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2685.520928] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2685.520934] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2685.520940] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2685.520946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2685.520952] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2685.544645] FAULT_INJECTION: forcing a failure. [ 2685.544645] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.544661] CPU: 0 PID: 18078 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2685.544667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2685.544671] Call Trace: [ 2685.544688] dump_stack+0x107/0x167 [ 2685.544701] should_fail.cold+0x5/0xa [ 2685.544714] ? xas_alloc+0x336/0x440 [ 2685.544728] should_failslab+0x5/0x20 [ 2685.544740] kmem_cache_alloc+0x5b/0x310 [ 2685.544754] xas_alloc+0x336/0x440 [ 2685.544766] xas_create+0x34a/0x10d0 [ 2685.544783] ? kernel_text_address+0xf2/0x120 [ 2685.544796] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2685.544809] xas_store+0x8c/0x1c40 [ 2685.544828] __xa_store+0x164/0x2d0 [ 2685.544841] ? xa_delete_node+0x280/0x280 [ 2685.544857] ? trace_hardirqs_on+0x5b/0x180 [ 2685.544872] xa_store+0x31/0x50 [ 2685.544885] __io_uring_add_tctx_node+0x1cf/0x520 [ 2685.544896] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2685.544907] ? alloc_fd+0x2e7/0x670 [ 2685.544924] io_uring_setup+0x1fbb/0x2980 [ 2685.544941] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2685.544951] ? wait_for_completion_io+0x270/0x270 [ 2685.544980] do_syscall_64+0x33/0x40 [ 2685.544991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2685.544999] RIP: 0033:0x7f8bb9614b19 [ 2685.545010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2685.545016] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2685.545028] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2685.545035] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2685.545042] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2685.545048] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2685.545055] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2685.665903] FAULT_INJECTION: forcing a failure. [ 2685.665903] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.665929] CPU: 1 PID: 18089 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2685.775688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2685.775696] Call Trace: [ 2685.775724] dump_stack+0x107/0x167 [ 2685.775747] should_fail.cold+0x5/0xa [ 2685.775770] ? create_object.isra.0+0x3a/0xa20 [ 2685.775793] should_failslab+0x5/0x20 [ 2685.775813] kmem_cache_alloc+0x5b/0x310 [ 2685.775834] ? mark_held_locks+0x9e/0xe0 [ 2685.775859] create_object.isra.0+0x3a/0xa20 [ 2685.775877] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2685.775904] kmem_cache_alloc+0x159/0x310 [ 2685.775932] xas_alloc+0x336/0x440 [ 2685.775956] xas_create+0x34a/0x10d0 [ 2685.775986] ? kernel_text_address+0xf2/0x120 [ 2685.776009] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2685.776033] xas_store+0x8c/0x1c40 [ 2685.776070] __xa_store+0x164/0x2d0 [ 2685.776094] ? xa_delete_node+0x280/0x280 [ 2685.776123] ? trace_hardirqs_on+0x5b/0x180 [ 2685.776153] xa_store+0x31/0x50 [ 2685.776176] __io_uring_add_tctx_node+0x1cf/0x520 [ 2685.776198] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2685.776215] ? alloc_fd+0x2e7/0x670 [ 2685.776249] io_uring_setup+0x1fbb/0x2980 [ 2685.776280] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2685.776297] ? wait_for_completion_io+0x270/0x270 [ 2685.776353] do_syscall_64+0x33/0x40 [ 2685.776374] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2685.776388] RIP: 0033:0x7f8bb9614b19 [ 2685.776409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2685.776421] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2685.776445] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2685.776457] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2685.776470] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2685.776482] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2685.776494] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:22:03 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x14a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x4c, 0x0, &(0x7f0000004b80)) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f0000000080)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="d3f7ea330439fd14ad0ea42c96c83dabbabfed9bbeedfb4b502f875b95f07551c23ada008ec63e455302d38bc511fd952c88ec81acdca824c39c24dde8703267c1", 0x41}, {&(0x7f00000001c0)="a80b52c29c6cd095077220e3fb1f6c413c54f61d08d1893d1bd2383258702dd862c93a0a2d03df81f81fce37800f08aad909a37fcdaedbf3981e40fa43372f2e50edbb148cab892a", 0x48}], 0x2, &(0x7f0000000280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x20}}, @hopopts_2292={{0xd0, 0x29, 0x36, {0x0, 0x16, '\x00', [@jumbo={0xc2, 0x4, 0x20}, @generic={0x3, 0xaa, "e0a2be3d44d7a4cfb2c01e6d1ec8b4e7c5a38759e97025d04827e85d81cc2ca7f99765f4c5fd997b1500e0141a41479dd1ecc87e39430a8dfd83255cab198fe4681c4cf213922c498abe27561f57a0f4a8c393b22bd71376865ff86d62ef129c25e83786f51505ad9ee25f57cc0f827339f7a901284e9d5618129ee8376732257328465f4afe20ea049bb21e84d06be0ebca452f3b484dcd3fba025adc7e39a36cf5a3767a52a04a3515"}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x1d}}}], 0x100}, 0x20004810) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) 06:22:03 executing program 5: kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44805}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r0 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x0, @private}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="b683ae40f3fdac402b01b439fa7588927ad9dcc878d124b8", 0x18}], 0x1}, 0xa00) bind(r0, &(0x7f0000000140)=@generic={0x8, "998551433bbcfa6f946f6bd3a5ab380a2a86e304887c250dcc1b0879ad53c58c14c07abdd78cbcfd10d1fc50e2df845af23ccf2b2bd6769a93d8937954470773f9801cd4ad901842665940e6223f848c4e62bc39119b00275ad04fcf0403934873b6e148767bf1b14ab214113e3db0a2267336abc064050b956fcdae71a4"}, 0x80) io_uring_enter(0xffffffffffffffff, 0x5b80, 0x5ebb, 0x4, &(0x7f0000000040)={[0x5]}, 0x1) 06:22:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:22:03 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 06:22:03 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r1, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') getdents(0xffffffffffffffff, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80002010}) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_aout(r3, &(0x7f0000001e00)={{0x10b, 0x1, 0x20, 0x10c, 0x265, 0x5, 0x2be, 0x1}, "87b394f04adf31023a1ff188a29b5fb568a3f435a59e58c8a9a8e9df173efc25ac014266fc8b5c0bc7a9c5c3218fb8c53710f166e16b61dab531d15b71dfd761a2834924c5707bcf4c23b8d8a224d604ace56f048a9f9aa5449e4bf75a1258aaad1edec6c2f21ee55f106ce6a4961199824a3181232b891098689723f83d18476b205ba9813a871d2ffa99feb92ea8bfc5d2b2c165ccd7d0faaeebf8eae3a8ea124d217e0bbfece7d217a7f62054ac595c1e6b9805d163946a70896ff49c5b0074fc812c5d99032dad2d8b1facee3ef90c488c8bcfbf5c3b7429cdad71a1360879fce1d5fa6bd3ce1159f7f8eab8858504e150e4165e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x916) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) unshare(0x48020200) 06:22:03 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 74) 06:22:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 65) 06:22:03 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0x7, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="0900000000000000660001000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2701.082572] FAULT_INJECTION: forcing a failure. [ 2701.082572] name failslab, interval 1, probability 0, space 0, times 0 [ 2701.084287] FAULT_INJECTION: forcing a failure. [ 2701.084287] name failslab, interval 1, probability 0, space 0, times 0 [ 2701.085403] CPU: 0 PID: 18161 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2701.089207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2701.091221] Call Trace: [ 2701.091863] dump_stack+0x107/0x167 [ 2701.092748] should_fail.cold+0x5/0xa [ 2701.093665] ? create_object.isra.0+0x3a/0xa20 [ 2701.094776] should_failslab+0x5/0x20 [ 2701.095706] kmem_cache_alloc+0x5b/0x310 [ 2701.096679] ? mark_held_locks+0x9e/0xe0 [ 2701.097662] create_object.isra.0+0x3a/0xa20 [ 2701.098716] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2701.099962] kmem_cache_alloc+0x159/0x310 [ 2701.100966] xas_alloc+0x336/0x440 [ 2701.101828] xas_create+0x34a/0x10d0 [ 2701.102731] ? kernel_text_address+0xf2/0x120 [ 2701.103827] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2701.105091] xas_store+0x8c/0x1c40 [ 2701.105961] __xa_store+0x164/0x2d0 [ 2701.106841] ? xa_delete_node+0x280/0x280 [ 2701.107856] ? trace_hardirqs_on+0x5b/0x180 [ 2701.108907] xa_store+0x31/0x50 [ 2701.109714] __io_uring_add_tctx_node+0x1cf/0x520 [ 2701.110877] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2701.112135] ? alloc_fd+0x2e7/0x670 [ 2701.113022] io_uring_setup+0x1fbb/0x2980 [ 2701.114029] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2701.115247] ? wait_for_completion_io+0x270/0x270 [ 2701.116442] do_syscall_64+0x33/0x40 [ 2701.117335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2701.118558] RIP: 0033:0x7f8bb9614b19 [ 2701.119471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2701.123906] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2701.125745] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2701.127489] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2701.129212] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2701.130938] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2701.132646] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2701.134406] CPU: 1 PID: 18163 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2701.135804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2701.137435] Call Trace: [ 2701.137965] dump_stack+0x107/0x167 [ 2701.138688] should_fail.cold+0x5/0xa [ 2701.139459] ? create_object.isra.0+0x3a/0xa20 [ 2701.140579] should_failslab+0x5/0x20 [ 2701.141421] kmem_cache_alloc+0x5b/0x310 [ 2701.142395] create_object.isra.0+0x3a/0xa20 [ 2701.143423] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2701.144631] kmem_cache_alloc+0x159/0x310 [ 2701.145651] anon_vma_clone+0xdc/0x590 [ 2701.146645] anon_vma_fork+0x82/0x640 [ 2701.147584] ? __vm_enough_memory+0x184/0x360 [ 2701.148688] copy_process+0x72c9/0x78b0 [ 2701.149633] ? __cleanup_sighand+0xb0/0xb0 [ 2701.150723] ? _copy_from_user+0xfb/0x1b0 [ 2701.151561] kernel_clone+0xe7/0x980 [ 2701.152292] ? __lockdep_reset_lock+0x180/0x180 [ 2701.153215] ? create_io_thread+0xf0/0xf0 [ 2701.154221] ? ksys_write+0x21a/0x260 [ 2701.155180] ? lock_downgrade+0x6d0/0x6d0 [ 2701.156119] __do_sys_clone3+0x1e5/0x320 [ 2701.157088] ? __do_sys_clone+0x110/0x110 [ 2701.158050] ? rcu_read_lock_any_held+0x75/0xa0 [ 2701.159188] ? vfs_write+0x354/0xb10 [ 2701.160085] ? fput_many+0x2f/0x1a0 [ 2701.160904] ? ksys_write+0x1a9/0x260 [ 2701.161671] ? __ia32_sys_read+0xb0/0xb0 [ 2701.162463] do_syscall_64+0x33/0x40 [ 2701.163241] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2701.164245] RIP: 0033:0x7f2b50818b19 [ 2701.164962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2701.166964] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2701.168292] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2701.168312] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2701.168322] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2701.168331] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2701.168341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2701.168351] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2701.193014] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2701.194775] CPU: 1 PID: 18162 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2701.196079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2701.197702] Call Trace: [ 2701.198243] dump_stack+0x107/0x167 [ 2701.198957] sysfs_warn_dup.cold+0x1c/0x29 [ 2701.199791] sysfs_do_create_link_sd+0x122/0x140 [ 2701.200678] sysfs_create_link+0x5f/0xc0 [ 2701.201363] device_add+0x703/0x1c50 [ 2701.201999] ? devlink_add_symlinks+0x970/0x970 [ 2701.202792] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2701.203707] wiphy_register+0x1da6/0x2850 [ 2701.204440] ? wiphy_unregister+0xb90/0xb90 [ 2701.205321] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2701.206227] ieee80211_register_hw+0x23c5/0x38b0 [ 2701.207201] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2701.208154] ? net_generic+0xdb/0x2b0 [ 2701.208867] ? lockdep_init_map_type+0x2c7/0x780 [ 2701.209681] ? memset+0x20/0x50 [ 2701.210242] ? __hrtimer_init+0x12c/0x270 [ 2701.210957] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2701.211818] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2701.212601] ? hwsim_new_radio_nl+0x967/0x1080 [ 2701.213372] ? memcpy+0x39/0x60 [ 2701.213934] hwsim_new_radio_nl+0x991/0x1080 [ 2701.214686] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2701.215585] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2701.216705] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2701.217815] genl_family_rcv_msg_doit+0x22d/0x330 [ 2701.218633] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2701.219758] ? cap_capable+0x1cd/0x230 [ 2701.220425] ? ns_capable+0xe2/0x110 [ 2701.221060] genl_rcv_msg+0x36a/0x5a0 [ 2701.221712] ? genl_get_cmd+0x480/0x480 [ 2701.222389] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2701.223279] ? lock_release+0x680/0x680 [ 2701.223952] ? __lockdep_reset_lock+0x180/0x180 [ 2701.224757] netlink_rcv_skb+0x14b/0x430 [ 2701.225442] ? genl_get_cmd+0x480/0x480 [ 2701.226124] ? netlink_ack+0xab0/0xab0 [ 2701.226798] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2701.227582] ? is_vmalloc_addr+0x7b/0xb0 [ 2701.228268] genl_rcv+0x24/0x40 [ 2701.228821] netlink_unicast+0x54e/0x800 [ 2701.229521] ? netlink_attachskb+0x870/0x870 [ 2701.230277] netlink_sendmsg+0x90f/0xe00 [ 2701.230973] ? netlink_unicast+0x800/0x800 [ 2701.231698] ? netlink_unicast+0x800/0x800 [ 2701.232408] __sock_sendmsg+0x154/0x190 [ 2701.233083] ____sys_sendmsg+0x70d/0x870 [ 2701.233775] ? sock_write_iter+0x3d0/0x3d0 [ 2701.234485] ? do_recvmmsg+0x6d0/0x6d0 [ 2701.235156] ? __lockdep_reset_lock+0x180/0x180 [ 2701.235941] ___sys_sendmsg+0xf3/0x170 [ 2701.236597] ? sendmsg_copy_msghdr+0x160/0x160 [ 2701.237374] ? __fget_files+0x2cf/0x520 [ 2701.238048] ? lock_downgrade+0x6d0/0x6d0 [ 2701.238748] ? __lockdep_reset_lock+0x180/0x180 [ 2701.239535] ? futex_exit_release+0x220/0x220 [ 2701.240302] ? __fget_files+0x2f8/0x520 [ 2701.240983] ? __fget_light+0xea/0x290 [ 2701.241671] __sys_sendmsg+0xe5/0x1b0 [ 2701.242298] ? __sys_sendmsg_sock+0x40/0x40 [ 2701.243035] ? __do_sys_futex+0x2bb/0x480 [ 2701.243762] do_syscall_64+0x33/0x40 [ 2701.244389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2701.245248] RIP: 0033:0x7fc157d92b19 [ 2701.245879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2701.248950] RSP: 002b:00007fc155308188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2701.250227] RAX: ffffffffffffffda RBX: 00007fc157ea5f60 RCX: 00007fc157d92b19 [ 2701.251443] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2701.252643] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2701.253852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2701.255073] R13: 00007fff9c3d972f R14: 00007fc155308300 R15: 0000000000022000 06:22:03 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 75) 06:22:03 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x2000003) syz_io_uring_setup(0x0, 0x0, &(0x7f00002d7000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000000680)=""/174, 0xae}], 0x2) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x7, 0x4, &(0x7f0000000500)=[{&(0x7f0000000140)="40d6bd1ebd8297e236723e60d12e07ca9d17651d43195b841d000f9408d0ac43bb0e3af84f436d366b761cc95f0929d136f07c9dd2415f7b815b9cc1e917a49afe9057426f514b2f6616931aba3b8c24a8f44c3e31b13e375038c09b4cbe55dcaee80df9dce0a59ef494e28cc0b9651c45637ea24d83ff0134b5d1baf9adc20aff9f37e51008c7", 0x87, 0x8}, {&(0x7f00000002c0)="101bae2b0734f729f930f68dc9460eb2bf7c9fb765907f7d9ec2135dbd559ebd7d658fed1bc51d459ffebea833d69fcedbf24e5e00b2a8894cfbb3effa89a94b99cc2bbb9aa96bb967f0cf7016d0779f51a5d4e927b0b28b61c09b84b22155a5e2835859fb750f5fc5e712ba8c2b7ff5243faef6276b21c4a69133d758fa450e47cd01b7a134f120fe227332414cacd93cb4b336c2e195d355", 0x99, 0x6a}, {&(0x7f0000000380)="49955b55e5f941ddda42732cac562792e98fb3ac78414dc0df6965a0778acf34bed6f474ce92b97fe64c10ffee251989ff84c1abb9313fdaf39dd893186d718367d304b2f3a056a418c144d3c0a3cfb5a6f248c4ca1db0aaac7ac2925669a42d61e5235b9b3ce9f0c4d7ceb86935b39bec4329b16a476b0ec78a326a4b77cabd320db850bb042f38a9850d88400b95f99671b9367a28b6842c770e333f993204a39c5c9783031c6ab9178ac4e3e104", 0xaf, 0x1b}, {&(0x7f0000000200)="bd470676617f1ebc7a102c26dc087152d60ca270b4b0ed2da35f60320feaa491f3a3", 0x22, 0x5}], 0x400, &(0x7f0000000580)={[{@dots}, {@fat=@debug}, {@nodots}, {@fat=@discard}], [{@fsname={'fsname', 0x3d, ']'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) [ 2701.383008] FAULT_INJECTION: forcing a failure. [ 2701.383008] name failslab, interval 1, probability 0, space 0, times 0 [ 2701.385026] CPU: 1 PID: 18276 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2701.386205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2701.387646] Call Trace: [ 2701.388101] dump_stack+0x107/0x167 [ 2701.388713] should_fail.cold+0x5/0xa [ 2701.389375] ? xas_alloc+0x336/0x440 [ 2701.390012] should_failslab+0x5/0x20 [ 2701.390656] kmem_cache_alloc+0x5b/0x310 [ 2701.391361] xas_alloc+0x336/0x440 [ 2701.391970] xas_create+0x34a/0x10d0 [ 2701.392621] ? kernel_text_address+0xf2/0x120 [ 2701.393394] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2701.394292] xas_store+0x8c/0x1c40 [ 2701.394919] __xa_store+0x164/0x2d0 [ 2701.395544] ? xa_delete_node+0x280/0x280 [ 2701.396254] ? trace_hardirqs_on+0x5b/0x180 [ 2701.397000] xa_store+0x31/0x50 [ 2701.397571] __io_uring_add_tctx_node+0x1cf/0x520 [ 2701.398392] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2701.399289] ? alloc_fd+0x2e7/0x670 [ 2701.399919] io_uring_setup+0x1fbb/0x2980 [ 2701.400651] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2701.401513] ? wait_for_completion_io+0x270/0x270 [ 2701.402361] do_syscall_64+0x33/0x40 [ 2701.403005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2701.403875] RIP: 0033:0x7f8bb9614b19 [ 2701.404521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2701.407684] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2701.408983] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2701.410210] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2701.411450] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2701.412679] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2701.413906] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2701.474058] FAT-fs (loop5): Unrecognized mount option "fsname=]" or missing value [ 2701.540364] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2701.545542] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2701.546961] CPU: 1 PID: 18162 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2701.548023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2701.549137] Call Trace: [ 2701.549506] dump_stack+0x107/0x167 [ 2701.550006] sysfs_warn_dup.cold+0x1c/0x29 [ 2701.550591] sysfs_do_create_link_sd+0x122/0x140 [ 2701.551252] sysfs_create_link+0x5f/0xc0 [ 2701.551812] device_add+0x703/0x1c50 [ 2701.552331] ? devlink_add_symlinks+0x970/0x970 [ 2701.552977] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2701.553704] wiphy_register+0x1da6/0x2850 [ 2701.554378] ? wiphy_unregister+0xb90/0xb90 [ 2701.555082] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2701.555806] ieee80211_register_hw+0x23c5/0x38b0 [ 2701.556499] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2701.557222] ? net_generic+0xdb/0x2b0 [ 2701.557830] ? lockdep_init_map_type+0x2c7/0x780 [ 2701.558652] ? memset+0x20/0x50 [ 2701.559199] ? __hrtimer_init+0x12c/0x270 [ 2701.559776] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2701.560483] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2701.561119] ? hwsim_new_radio_nl+0x967/0x1080 [ 2701.561746] ? memcpy+0x39/0x60 [ 2701.562302] hwsim_new_radio_nl+0x991/0x1080 [ 2701.562981] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2701.563747] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2701.564649] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2701.565649] genl_family_rcv_msg_doit+0x22d/0x330 [ 2701.566452] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2701.567493] ? cap_capable+0x1cd/0x230 [ 2701.568045] ? ns_capable+0xe2/0x110 [ 2701.568563] genl_rcv_msg+0x36a/0x5a0 [ 2701.569092] ? genl_get_cmd+0x480/0x480 [ 2701.569643] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2701.570504] ? lock_release+0x680/0x680 [ 2701.571050] ? __lockdep_reset_lock+0x180/0x180 [ 2701.571687] netlink_rcv_skb+0x14b/0x430 [ 2701.572235] ? genl_get_cmd+0x480/0x480 [ 2701.572780] ? netlink_ack+0xab0/0xab0 [ 2701.573465] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2701.574191] ? is_vmalloc_addr+0x7b/0xb0 [ 2701.574908] genl_rcv+0x24/0x40 [ 2701.575393] netlink_unicast+0x54e/0x800 [ 2701.575946] ? netlink_attachskb+0x870/0x870 [ 2701.576556] netlink_sendmsg+0x90f/0xe00 [ 2701.577112] ? netlink_unicast+0x800/0x800 [ 2701.577699] ? netlink_unicast+0x800/0x800 [ 2701.578282] __sock_sendmsg+0x154/0x190 [ 2701.578908] ____sys_sendmsg+0x70d/0x870 [ 2701.579561] ? sock_write_iter+0x3d0/0x3d0 [ 2701.580125] ? do_recvmmsg+0x6d0/0x6d0 [ 2701.580660] ? __lockdep_reset_lock+0x180/0x180 [ 2701.581292] ___sys_sendmsg+0xf3/0x170 [ 2701.581822] ? sendmsg_copy_msghdr+0x160/0x160 [ 2701.582442] ? __fget_files+0x2cf/0x520 [ 2701.583003] ? lock_downgrade+0x6d0/0x6d0 [ 2701.583570] ? clockevents_program_event+0x14b/0x360 [ 2701.584257] ? __fget_files+0x2f8/0x520 [ 2701.584802] ? __fget_light+0xea/0x290 [ 2701.585472] __sys_sendmsg+0xe5/0x1b0 [ 2701.586055] ? __sys_sendmsg_sock+0x40/0x40 [ 2701.586725] do_syscall_64+0x33/0x40 [ 2701.587366] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2701.588063] RIP: 0033:0x7fc157d92b19 [ 2701.588593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2701.591232] RSP: 002b:00007fc155308188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2701.592249] RAX: ffffffffffffffda RBX: 00007fc157ea5f60 RCX: 00007fc157d92b19 [ 2701.593288] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2701.594417] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2701.595476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2701.596508] R13: 00007fff9c3d972f R14: 00007fc155308300 R15: 0000000000022000 06:22:20 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x1, 0x0, 0xfffffffffffffffe) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0xa, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x3ffc, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000280), &(0x7f0000000300)=@sha1={0x1, "9f8ce3fd5eba33278ce4ec989be7aeef64c50e03"}, 0x15, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffe9b, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48040}, 0x40) syz_genetlink_get_family_id$ipvs(0x0, r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) lseek(r0, 0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)={0xd8, 0x31, 0x2, 0x70bd25, 0x25dfdbfd, {0x13}, [@typed={0x8, 0x24, 0x0, 0x0, @u32=0x7}, @nested={0x8, 0x5e, 0x0, 0x1, [@typed={0x4, 0xa}]}, @nested={0xb1, 0x45, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @u32=0x100}, @generic="7aac1e1989f7906afc55a88261585b287566fac5163024980d6cf74652ee1488a54c6b11f5eb7bc2e3d1a12866adfb4f9142b49fbd2efafab61df469a962f8ce1ad0380b10612e9f5fbbc4ab6a2492ab21fa23e63e462537639ff3839e87d56752f68e26f67b74e69011a0a6f19fd3855bc648bd445d95c4e644c29ed85c30871223d8a76b4b16d3423d371fb5d882829b7b3adf8ec62bedba77f5b45b", @typed={0x8, 0x29, 0x0, 0x0, @fd=r0}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4020000}, 0x20000000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r3, 0x1, 0x6, @remote}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYBLOB="40f634c43b", @ANYBLOB="2dcadb636a77ae8319be7dd6ffffffffa9864d5901d977663d62153de9fdaea393a769f386f38fdcf7b5cae7ca2d1efcf542964995b504ec193128d1578333cb4d78d81441041bc4cbc14e5e8a000000000000000000000000000000004d9f75cf59c51720a5882fcb00c13208fdb6c9632007848baf07ec157e2e4f0059b6523c0d7d2c9ee577f59b114f8b09a77e3bf786505efba885c2c3dcc3c5ebfaaf700e040000000000000057efd4827d678b4071837d3e65d1580fb13b9e6868a22ceb29d8a1057edd68a5bda5"], 0x100}}, 0x10) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000380)="7346ee6f663c4f4e230051082387a8bd0a5e2ea0006679717cbbeec48d420791b28149fa7ff20e30e40635bf192156e94404301ad8f9d707d2053cb009ce60eed80cb3f9ac6a601a8bbd793ce144f7568ceccc73dde5b816e2484de12b0b8e415c0a819455") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'veth1_to_team\x00'}) 06:22:20 executing program 6: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001540)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6) read(r2, 0x0, 0x2e) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100000000000000000000000000000000000000ffffac141400e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000000000000000cb80000000000000000000000000000000000000000000000000a00000000000000000000000c"], 0xfc}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00') readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f040000000000f1ff005dba00000000001a00", @ANYRES32, @ANYRES64=r3]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYRES64=r4]) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f00000014c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x39325cf2c83b1aff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 06:22:20 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) 06:22:20 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000014c0)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="0900c28ce30000000000002e2f2b8c39378a370f9a7cdac82ecd6872587f1ec4722c000010c81bbd3f388598a8595bb25932bd771f4375c92a15085626360b4dd7db777a02e5b5e06bffdf261ec6b40f691561a39a14e6967cdd0ffc8be59da462efeb410a7e2868af7718b4b39acf95655a4192e05c029d92815e90db58d3fe27ec8b75c34a1a96e21a263f419fec479e2ec231a724a3356a42766fa12824f08183cf30769653512991da2c00ea0873b1fff8bb1f1b9ba9ccdc293eb92e2c7b1391233e7b1b22ab7e30365b6b327e7fee3c46738f866b6219d38f704a25ecd8ec4acf38f92e65c71b5f"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:22:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 66) 06:22:20 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:22:20 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 76) 06:22:20 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000280)=""/113, 0x401}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)="e2e17386592a5667f5cbf9cff176658484ae613f78a4e9523a5a07f2fe7b9b532ad5c692cf0a1f375055b588ec0ae05fb953ed3713d0f2a6fcadaedfc5ed499f629dccd9cac5cc8762a958e6a0e6291ef02c7e44c465da27b22c95648a558404d0", 0x61}}, 0x40) syz_io_uring_setup(0xa92, &(0x7f0000000180)={0x0, 0x5cea, 0x20, 0x1, 0x36e}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) [ 2718.117778] FAULT_INJECTION: forcing a failure. [ 2718.117778] name failslab, interval 1, probability 0, space 0, times 0 [ 2718.120464] CPU: 1 PID: 18297 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2718.122076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2718.123957] Call Trace: [ 2718.124579] dump_stack+0x107/0x167 [ 2718.125414] should_fail.cold+0x5/0xa [ 2718.126302] ? create_object.isra.0+0x3a/0xa20 [ 2718.127351] should_failslab+0x5/0x20 [ 2718.128231] kmem_cache_alloc+0x5b/0x310 [ 2718.129171] ? mark_held_locks+0x9e/0xe0 [ 2718.130111] create_object.isra.0+0x3a/0xa20 [ 2718.131131] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2718.132307] kmem_cache_alloc+0x159/0x310 [ 2718.133272] xas_alloc+0x336/0x440 [ 2718.134105] xas_create+0x34a/0x10d0 [ 2718.135002] ? kernel_text_address+0xf2/0x120 [ 2718.136043] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2718.137258] xas_store+0x8c/0x1c40 [ 2718.138095] __xa_store+0x164/0x2d0 [ 2718.138940] ? xa_delete_node+0x280/0x280 [ 2718.139918] ? trace_hardirqs_on+0x5b/0x180 [ 2718.140920] xa_store+0x31/0x50 [ 2718.141683] __io_uring_add_tctx_node+0x1cf/0x520 [ 2718.142794] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2718.144002] ? alloc_fd+0x2e7/0x670 [ 2718.144856] io_uring_setup+0x1fbb/0x2980 [ 2718.145822] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2718.146994] ? wait_for_completion_io+0x270/0x270 [ 2718.148144] do_syscall_64+0x33/0x40 [ 2718.149003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2718.150186] RIP: 0033:0x7f8bb9614b19 [ 2718.151054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2718.155324] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2718.157097] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2718.158741] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2718.160396] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2718.162039] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2718.163693] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2718.172983] FAULT_INJECTION: forcing a failure. [ 2718.172983] name failslab, interval 1, probability 0, space 0, times 0 [ 2718.175620] CPU: 1 PID: 18306 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2718.177238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2718.179180] Call Trace: [ 2718.179799] dump_stack+0x107/0x167 [ 2718.180656] should_fail.cold+0x5/0xa [ 2718.181560] ? create_object.isra.0+0x3a/0xa20 [ 2718.182629] should_failslab+0x5/0x20 [ 2718.183523] kmem_cache_alloc+0x5b/0x310 [ 2718.184480] create_object.isra.0+0x3a/0xa20 [ 2718.185500] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2718.186688] kmem_cache_alloc+0x159/0x310 [ 2718.187673] anon_vma_fork+0x1ff/0x640 [ 2718.188588] copy_process+0x72c9/0x78b0 [ 2718.189558] ? __cleanup_sighand+0xb0/0xb0 [ 2718.190569] ? _copy_from_user+0xfb/0x1b0 [ 2718.191551] kernel_clone+0xe7/0x980 [ 2718.192419] ? __lockdep_reset_lock+0x180/0x180 [ 2718.193502] ? create_io_thread+0xf0/0xf0 [ 2718.194486] ? ksys_write+0x21a/0x260 [ 2718.195386] ? lock_downgrade+0x6d0/0x6d0 [ 2718.196358] __do_sys_clone3+0x1e5/0x320 [ 2718.197303] ? __do_sys_clone+0x110/0x110 [ 2718.198290] ? rcu_read_lock_any_held+0x75/0xa0 [ 2718.199376] ? vfs_write+0x354/0xb10 [ 2718.200244] ? fput_many+0x2f/0x1a0 [ 2718.201100] ? ksys_write+0x1a9/0x260 [ 2718.201988] ? __ia32_sys_read+0xb0/0xb0 [ 2718.202947] do_syscall_64+0x33/0x40 [ 2718.203822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2718.205017] RIP: 0033:0x7f2b50818b19 [ 2718.205882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2718.210174] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2718.211957] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2718.213622] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2718.215293] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2718.216958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2718.218623] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2718.225067] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 06:22:20 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x521000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000040)={{r1}, "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"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/186, 0xba}, {&(0x7f00000010c0)=""/20, 0x14}, {&(0x7f0000001280)=""/191, 0xbf}, {&(0x7f0000001400)=""/82, 0x52}], 0x4, 0x4f, 0x987) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="61e3d39ba48803000000c444d666eafa2f0a51bc96dccbd4e00a4eee034479cb1c9b531dcaa5867966fcc1c412024509a6cfed3293a6badc8213e59f5e15190e1cf8c2c92a8bd23e2899385a83116aa6b60c0737ba9e790000000000"]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(r3, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r6, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRESDEC=r6, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r5) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000001100)={'macvtap0\x00'}) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) connect$802154_dgram(r7, &(0x7f0000001040)={0x24, @long={0x3, 0x1}}, 0x14) [ 2718.367474] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2718.380609] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2718.382531] CPU: 1 PID: 18320 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2718.383930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2718.385579] Call Trace: [ 2718.386108] dump_stack+0x107/0x167 [ 2718.386835] sysfs_warn_dup.cold+0x1c/0x29 [ 2718.387689] sysfs_do_create_link_sd+0x122/0x140 [ 2718.388618] sysfs_create_link+0x5f/0xc0 [ 2718.389431] device_add+0x703/0x1c50 [ 2718.390164] ? devlink_add_symlinks+0x970/0x970 [ 2718.391096] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2718.392130] wiphy_register+0x1da6/0x2850 [ 2718.392968] ? wiphy_unregister+0xb90/0xb90 [ 2718.393849] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2718.394908] ieee80211_register_hw+0x23c5/0x38b0 [ 2718.395884] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2718.396834] ? net_generic+0xdb/0x2b0 [ 2718.397586] ? lockdep_init_map_type+0x2c7/0x780 [ 2718.398530] ? memset+0x20/0x50 [ 2718.399189] ? __hrtimer_init+0x12c/0x270 [ 2718.400021] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2718.401018] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2718.401945] ? hwsim_new_radio_nl+0x967/0x1080 [ 2718.402846] ? memcpy+0x39/0x60 [ 2718.403521] hwsim_new_radio_nl+0x991/0x1080 [ 2718.404400] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2718.405471] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2718.406818] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2718.408167] genl_family_rcv_msg_doit+0x22d/0x330 [ 2718.409158] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2718.410504] ? cap_capable+0x1cd/0x230 [ 2718.411321] ? ns_capable+0xe2/0x110 [ 2718.412085] genl_rcv_msg+0x36a/0x5a0 [ 2718.412871] ? genl_get_cmd+0x480/0x480 [ 2718.413685] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2718.414743] ? lock_release+0x680/0x680 [ 2718.415561] ? __lockdep_reset_lock+0x180/0x180 [ 2718.416520] netlink_rcv_skb+0x14b/0x430 [ 2718.417348] ? genl_get_cmd+0x480/0x480 [ 2718.418160] ? netlink_ack+0xab0/0xab0 [ 2718.418967] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2718.419908] ? is_vmalloc_addr+0x7b/0xb0 [ 2718.420741] genl_rcv+0x24/0x40 [ 2718.421416] netlink_unicast+0x54e/0x800 [ 2718.422251] ? netlink_attachskb+0x870/0x870 [ 2718.423174] netlink_sendmsg+0x90f/0xe00 [ 2718.424012] ? netlink_unicast+0x800/0x800 [ 2718.424895] ? netlink_unicast+0x800/0x800 [ 2718.425761] __sock_sendmsg+0x154/0x190 [ 2718.426576] ____sys_sendmsg+0x70d/0x870 [ 2718.427419] ? sock_write_iter+0x3d0/0x3d0 [ 2718.428286] ? do_recvmmsg+0x6d0/0x6d0 [ 2718.429082] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2718.430163] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2718.431281] ? __lockdep_reset_lock+0x180/0x180 [ 2718.432240] ___sys_sendmsg+0xf3/0x170 [ 2718.433040] ? sendmsg_copy_msghdr+0x160/0x160 [ 2718.433983] ? __fget_files+0x2cf/0x520 [ 2718.434797] ? lock_downgrade+0x6d0/0x6d0 [ 2718.435666] ? clockevents_program_event+0x14b/0x360 [ 2718.436715] ? __fget_files+0x2f8/0x520 [ 2718.437539] ? __fget_light+0xea/0x290 [ 2718.438338] __sys_sendmsg+0xe5/0x1b0 [ 2718.439123] ? __sys_sendmsg_sock+0x40/0x40 [ 2718.440005] do_syscall_64+0x33/0x40 [ 2718.440739] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2718.441754] RIP: 0033:0x7f277f764b19 [ 2718.442489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2718.446098] RSP: 002b:00007f277ccda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2718.447623] RAX: ffffffffffffffda RBX: 00007f277f877f60 RCX: 00007f277f764b19 [ 2718.449041] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 2718.450460] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2718.451900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2718.453325] R13: 00007fff5bc6ce3f R14: 00007f277ccda300 R15: 0000000000022000 06:22:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 67) [ 2718.496362] FAULT_INJECTION: forcing a failure. [ 2718.496362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2718.498783] CPU: 1 PID: 18322 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2718.500163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2718.501795] Call Trace: [ 2718.502327] dump_stack+0x107/0x167 [ 2718.503064] should_fail.cold+0x5/0xa [ 2718.503839] __alloc_pages_nodemask+0x182/0x600 [ 2718.504766] ? __lockdep_reset_lock+0x180/0x180 [ 2718.505695] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2718.506902] ? copy_page_range+0x28e1/0x3810 [ 2718.507796] alloc_pages_current+0x187/0x280 [ 2718.508662] get_zeroed_page+0x14/0xb0 [ 2718.509464] __pud_alloc+0x33/0x270 [ 2718.510228] copy_page_range+0x2ca1/0x3810 [ 2718.511111] ? perf_trace_lock+0xac/0x490 [ 2718.511959] ? lock_chain_count+0x20/0x20 [ 2718.512828] ? lock_downgrade+0x6d0/0x6d0 [ 2718.513695] ? up_write+0x191/0x550 [ 2718.514440] ? vm_iomap_memory+0x190/0x190 [ 2718.515313] ? downgrade_write+0x3a0/0x3a0 [ 2718.516185] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2718.517296] ? __vma_link_rb+0x540/0x700 [ 2718.518137] copy_process+0x7654/0x78b0 [ 2718.518999] ? __cleanup_sighand+0xb0/0xb0 [ 2718.519889] ? _copy_from_user+0xfb/0x1b0 [ 2718.520742] kernel_clone+0xe7/0x980 [ 2718.521502] ? __lockdep_reset_lock+0x180/0x180 [ 2718.522456] ? create_io_thread+0xf0/0xf0 [ 2718.523331] ? ksys_write+0x21a/0x260 [ 2718.524112] ? lock_downgrade+0x6d0/0x6d0 [ 2718.524962] __do_sys_clone3+0x1e5/0x320 [ 2718.525793] ? __do_sys_clone+0x110/0x110 [ 2718.526659] ? rcu_read_lock_any_held+0x75/0xa0 [ 2718.527651] ? vfs_write+0x354/0xb10 [ 2718.528416] ? fput_many+0x2f/0x1a0 [ 2718.529161] ? ksys_write+0x1a9/0x260 [ 2718.529944] ? __ia32_sys_read+0xb0/0xb0 [ 2718.530787] do_syscall_64+0x33/0x40 [ 2718.531559] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2718.532610] RIP: 0033:0x7f2b50818b19 [ 2718.533373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2718.537149] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2718.538706] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2718.540185] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2718.541653] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2718.543131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2718.544594] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2718.546670] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2718.555314] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2718.561875] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2718.564054] CPU: 0 PID: 18323 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2718.565751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2718.567741] Call Trace: [ 2718.568383] dump_stack+0x107/0x167 [ 2718.569261] sysfs_warn_dup.cold+0x1c/0x29 [ 2718.570304] sysfs_do_create_link_sd+0x122/0x140 [ 2718.571457] sysfs_create_link+0x5f/0xc0 [ 2718.572449] device_add+0x703/0x1c50 [ 2718.573354] ? devlink_add_symlinks+0x970/0x970 [ 2718.574492] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2718.575767] wiphy_register+0x1da6/0x2850 [ 2718.576790] ? wiphy_unregister+0xb90/0xb90 [ 2718.577873] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2718.579179] ieee80211_register_hw+0x23c5/0x38b0 [ 2718.580343] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2718.581511] ? net_generic+0xdb/0x2b0 [ 2718.582440] ? lockdep_init_map_type+0x2c7/0x780 [ 2718.583591] ? memset+0x20/0x50 [ 2718.584395] ? __hrtimer_init+0x12c/0x270 [ 2718.585394] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2718.586631] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2718.587778] ? hwsim_new_radio_nl+0x967/0x1080 [ 2718.588869] ? memcpy+0x39/0x60 [ 2718.589674] hwsim_new_radio_nl+0x991/0x1080 [ 2718.590724] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2718.592045] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2718.593655] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2718.595276] genl_family_rcv_msg_doit+0x22d/0x330 [ 2718.596452] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2718.598043] ? cap_capable+0x1cd/0x230 [ 2718.599020] ? ns_capable+0xe2/0x110 [ 2718.599942] genl_rcv_msg+0x36a/0x5a0 [ 2718.600878] ? genl_get_cmd+0x480/0x480 [ 2718.601854] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2718.603128] ? lock_release+0x680/0x680 [ 2718.604103] ? __lockdep_reset_lock+0x180/0x180 [ 2718.605237] netlink_rcv_skb+0x14b/0x430 [ 2718.606232] ? genl_get_cmd+0x480/0x480 [ 2718.607207] ? netlink_ack+0xab0/0xab0 [ 2718.608165] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2718.609250] ? is_vmalloc_addr+0x7b/0xb0 [ 2718.610238] genl_rcv+0x24/0x40 [ 2718.611042] netlink_unicast+0x54e/0x800 [ 2718.612059] ? netlink_attachskb+0x870/0x870 [ 2718.613135] netlink_sendmsg+0x90f/0xe00 [ 2718.614135] ? netlink_unicast+0x800/0x800 [ 2718.615188] ? netlink_unicast+0x800/0x800 [ 2718.616234] __sock_sendmsg+0x154/0x190 [ 2718.617218] ____sys_sendmsg+0x70d/0x870 [ 2718.618225] ? sock_write_iter+0x3d0/0x3d0 [ 2718.619273] ? do_recvmmsg+0x6d0/0x6d0 [ 2718.620237] ? lock_chain_count+0x20/0x20 [ 2718.621266] ? __lockdep_reset_lock+0x180/0x180 [ 2718.622421] ___sys_sendmsg+0xf3/0x170 [ 2718.623394] ? sendmsg_copy_msghdr+0x160/0x160 [ 2718.624527] ? __fget_files+0x2cf/0x520 [ 2718.625510] ? lock_downgrade+0x6d0/0x6d0 [ 2718.626534] ? __lock_acquire+0x1657/0x5b00 [ 2718.627624] ? __fget_files+0x2f8/0x520 [ 2718.628618] ? __fget_light+0xea/0x290 [ 2718.629590] __sys_sendmsg+0xe5/0x1b0 [ 2718.630531] ? __sys_sendmsg_sock+0x40/0x40 [ 2718.631604] ? kfree+0x1ab/0x340 [ 2718.632440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2718.633758] do_syscall_64+0x33/0x40 [ 2718.634678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2718.635947] RIP: 0033:0x7f277f764b19 [ 2718.636865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2718.641405] RSP: 002b:00007f277ccb9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2718.643297] RAX: ffffffffffffffda RBX: 00007f277f878020 RCX: 00007f277f764b19 [ 2718.645061] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 2718.646829] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2718.648600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2718.650365] R13: 00007fff5bc6ce3f R14: 00007f277ccb9300 R15: 0000000000022000 [ 2718.958820] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2718.963764] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2718.965851] CPU: 0 PID: 18327 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2718.967531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2718.969524] Call Trace: [ 2718.970165] dump_stack+0x107/0x167 [ 2718.971072] sysfs_warn_dup.cold+0x1c/0x29 [ 2718.972107] sysfs_do_create_link_sd+0x122/0x140 [ 2718.973255] sysfs_create_link+0x5f/0xc0 [ 2718.974265] device_add+0x703/0x1c50 [ 2718.975185] ? devlink_add_symlinks+0x970/0x970 [ 2718.976323] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2718.977593] wiphy_register+0x1da6/0x2850 [ 2718.978619] ? wiphy_unregister+0xb90/0xb90 [ 2718.979695] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2718.980999] ieee80211_register_hw+0x23c5/0x38b0 [ 2718.982173] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2718.983350] ? net_generic+0xdb/0x2b0 [ 2718.984286] ? lockdep_init_map_type+0x2c7/0x780 [ 2718.985442] ? memset+0x20/0x50 [ 2718.986250] ? __hrtimer_init+0x12c/0x270 [ 2718.987284] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2718.988523] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2718.989653] ? hwsim_new_radio_nl+0x967/0x1080 [ 2718.990776] ? memcpy+0x39/0x60 [ 2718.991595] hwsim_new_radio_nl+0x991/0x1080 [ 2718.992671] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2718.993949] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2718.995553] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2718.997113] genl_family_rcv_msg_doit+0x22d/0x330 [ 2718.998294] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2718.999906] ? cap_capable+0x1cd/0x230 [ 2719.000880] ? ns_capable+0xe2/0x110 [ 2719.001798] genl_rcv_msg+0x36a/0x5a0 [ 2719.002738] ? genl_get_cmd+0x480/0x480 [ 2719.003721] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2719.004994] ? lock_release+0x680/0x680 [ 2719.005965] ? __lockdep_reset_lock+0x180/0x180 [ 2719.007109] netlink_rcv_skb+0x14b/0x430 [ 2719.008100] ? genl_get_cmd+0x480/0x480 [ 2719.009077] ? netlink_ack+0xab0/0xab0 [ 2719.010032] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2719.011143] ? is_vmalloc_addr+0x7b/0xb0 [ 2719.012136] genl_rcv+0x24/0x40 [ 2719.012941] netlink_unicast+0x54e/0x800 [ 2719.013942] ? netlink_attachskb+0x870/0x870 [ 2719.015049] netlink_sendmsg+0x90f/0xe00 [ 2719.016055] ? netlink_unicast+0x800/0x800 [ 2719.017086] ? netlink_unicast+0x800/0x800 [ 2719.018115] __sock_sendmsg+0x154/0x190 [ 2719.019094] ____sys_sendmsg+0x70d/0x870 [ 2719.020092] ? sock_write_iter+0x3d0/0x3d0 [ 2719.021121] ? do_recvmmsg+0x6d0/0x6d0 [ 2719.022078] ? __lockdep_reset_lock+0x180/0x180 [ 2719.023230] ___sys_sendmsg+0xf3/0x170 [ 2719.024178] ? sendmsg_copy_msghdr+0x160/0x160 [ 2719.025297] ? __fget_files+0x2cf/0x520 [ 2719.026258] ? lock_downgrade+0x6d0/0x6d0 [ 2719.027266] ? __lockdep_reset_lock+0x180/0x180 [ 2719.028395] ? futex_exit_release+0x220/0x220 [ 2719.029490] ? __fget_files+0x2f8/0x520 [ 2719.030472] ? __fget_light+0xea/0x290 [ 2719.031439] __sys_sendmsg+0xe5/0x1b0 [ 2719.032373] ? __sys_sendmsg_sock+0x40/0x40 [ 2719.033421] ? __do_sys_futex+0x2bb/0x480 [ 2719.034456] do_syscall_64+0x33/0x40 [ 2719.035380] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2719.036628] RIP: 0033:0x7f277f764b19 [ 2719.037535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2719.041970] RSP: 002b:00007f277cc98188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2719.043811] RAX: ffffffffffffffda RBX: 00007f277f8780e0 RCX: 00007f277f764b19 [ 2719.045518] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 2719.047232] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2719.048953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2719.050663] R13: 00007fff5bc6ce3f R14: 00007f277cc98300 R15: 0000000000022000 [ 2719.068578] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2719.074763] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2719.076800] CPU: 0 PID: 18320 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2719.078478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2719.080481] Call Trace: [ 2719.081118] dump_stack+0x107/0x167 [ 2719.082000] sysfs_warn_dup.cold+0x1c/0x29 [ 2719.083027] sysfs_do_create_link_sd+0x122/0x140 [ 2719.084180] sysfs_create_link+0x5f/0xc0 [ 2719.085172] device_add+0x703/0x1c50 [ 2719.086075] ? devlink_add_symlinks+0x970/0x970 [ 2719.087217] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2719.088487] wiphy_register+0x1da6/0x2850 [ 2719.089508] ? wiphy_unregister+0xb90/0xb90 [ 2719.090560] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2719.091842] ieee80211_register_hw+0x23c5/0x38b0 [ 2719.093004] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2719.094159] ? net_generic+0xdb/0x2b0 [ 2719.095104] ? lockdep_init_map_type+0x2c7/0x780 [ 2719.096251] ? memset+0x20/0x50 [ 2719.097065] ? __hrtimer_init+0x12c/0x270 [ 2719.098070] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2719.099303] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2719.100429] ? hwsim_new_radio_nl+0x967/0x1080 [ 2719.101537] ? memcpy+0x39/0x60 [ 2719.102334] hwsim_new_radio_nl+0x991/0x1080 [ 2719.103412] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2719.104662] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2719.106257] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2719.107829] genl_family_rcv_msg_doit+0x22d/0x330 [ 2719.108988] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2719.110565] ? cap_capable+0x1cd/0x230 [ 2719.111525] ? ns_capable+0xe2/0x110 [ 2719.112443] genl_rcv_msg+0x36a/0x5a0 [ 2719.113361] ? genl_get_cmd+0x480/0x480 [ 2719.114329] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2719.115581] ? lock_release+0x680/0x680 [ 2719.116531] ? __lockdep_reset_lock+0x180/0x180 [ 2719.117657] netlink_rcv_skb+0x14b/0x430 [ 2719.118627] ? genl_get_cmd+0x480/0x480 [ 2719.119588] ? netlink_ack+0xab0/0xab0 [ 2719.120533] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2719.121629] ? is_vmalloc_addr+0x7b/0xb0 [ 2719.122607] genl_rcv+0x24/0x40 [ 2719.123410] netlink_unicast+0x54e/0x800 [ 2719.124395] ? netlink_attachskb+0x870/0x870 [ 2719.125455] netlink_sendmsg+0x90f/0xe00 [ 2719.126437] ? netlink_unicast+0x800/0x800 [ 2719.127479] ? netlink_unicast+0x800/0x800 [ 2719.128511] __sock_sendmsg+0x154/0x190 [ 2719.129473] ____sys_sendmsg+0x70d/0x870 [ 2719.130475] ? sock_write_iter+0x3d0/0x3d0 [ 2719.131511] ? do_recvmmsg+0x6d0/0x6d0 [ 2719.132477] ? __lockdep_reset_lock+0x180/0x180 [ 2719.133623] ___sys_sendmsg+0xf3/0x170 [ 2719.134577] ? sendmsg_copy_msghdr+0x160/0x160 [ 2719.135711] ? __fget_files+0x2cf/0x520 [ 2719.136678] ? lock_downgrade+0x6d0/0x6d0 [ 2719.137690] ? futex_exit_release+0x220/0x220 [ 2719.138779] ? lock_acquire+0x197/0x470 [ 2719.139751] ? find_held_lock+0x2c/0x110 [ 2719.140748] ? __fget_files+0x2f8/0x520 [ 2719.141729] ? __fget_light+0xea/0x290 [ 2719.142688] __sys_sendmsg+0xe5/0x1b0 [ 2719.143630] ? __sys_sendmsg_sock+0x40/0x40 [ 2719.144678] ? __do_sys_futex+0x2bb/0x480 [ 2719.145719] do_syscall_64+0x33/0x40 [ 2719.146628] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2719.147885] RIP: 0033:0x7f277f764b19 [ 2719.148793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2719.153273] RSP: 002b:00007f277ccda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2719.155138] RAX: ffffffffffffffda RBX: 00007f277f877f60 RCX: 00007f277f764b19 [ 2719.156874] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 2719.158616] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2719.160365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2719.162107] R13: 00007fff5bc6ce3f R14: 00007f277ccda300 R15: 0000000000022000 06:22:36 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 77) 06:22:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:22:36 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000010000106900b459d03d4093e4dd75f145dde6d00000000000000009600000900"], 0x24}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="95b50000018fd33a76f1d2328800000018000000", @ANYRES32=r0, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594af05d2bcaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90f6de5877ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a5f2df0884ac7b2d8cf48af5dc01fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c80f01000eba254f7d13aa0b68306d66d92477fe946e898db0c1"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) openat(r3, &(0x7f0000000400)='./file1\x00', 0x0, 0x114) faccessat(r1, &(0x7f0000000000)='./file1\x00', 0xb0) read(r2, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0xffff57e5, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000300)=0x8) 06:22:36 executing program 5: pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000011c0)={{{@in6=@remote, @in6=@private0}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f00000012c0)=0xe8) syz_emit_ethernet(0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000f8ffffffffff86dd6000470000093a00fe800000000000000000000000000000ff0200000000000000000000000000018000907800000000c4"], 0x0) syz_emit_ethernet(0x51, &(0x7f0000001300)=ANY=[@ANYBLOB="aaaaaaaaaace651faaaaaaaaaaaa81004d0088470000010000000000424ed64d392a2b413784f86df1c8c1eb837336f55ef7c08b11a799c892cf3a30aca75cb0b58e4b63e572d21e686f844a70fa997444c68f"], &(0x7f0000000040)={0x0, 0x1, [0xd53, 0x6bf, 0xc, 0x1d]}) syz_emit_ethernet(0x10b, &(0x7f0000001780)=ANY=[@ANYBLOB="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"/424], &(0x7f0000001700)={0x1, 0x3, [0xce5, 0x328, 0xdf1, 0x8fe]}) syz_emit_ethernet(0x1027, &(0x7f00000000c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @val={@val={0x9100, 0x1, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x1ff}, {0x8, 0x0, 0x1}], @llc={@snap={0x0, 0x0, "b82d", "c78de1", 0x10, "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"}}}}}}, &(0x7f0000000000)={0x0, 0x4, [0x6a5, 0x75, 0x745, 0x51f]}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(r2, r3) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000001580)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2404004}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0xa4, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x18, 0x17, [0x4, 0x3a, 0x2, 0xfaf2, 0x7f]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xe4f}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x9]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001380)={{{@in=@dev, @in6}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001100)=0xe8) 06:22:36 executing program 6: io_setup(0x5, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000040)=0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/181, 0xb5}, {&(0x7f00000001c0)=""/113, 0x71}], 0x2, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x10000) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(r2, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r4, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r6, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) [ 2734.436634] FAULT_INJECTION: forcing a failure. r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(r8, r9) io_submit(r0, 0x6, &(0x7f0000000a00)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x401, r1, &(0x7f0000000400)="b3ed12eb63462d8e8489dcf2dfdc87cb6ff9ef1b296868f90363c861eeebd4f1d5d16f608e69f9c38a6af3ae45fbce13a2dd93c59e71ed", 0x37, 0x9, 0x0, 0x2, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x88, r4, &(0x7f0000000480)="9d490774d7bc35e6ff99712b262f3bf08ff7cc815c4fe47c04992bb057fe4d4ffe6c0c66c0203e0fc78c4c9882639fd7d3b5e3d1b965f85f4aa1e293cc13a3713bcc2e89b6eca014674f43c5086e05a22a1fd51594c48d32098973df0fda8cc7ff169d7e69c0baf3246d0c9e2781791bbc44a04652e5d8ebfcea17c8c1bf47cca680144cbcbe971fb2d5bfdaa172a54a75aafbe4c53d702980852c4dbf6fc2293724dff24530ffc3923fac141c6e7f3f4f6407c4bec968c7d02da03dd614b97c9388b763de0ab119049951e9d2489a", 0xcf, 0x1, 0x0, 0x0, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0xfff, r6, &(0x7f0000000600)="cf0e3d66380db65210039215c60d8d91d2d7e15e403cc9803f6de017500259a84a63c0803311c092c82b405767dff9f7b2030b4557f2f1ad27337e57890b059bfe85f1c14858176b487a3136bba79376b177153dd039358e43b2e5de454da979c798790493d1813770098ad977c1469a2a3f0511f3e3145d546f48d853296d3884771b8603adf839d4", 0x89, 0x622c, 0x0, 0x2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x3f, r7, &(0x7f0000000740)="9f2bdd84571f6e2dcb3f63f932cf693740810d69d7595306114fe6dcad88a57b36f54ccb", 0x24, 0x8, 0x0, 0x2, r8}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0xff, 0xffffffffffffffff, &(0x7f00000007c0)="478fcdca38053aaac02fc77e77bde3aa09bf78ca1516d4c26b29bffa78351966a9ab3a2532c1367f77cbc0f6fd401ae4eea9772f0f214afc7bef7c69c19ebe233e097270f14934c73cf20cb00923531389873167e542607b26aff69c49ab0251afe7d780aa407a6972b0f9b37fc40efc3c730affd3a12f2c4ab32b0aa201c8966ac06a8032f98ed87af76fbed87eec24f036487f4295430fd856b96a602d4a196f84738020a56854945b3f85df2ff04e66b0a11f541a4602f408f72fe3b3b5", 0xbf, 0x9, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f00000008c0)="7288b7c21fdb004f1849cd80fac4dac371664218c94153627c239441a06359acd688f50a6df1532e70f7d4c6144172b0924247b29f68de75d5e86244f85f808a45103efba264da87dce4c896534385f1ae534898126fddd1de17b9f9cca70db582bd2962e655e52789a77c659543abd2b5077d108ea7429434e760bcedb53c9999270ee554b5162517feb150d99ce03e8e95708f02036506832daa6de4c9179b80e55211ca5e7539a7554fe9ba415eee95feac34c2bc0019e76517cc5722a2e53573d97eb26e5a242b819fe9320b475048c72084935e43b74153969811f98635a83f922c3ea6dd7bab047cd753f1dac5019fdadeee28", 0xf6, 0x5, 0x0, 0x2}]) 06:22:36 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000400)=0x40000000000f, 0x8, 0x3) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x400, 0x100, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f0000000140), 0xf5a, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:22:36 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 68) [ 2734.436634] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2734.439104] CPU: 1 PID: 18339 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2734.440284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2734.441676] Call Trace: [ 2734.442130] dump_stack+0x107/0x167 [ 2734.442755] should_fail.cold+0x5/0xa [ 2734.443416] __alloc_pages_nodemask+0x182/0x600 [ 2734.444215] ? lock_acquire+0x197/0x470 [ 2734.444892] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2734.445909] ? lock_downgrade+0x6d0/0x6d0 [ 2734.446610] ? do_raw_spin_lock+0x121/0x260 [ 2734.447365] alloc_pages_current+0x187/0x280 [ 2734.448290] __pmd_alloc+0x37/0x5e0 [ 2734.449037] copy_page_range+0x2bd8/0x3810 [ 2734.449733] ? perf_trace_lock+0xac/0x490 [ 2734.450437] ? lock_chain_count+0x20/0x20 [ 2734.451179] ? up_write+0x191/0x550 [ 2734.451781] ? vm_iomap_memory+0x190/0x190 [ 2734.452502] ? downgrade_write+0x3a0/0x3a0 [ 2734.453202] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2734.454135] ? __vma_link_rb+0x540/0x700 [ 2734.454833] copy_process+0x7654/0x78b0 [ 2734.455566] ? __cleanup_sighand+0xb0/0xb0 [ 2734.456420] ? _copy_from_user+0xfb/0x1b0 [ 2734.457291] kernel_clone+0xe7/0x980 [ 2734.458044] ? __lockdep_reset_lock+0x180/0x180 [ 2734.458818] ? create_io_thread+0xf0/0xf0 [ 2734.459595] ? ksys_write+0x21a/0x260 [ 2734.460358] ? lock_downgrade+0x6d0/0x6d0 [ 2734.461140] __do_sys_clone3+0x1e5/0x320 [ 2734.461850] ? __do_sys_clone+0x110/0x110 [ 2734.462653] ? rcu_read_lock_any_held+0x75/0xa0 [ 2734.463664] ? vfs_write+0x354/0xb10 [ 2734.464294] ? fput_many+0x2f/0x1a0 [ 2734.464836] ? ksys_write+0x1a9/0x260 [ 2734.465370] ? __ia32_sys_read+0xb0/0xb0 [ 2734.465956] do_syscall_64+0x33/0x40 [ 2734.466607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2734.467492] RIP: 0033:0x7f2b50818b19 [ 2734.468014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2734.470854] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2734.471927] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2734.472931] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2734.473929] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2734.474939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2734.475945] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:22:36 executing program 3: unshare(0x28020600) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 2734.487832] FAULT_INJECTION: forcing a failure. [ 2734.487832] name failslab, interval 1, probability 0, space 0, times 0 [ 2734.489422] CPU: 1 PID: 18341 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2734.490379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2734.491556] Call Trace: [ 2734.491929] dump_stack+0x107/0x167 [ 2734.492449] should_fail.cold+0x5/0xa [ 2734.492990] ? create_object.isra.0+0x3a/0xa20 [ 2734.493633] should_failslab+0x5/0x20 [ 2734.494177] kmem_cache_alloc+0x5b/0x310 [ 2734.494755] ? mark_held_locks+0x9e/0xe0 [ 2734.495343] create_object.isra.0+0x3a/0xa20 [ 2734.495954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2734.496670] kmem_cache_alloc+0x159/0x310 [ 2734.497258] xas_alloc+0x336/0x440 [ 2734.497760] xas_create+0x34a/0x10d0 [ 2734.498290] ? kernel_text_address+0xf2/0x120 [ 2734.498940] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2734.499678] xas_store+0x8c/0x1c40 [ 2734.500192] __xa_store+0x164/0x2d0 [ 2734.500703] ? xa_delete_node+0x280/0x280 [ 2734.501292] ? trace_hardirqs_on+0x5b/0x180 [ 2734.501907] xa_store+0x31/0x50 [ 2734.502376] __io_uring_add_tctx_node+0x1cf/0x520 [ 2734.503057] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2734.503802] ? alloc_fd+0x2e7/0x670 [ 2734.504321] io_uring_setup+0x1fbb/0x2980 [ 2734.504906] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2734.505619] ? wait_for_completion_io+0x270/0x270 [ 2734.506317] do_syscall_64+0x33/0x40 [ 2734.506842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2734.507567] RIP: 0033:0x7f8bb9614b19 [ 2734.508092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2734.510689] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2734.511775] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2734.512790] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2734.513795] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2734.514802] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2734.515823] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2734.544071] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2734.555764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2734.566079] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2734.569579] CPU: 0 PID: 18348 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2734.571167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2734.573064] Call Trace: [ 2734.573680] dump_stack+0x107/0x167 [ 2734.574519] sysfs_warn_dup.cold+0x1c/0x29 [ 2734.575499] sysfs_do_create_link_sd+0x122/0x140 [ 2734.576590] sysfs_create_link+0x5f/0xc0 [ 2734.577527] device_add+0x703/0x1c50 [ 2734.578372] ? devlink_add_symlinks+0x970/0x970 [ 2734.579422] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2734.580615] wiphy_register+0x1da6/0x2850 [ 2734.581555] ? wiphy_unregister+0xb90/0xb90 [ 2734.582549] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2734.583781] ieee80211_register_hw+0x23c5/0x38b0 [ 2734.584879] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2734.585976] ? net_generic+0xdb/0x2b0 [ 2734.586838] ? lockdep_init_map_type+0x2c7/0x780 [ 2734.587933] ? memset+0x20/0x50 [ 2734.588681] ? __hrtimer_init+0x12c/0x270 [ 2734.589624] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2734.590787] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2734.591851] ? hwsim_new_radio_nl+0x967/0x1080 [ 2734.592886] ? memcpy+0x39/0x60 [ 2734.593664] hwsim_new_radio_nl+0x991/0x1080 [ 2734.594667] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2734.595864] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2734.597362] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2734.598844] genl_family_rcv_msg_doit+0x22d/0x330 [ 2734.599949] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2734.601431] ? cap_capable+0x1cd/0x230 [ 2734.602325] ? ns_capable+0xe2/0x110 [ 2734.603181] genl_rcv_msg+0x36a/0x5a0 [ 2734.604043] ? genl_get_cmd+0x480/0x480 [ 2734.604951] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2734.606106] ? lock_release+0x680/0x680 [ 2734.607009] ? __lockdep_reset_lock+0x180/0x180 [ 2734.608079] netlink_rcv_skb+0x14b/0x430 [ 2734.609003] ? genl_get_cmd+0x480/0x480 [ 2734.609908] ? netlink_ack+0xab0/0xab0 [ 2734.610803] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2734.611848] ? is_vmalloc_addr+0x7b/0xb0 [ 2734.612781] genl_rcv+0x24/0x40 [ 2734.613524] netlink_unicast+0x54e/0x800 [ 2734.614454] ? netlink_attachskb+0x870/0x870 [ 2734.615481] netlink_sendmsg+0x90f/0xe00 [ 2734.616414] ? netlink_unicast+0x800/0x800 [ 2734.617398] ? netlink_unicast+0x800/0x800 [ 2734.618380] __sock_sendmsg+0x154/0x190 [ 2734.619294] ____sys_sendmsg+0x70d/0x870 [ 2734.620229] ? sock_write_iter+0x3d0/0x3d0 [ 2734.621195] ? do_recvmmsg+0x6d0/0x6d0 [ 2734.622093] ? __lockdep_reset_lock+0x180/0x180 [ 2734.623167] ___sys_sendmsg+0xf3/0x170 [ 2734.624051] ? sendmsg_copy_msghdr+0x160/0x160 [ 2734.625110] ? __fget_files+0x2cf/0x520 [ 2734.626024] ? lock_downgrade+0x6d0/0x6d0 [ 2734.626962] ? __lockdep_reset_lock+0x180/0x180 [ 2734.628032] ? futex_exit_release+0x220/0x220 [ 2734.629092] ? __fget_files+0x2f8/0x520 [ 2734.630017] ? __fget_light+0xea/0x290 [ 2734.630940] __sys_sendmsg+0xe5/0x1b0 [ 2734.631833] ? __sys_sendmsg_sock+0x40/0x40 [ 2734.632801] ? __do_sys_futex+0x2bb/0x480 [ 2734.633790] do_syscall_64+0x33/0x40 [ 2734.634623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2734.635810] RIP: 0033:0x7fc157d92b19 [ 2734.636669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2734.640860] RSP: 002b:00007fc155308188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2734.642570] RAX: ffffffffffffffda RBX: 00007fc157ea5f60 RCX: 00007fc157d92b19 [ 2734.644193] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2734.645805] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2734.647419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2734.649050] R13: 00007fff9c3d972f R14: 00007fc155308300 R15: 0000000000022000 [ 2734.697849] FAULT_INJECTION: forcing a failure. [ 2734.697849] name failslab, interval 1, probability 0, space 0, times 0 [ 2734.700559] CPU: 0 PID: 18361 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2734.702173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2734.704083] Call Trace: [ 2734.704687] dump_stack+0x107/0x167 [ 2734.705523] should_fail.cold+0x5/0xa [ 2734.706403] ? __pmd_alloc+0x94/0x5e0 [ 2734.707279] should_failslab+0x5/0x20 [ 2734.708139] kmem_cache_alloc+0x5b/0x310 [ 2734.709061] __pmd_alloc+0x94/0x5e0 [ 2734.709901] copy_page_range+0x2bd8/0x3810 [ 2734.710857] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2734.711886] ? finish_task_switch+0xef/0x5d0 [ 2734.712930] ? up_write+0x191/0x550 [ 2734.713756] ? vm_iomap_memory+0x190/0x190 [ 2734.714707] ? downgrade_write+0x3a0/0x3a0 [ 2734.715692] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2734.716924] ? __vma_link_rb+0x540/0x700 [ 2734.717851] copy_process+0x7654/0x78b0 [ 2734.718791] ? __cleanup_sighand+0xb0/0xb0 [ 2734.719791] ? _copy_from_user+0xfb/0x1b0 [ 2734.720738] kernel_clone+0xe7/0x980 [ 2734.721582] ? __lockdep_reset_lock+0x180/0x180 [ 2734.722639] ? create_io_thread+0xf0/0xf0 [ 2734.723610] ? ksys_write+0x21a/0x260 [ 2734.724495] ? lock_downgrade+0x6d0/0x6d0 [ 2734.725441] __do_sys_clone3+0x1e5/0x320 [ 2734.726357] ? __do_sys_clone+0x110/0x110 [ 2734.727340] ? rcu_read_lock_any_held+0x75/0xa0 [ 2734.728151] FAULT_INJECTION: forcing a failure. [ 2734.728151] name failslab, interval 1, probability 0, space 0, times 0 [ 2734.728386] ? vfs_write+0x354/0xb10 [ 2734.728409] ? fput_many+0x2f/0x1a0 [ 2734.731645] ? ksys_write+0x1a9/0x260 [ 2734.732503] ? __ia32_sys_read+0xb0/0xb0 [ 2734.733430] do_syscall_64+0x33/0x40 [ 2734.734275] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2734.735441] RIP: 0033:0x7f2b50818b19 [ 2734.736277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2734.740426] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2734.742143] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2734.743770] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2734.745377] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2734.746982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2734.748607] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2734.750264] CPU: 1 PID: 18364 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2734.751246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2734.752418] Call Trace: [ 2734.752803] dump_stack+0x107/0x167 [ 2734.753327] should_fail.cold+0x5/0xa [ 2734.753866] ? create_object.isra.0+0x3a/0xa20 [ 2734.754508] should_failslab+0x5/0x20 [ 2734.755046] kmem_cache_alloc+0x5b/0x310 [ 2734.755636] ? mark_held_locks+0x9e/0xe0 [ 2734.756206] create_object.isra.0+0x3a/0xa20 06:22:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 69) 06:22:37 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 78) [ 2734.756827] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 06:22:37 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x1, 0xfdfdffff}) 06:22:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:22:37 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)=ANY=[@ANYRESOCT]) flock(0xffffffffffffffff, 0xd69f0b97d7161dbb) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2734.757796] kmem_cache_alloc+0x159/0x310 [ 2734.758522] xas_alloc+0x336/0x440 [ 2734.759021] xas_create+0x34a/0x10d0 [ 2734.759562] ? kernel_text_address+0xf2/0x120 [ 2734.760198] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2734.760942] xas_store+0x8c/0x1c40 [ 2734.761464] __xa_store+0x164/0x2d0 [ 2734.761969] ? xa_delete_node+0x280/0x280 [ 2734.762559] ? trace_hardirqs_on+0x5b/0x180 [ 2734.763191] xa_store+0x31/0x50 [ 2734.763656] __io_uring_add_tctx_node+0x1cf/0x520 [ 2734.764331] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2734.765062] ? alloc_fd+0x2e7/0x670 [ 2734.765579] io_uring_setup+0x1fbb/0x2980 [ 2734.766168] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2734.766907] do_syscall_64+0x33/0x40 [ 2734.767442] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2734.768160] RIP: 0033:0x7f8bb9614b19 [ 2734.768686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2734.771244] RSP: 002b:00007f8bb6b8a108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2734.772323] RAX: ffffffffffffffda RBX: 00007f8bb9727f60 RCX: 00007f8bb9614b19 [ 2734.773327] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000003a79 [ 2734.774326] RBP: 0000000020000080 R08: 0000000020000100 R09: 0000000020000100 [ 2734.775336] R10: 0000000020000240 R11: 0000000000000202 R12: 0000000020000100 [ 2734.776330] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2734.792712] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. 06:22:37 executing program 3: unshare(0x28020600) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) [ 2734.797430] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2734.799022] CPU: 1 PID: 18359 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2734.800305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2734.801761] Call Trace: [ 2734.802196] dump_stack+0x107/0x167 [ 2734.802846] sysfs_warn_dup.cold+0x1c/0x29 [ 2734.803566] sysfs_do_create_link_sd+0x122/0x140 [ 2734.804378] sysfs_create_link+0x5f/0xc0 [ 2734.805088] device_add+0x703/0x1c50 [ 2734.805765] ? devlink_add_symlinks+0x970/0x970 [ 2734.806570] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2734.807431] wiphy_register+0x1da6/0x2850 [ 2734.808018] ? wiphy_unregister+0xb90/0xb90 [ 2734.808636] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2734.809390] ieee80211_register_hw+0x23c5/0x38b0 [ 2734.810066] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2734.810741] ? net_generic+0xdb/0x2b0 [ 2734.811292] ? lockdep_init_map_type+0x2c7/0x780 [ 2734.811964] ? memset+0x20/0x50 [ 2734.812429] ? __hrtimer_init+0x12c/0x270 [ 2734.813014] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2734.813744] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2734.814387] ? hwsim_new_radio_nl+0x967/0x1080 [ 2734.815020] ? memcpy+0x39/0x60 [ 2734.815501] hwsim_new_radio_nl+0x991/0x1080 [ 2734.816124] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2734.816855] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2734.817776] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2734.818698] genl_family_rcv_msg_doit+0x22d/0x330 [ 2734.819385] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2734.820300] ? cap_capable+0x1cd/0x230 [ 2734.820858] ? ns_capable+0xe2/0x110 [ 2734.821379] genl_rcv_msg+0x36a/0x5a0 [ 2734.821926] ? genl_get_cmd+0x480/0x480 [ 2734.822485] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2734.823220] ? lock_release+0x680/0x680 [ 2734.823786] ? __lockdep_reset_lock+0x180/0x180 [ 2734.824445] netlink_rcv_skb+0x14b/0x430 [ 2734.825021] ? genl_get_cmd+0x480/0x480 [ 2734.825586] ? netlink_ack+0xab0/0xab0 [ 2734.826144] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2734.826783] ? is_vmalloc_addr+0x7b/0xb0 [ 2734.827367] genl_rcv+0x24/0x40 [ 2734.827828] netlink_unicast+0x54e/0x800 [ 2734.828405] ? netlink_attachskb+0x870/0x870 [ 2734.829033] netlink_sendmsg+0x90f/0xe00 [ 2734.829612] ? netlink_unicast+0x800/0x800 [ 2734.830219] ? netlink_unicast+0x800/0x800 [ 2734.830819] __sock_sendmsg+0x154/0x190 [ 2734.831401] ____sys_sendmsg+0x70d/0x870 [ 2734.831975] ? sock_write_iter+0x3d0/0x3d0 [ 2734.832576] ? do_recvmmsg+0x6d0/0x6d0 [ 2734.833129] ? __lockdep_reset_lock+0x180/0x180 [ 2734.833780] ___sys_sendmsg+0xf3/0x170 [ 2734.834342] ? sendmsg_copy_msghdr+0x160/0x160 [ 2734.834992] ? __fget_files+0x2cf/0x520 [ 2734.835558] ? lock_downgrade+0x6d0/0x6d0 [ 2734.836134] ? __lockdep_reset_lock+0x180/0x180 [ 2734.836788] ? futex_exit_release+0x220/0x220 [ 2734.837428] ? __fget_files+0x2f8/0x520 [ 2734.837992] ? __fget_light+0xea/0x290 [ 2734.838550] __sys_sendmsg+0xe5/0x1b0 [ 2734.839081] ? __sys_sendmsg_sock+0x40/0x40 [ 2734.839693] ? __do_sys_futex+0x2bb/0x480 [ 2734.840293] do_syscall_64+0x33/0x40 [ 2734.840826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2734.841536] RIP: 0033:0x7fc157d92b19 [ 2734.842061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2734.844628] RSP: 002b:00007fc1552e7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2734.845729] RAX: ffffffffffffffda RBX: 00007fc157ea6020 RCX: 00007fc157d92b19 [ 2734.846761] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 2734.847766] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2734.848810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2734.849835] R13: 00007fff9c3d972f R14: 00007fc1552e7300 R15: 0000000000022000 06:22:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 70) 06:22:37 executing program 5: fsopen(&(0x7f0000000000)='ext4\x00', 0x0) [ 2734.917783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2734.924711] FAULT_INJECTION: forcing a failure. [ 2734.924711] name failslab, interval 1, probability 0, space 0, times 0 [ 2734.926115] CPU: 1 PID: 18440 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2734.926903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2734.927874] Call Trace: [ 2734.928187] dump_stack+0x107/0x167 [ 2734.928605] should_fail.cold+0x5/0xa [ 2734.929047] ? create_object.isra.0+0x3a/0xa20 [ 2734.929576] should_failslab+0x5/0x20 [ 2734.930016] kmem_cache_alloc+0x5b/0x310 [ 2734.930482] create_object.isra.0+0x3a/0xa20 [ 2734.930978] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2734.931569] kmem_cache_alloc+0x159/0x310 [ 2734.932043] __pmd_alloc+0x94/0x5e0 [ 2734.932461] copy_page_range+0x2bd8/0x3810 [ 2734.932950] ? perf_trace_lock+0xac/0x490 [ 2734.933424] ? lock_chain_count+0x20/0x20 [ 2734.933920] ? up_write+0x191/0x550 [ 2734.934340] ? vm_iomap_memory+0x190/0x190 [ 2734.934820] ? downgrade_write+0x3a0/0x3a0 [ 2734.935315] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2734.935935] ? __vma_link_rb+0x540/0x700 [ 2734.936408] copy_process+0x7654/0x78b0 [ 2734.936883] ? __cleanup_sighand+0xb0/0xb0 [ 2734.937381] ? _copy_from_user+0xfb/0x1b0 [ 2734.937855] kernel_clone+0xe7/0x980 [ 2734.938282] ? __lockdep_reset_lock+0x180/0x180 [ 2734.938816] ? create_io_thread+0xf0/0xf0 [ 2734.939315] ? ksys_write+0x21a/0x260 [ 2734.939747] ? lock_downgrade+0x6d0/0x6d0 [ 2734.940220] __do_sys_clone3+0x1e5/0x320 [ 2734.940679] ? __do_sys_clone+0x110/0x110 [ 2734.941161] ? rcu_read_lock_any_held+0x75/0xa0 [ 2734.941690] ? vfs_write+0x354/0xb10 [ 2734.942116] ? fput_many+0x2f/0x1a0 [ 2734.942527] ? ksys_write+0x1a9/0x260 [ 2734.942959] ? __ia32_sys_read+0xb0/0xb0 [ 2734.943447] do_syscall_64+0x33/0x40 [ 2734.943875] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2734.944451] RIP: 0033:0x7f2b50818b19 [ 2734.944873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2734.946943] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2734.947808] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2734.948611] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2734.949417] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2734.950234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2734.951044] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:22:37 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 79) 06:22:37 executing program 5: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x2000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) creat(&(0x7f0000000180)='./file0\x00', 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x396, 0x60002) read(0xffffffffffffffff, &(0x7f0000000280)=""/10, 0xa) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) symlinkat(&(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file1\x00') pivot_root(0x0, 0x0) unlinkat(r1, &(0x7f00000000c0)='./file1\x00', 0x200) [ 2735.013346] audit: type=1326 audit(1749882157.501:268): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18481 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2735.022270] audit: type=1326 audit(1749882157.502:269): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18481 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2735.030865] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2735.052902] audit: type=1326 audit(1749882157.502:270): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18481 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2735.062490] audit: type=1326 audit(1749882157.502:271): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18481 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c54130a04 code=0x7ffc0000 [ 2735.064991] audit: type=1326 audit(1749882157.503:272): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18481 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2735.078171] audit: type=1326 audit(1749882157.503:273): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18481 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2735.084594] audit: type=1326 audit(1749882157.503:274): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18481 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2735.085354] FAULT_INJECTION: forcing a failure. [ 2735.085354] name failslab, interval 1, probability 0, space 0, times 0 [ 2735.087065] audit: type=1326 audit(1749882157.503:275): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18481 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2735.087145] audit: type=1326 audit(1749882157.503:276): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18481 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2735.090136] CPU: 0 PID: 18487 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2735.098911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2735.100825] Call Trace: [ 2735.101435] dump_stack+0x107/0x167 [ 2735.102273] should_fail.cold+0x5/0xa [ 2735.103148] ? vm_area_dup+0x78/0x290 [ 2735.103171] audit: type=1326 audit(1749882157.503:277): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18481 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f2c5417db19 code=0x7ffc0000 [ 2735.104025] should_failslab+0x5/0x20 [ 2735.107281] kmem_cache_alloc+0x5b/0x310 [ 2735.108221] vm_area_dup+0x78/0x290 [ 2735.109053] ? lock_release+0x680/0x680 [ 2735.109967] ? mark_lock+0xf5/0x2df0 [ 2735.110824] ? lock_chain_count+0x20/0x20 [ 2735.111781] ? mark_lock+0xf5/0x2df0 [ 2735.112634] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2735.113816] ? lock_chain_count+0x20/0x20 [ 2735.114759] ? mark_lock+0xf5/0x2df0 [ 2735.115632] ? vm_area_alloc+0x110/0x110 [ 2735.116558] ? __lock_acquire+0x1657/0x5b00 [ 2735.117560] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2735.118754] ? vmacache_find+0x55/0x2a0 [ 2735.119663] __split_vma+0xa8/0x4e0 [ 2735.120493] __do_munmap+0x365/0x1260 [ 2735.121357] ? arch_get_unmapped_area+0x450/0x450 [ 2735.122450] ? lock_release+0x680/0x680 [ 2735.123355] mmap_region+0x7c8/0x1500 [ 2735.124236] do_mmap+0xcdb/0x11e0 [ 2735.125046] vm_mmap_pgoff+0x198/0x1f0 [ 2735.125945] ? randomize_page+0xb0/0xb0 [ 2735.126868] ksys_mmap_pgoff+0x41c/0x560 [ 2735.127804] ? find_mergeable_anon_vma+0x250/0x250 [ 2735.128930] do_syscall_64+0x33/0x40 [ 2735.129776] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2735.130946] RIP: 0033:0x7f8bb9614b62 [ 2735.131803] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2735.136049] RSP: 002b:00007f8bb6b8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2735.137834] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bb9614b62 [ 2735.139484] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffe000 [ 2735.140305] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2735.141125] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2735.141138] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 2735.141156] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2735.146949] CPU: 1 PID: 18359 Comm: syz-executor.6 Not tainted 5.10.238 #1 [ 2735.147752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2735.148702] Call Trace: [ 2735.149016] dump_stack+0x107/0x167 [ 2735.149431] sysfs_warn_dup.cold+0x1c/0x29 [ 2735.149918] sysfs_do_create_link_sd+0x122/0x140 [ 2735.150452] sysfs_create_link+0x5f/0xc0 [ 2735.150927] device_add+0x703/0x1c50 [ 2735.151361] ? devlink_add_symlinks+0x970/0x970 [ 2735.151900] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2735.152515] wiphy_register+0x1da6/0x2850 [ 2735.152998] ? wiphy_unregister+0xb90/0xb90 [ 2735.153497] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2735.154114] ieee80211_register_hw+0x23c5/0x38b0 [ 2735.154658] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2735.155207] ? net_generic+0xdb/0x2b0 [ 2735.155645] ? lockdep_init_map_type+0x2c7/0x780 [ 2735.156180] ? memset+0x20/0x50 [ 2735.156551] ? __hrtimer_init+0x12c/0x270 [ 2735.157016] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2735.157589] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2735.158111] ? hwsim_new_radio_nl+0x967/0x1080 [ 2735.158636] ? memcpy+0x39/0x60 [ 2735.159014] hwsim_new_radio_nl+0x991/0x1080 [ 2735.159520] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2735.160109] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2735.160847] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2735.161581] genl_family_rcv_msg_doit+0x22d/0x330 [ 2735.162126] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2735.162871] ? cap_capable+0x1cd/0x230 [ 2735.163329] ? ns_capable+0xe2/0x110 [ 2735.163753] genl_rcv_msg+0x36a/0x5a0 [ 2735.164187] ? genl_get_cmd+0x480/0x480 [ 2735.164640] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2735.165221] ? lock_release+0x680/0x680 [ 2735.165665] ? __lockdep_reset_lock+0x180/0x180 [ 2735.166188] netlink_rcv_skb+0x14b/0x430 [ 2735.166645] ? genl_get_cmd+0x480/0x480 [ 2735.167102] ? netlink_ack+0xab0/0xab0 [ 2735.167552] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2735.168069] ? is_vmalloc_addr+0x7b/0xb0 [ 2735.168533] genl_rcv+0x24/0x40 [ 2735.168904] netlink_unicast+0x54e/0x800 [ 2735.169368] ? netlink_attachskb+0x870/0x870 [ 2735.169868] netlink_sendmsg+0x90f/0xe00 [ 2735.170331] ? netlink_unicast+0x800/0x800 [ 2735.170816] ? netlink_unicast+0x800/0x800 [ 2735.171314] __sock_sendmsg+0x154/0x190 [ 2735.171768] ____sys_sendmsg+0x70d/0x870 [ 2735.172232] ? sock_write_iter+0x3d0/0x3d0 [ 2735.172704] ? do_recvmmsg+0x6d0/0x6d0 [ 2735.173153] ? __lockdep_reset_lock+0x180/0x180 [ 2735.173677] ? __delete_object+0xb3/0x100 [ 2735.174152] ___sys_sendmsg+0xf3/0x170 [ 2735.174594] ? sendmsg_copy_msghdr+0x160/0x160 [ 2735.175113] ? __fget_files+0x2cf/0x520 [ 2735.175572] ? lock_downgrade+0x6d0/0x6d0 [ 2735.176041] ? __kasan_slab_free+0x122/0x160 [ 2735.176548] ? futex_exit_release+0x220/0x220 [ 2735.177058] ? __fget_files+0x2f8/0x520 [ 2735.177513] ? __fget_light+0xea/0x290 [ 2735.177961] __sys_sendmsg+0xe5/0x1b0 [ 2735.178387] ? __sys_sendmsg_sock+0x40/0x40 [ 2735.178882] ? __do_sys_futex+0x2bb/0x480 [ 2735.179360] ? __x64_sys_creat+0x1/0x120 [ 2735.179834] do_syscall_64+0x33/0x40 [ 2735.180257] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2735.180830] RIP: 0033:0x7fc157d92b19 [ 2735.181269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2735.183648] RSP: 002b:00007fc1552e7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2735.184524] RAX: ffffffffffffffda RBX: 00007fc157ea6020 RCX: 00007fc157d92b19 [ 2735.185348] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2735.186156] RBP: 00007fc157decf6d R08: 0000000000000000 R09: 0000000000000000 [ 2735.186974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2735.187801] R13: 00007fff9c3d972f R14: 00007fc1552e7300 R15: 0000000000022000 [ 2749.274734] FAULT_INJECTION: forcing a failure. [ 2749.274734] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2749.276992] CPU: 1 PID: 18502 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2749.278183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.279586] Call Trace: [ 2749.279845] FAULT_INJECTION: forcing a failure. [ 2749.279845] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.280036] dump_stack+0x107/0x167 [ 2749.280066] should_fail.cold+0x5/0xa [ 2749.284627] __alloc_pages_nodemask+0x182/0x600 [ 2749.285433] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2749.286468] ? find_held_lock+0x2c/0x110 [ 2749.287164] ? __pmd_alloc+0x2db/0x5e0 [ 2749.287829] ? lock_downgrade+0x6d0/0x6d0 [ 2749.288531] ? do_raw_spin_lock+0x121/0x260 [ 2749.289279] alloc_pages_current+0x187/0x280 [ 2749.290036] pte_alloc_one+0x16/0x1a0 [ 2749.290700] __pte_alloc+0x1d/0x330 [ 2749.291342] copy_page_range+0x1b62/0x3810 [ 2749.292064] ? perf_trace_lock+0xac/0x490 [ 2749.292763] ? lock_chain_count+0x20/0x20 [ 2749.293498] ? up_write+0x191/0x550 [ 2749.294125] ? vm_iomap_memory+0x190/0x190 [ 2749.294849] ? downgrade_write+0x3a0/0x3a0 [ 2749.295570] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2749.296493] ? __vma_link_rb+0x540/0x700 [ 2749.297185] copy_process+0x7654/0x78b0 [ 2749.297893] ? __cleanup_sighand+0xb0/0xb0 [ 2749.298504] ? _copy_from_user+0xfb/0x1b0 [ 2749.299089] kernel_clone+0xe7/0x980 [ 2749.299626] ? __lockdep_reset_lock+0x180/0x180 [ 2749.300276] ? create_io_thread+0xf0/0xf0 [ 2749.300871] ? ksys_write+0x21a/0x260 [ 2749.301402] ? lock_downgrade+0x6d0/0x6d0 [ 2749.301985] __do_sys_clone3+0x1e5/0x320 [ 2749.302560] ? __do_sys_clone+0x110/0x110 [ 2749.303170] ? rcu_read_lock_any_held+0x75/0xa0 [ 2749.303830] ? vfs_write+0x354/0xb10 [ 2749.304354] ? fput_many+0x2f/0x1a0 [ 2749.304872] ? ksys_write+0x1a9/0x260 [ 2749.305412] ? __ia32_sys_read+0xb0/0xb0 [ 2749.305995] do_syscall_64+0x33/0x40 [ 2749.306522] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.307242] RIP: 0033:0x7f2b50818b19 [ 2749.307776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.310357] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2749.311439] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2749.312449] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2749.313449] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.314450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2749.315452] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2749.316493] CPU: 0 PID: 18496 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2749.318728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.321485] Call Trace: [ 2749.322261] dump_stack+0x107/0x167 [ 2749.323380] should_fail.cold+0x5/0xa [ 2749.324536] ? anon_vma_clone+0xdc/0x590 [ 2749.325762] should_failslab+0x5/0x20 [ 2749.326905] kmem_cache_alloc+0x5b/0x310 [ 2749.328086] anon_vma_clone+0xdc/0x590 [ 2749.329233] __split_vma+0x17c/0x4e0 [ 2749.330342] __do_munmap+0x365/0x1260 [ 2749.331524] ? arch_get_unmapped_area+0x450/0x450 [ 2749.332916] ? lock_release+0x680/0x680 [ 2749.334079] mmap_region+0x7c8/0x1500 [ 2749.335253] do_mmap+0xcdb/0x11e0 [ 2749.336325] vm_mmap_pgoff+0x198/0x1f0 [ 2749.337452] ? randomize_page+0xb0/0xb0 [ 2749.338648] ksys_mmap_pgoff+0x41c/0x560 [ 2749.338942] loop5: detected capacity change from 0 to 512 [ 2749.339855] ? find_mergeable_anon_vma+0x250/0x250 [ 2749.339904] do_syscall_64+0x33/0x40 [ 2749.343134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.344665] RIP: 0033:0x7f8bb9614b62 [ 2749.345770] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2749.347833] FAT-fs (loop5): bogus number of reserved sectors [ 2749.351081] RSP: 002b:00007f8bb6b8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2749.351112] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bb9614b62 [ 2749.351128] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffe000 [ 2749.351150] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2749.351971] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2749.361456] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 2749.363305] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:22:51 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@local, 0x78, r4}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0xa302}], 0x10000000000002a3, 0x0) close(r5) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000100)={@mcast1, 0x0, r4}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e40)=@updsa={0x21a8, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r4, 0xee01}, {@in6=@private2, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x800000000, 0x3ff}, {0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x1048, 0x1, {{'blake2s-128-generic\x00'}, 0x8000, "1a445349fbde1c216c541794ff74a513c14d6614ee72698aedcc51069d10e690fd86b6aca605b0fda06973550f9e61e2bd5d6e020bb2df49432d805e415d2eb538aed88fbe97d7edd1eb34ffcb7a792210b431b63c50818740b7b33767f0ec1426eca346331313afa3d3f3a865e6d3f49a806d6110566d4d0b541d1896a750bb4387a3b22492ba86617d06117135d7b7747df3abe48a7e87a64292260b6b3ad25c83bfa01a977f75b86ef0d721e0c8987aea358a617769df0229355c5b0ddf073ba8f855a470f07916101a17d40e7f37a174bc82314eae1a191d124a0a1c7e0fdaf18deec12ca4c365d53a2cb799a7d8be205769bb8f83f989094830ab5a558381e0a945d0ab06ad27836f7e81a06a23673b247c9bf12393e92e349f51617afe3fb203b9acb2f04662c1e412ef0d475f045ea675df7d200a08c923e7659198329571ea92ce6c361d8c8f5aeb84c88f657dde92c2f96b3123f6fdfbc77918fb538615e5d80b95ffb6badc0db8a0cad7a4b9a6f5cd0e09c8dadcaff115fcaf067a1e747314c182cb711e6d26eab162a7ba049d0f923a29485a9a273dbe1802411c557752fdea3261dd9c0320ff0d80c115bf7d0fff56872e6f5626b7f277c606ddba3cf4c5eef46f8b6946ebe09232408c8fadcea795d52651e78434d31273b99b64ec5279d608ef1dd964f0da4deb8580931c5c3de37496829d2b3003450458cae6b6134b62c4bb4c8bd1e0a55e5b1f8a188fe6b6e96467ed90d9d7ef16e1761c9a4261fa8edc83a1518cc9d4403811e4e1de2f1cc21d964546ed8f412f49ec305ab2c1ec37a1de4de464dfac632baeb19e553fb8b79a2d3d2f0550a97eff2faaaad0288da1158d9d780d91fa3c1e2bbca0ed29d44b7520ed820be2aac8865bd52b70529bd2bf066944500401b35e91c4d78c767fc7a1cc0e9f9fcc6847e018df69dd2dce2a12161a46ce260838922452d1862d8f4d6bbaa2954f3b87f0f994e80263c343126a36d14249cf1dd94bbba15d289e051b5b427adf865f8287e2ee83133260f3394f5c88ceee96a509ea2b2d1958983703549096606b8bfc4687bde10452bd76d462e94ff18e0251e40e9dd2b41b4174c3cca4bd76c12d3cb33e625b3311e48a26dadd7dfeabf0acfe9619189057c593483df69cbf63d6d3f1bf48ebd66fccf04866e0fb1b801a47dbd621aa51b21b7c7cba9a67562c958b07b8ae3091489a0f64be4754c19e83d149e82397e6cf4cc47fc4a876ccadace35bb61c6b6fa4a6d6873bbb83ae671ed2b810e66033d2e53218f3c90e3267386a924b902735c11e44ebfdbe589df98a5031d74695befb9f263a5b360d1841969f2133e6ab67b75f39244d22747ea208db52c79e4e8ef730d24cdb441281345ecbcce0c5d915d13c5f88e7cd60e8067111e42f9df22023c59b1c81aaf6af0bacafa84a0780a56b55826965322c99806b997c079d7d5e135114fe03d23f75a9817a18eaeb570ea8e12f6933570d0462a2bf6ff3caf10801b87a5f4d2bc402327e031fb8327d05e3d09b9b385bcf01b03e24be763fdc0732acaf65dfe97e264b83604b33a0076164fd7e413707253836d1f3e62743c7bf77fe8374cbabd82e988e9ab3c004beda48c9dba00266fa039682ed1c6d9afe499ec069f31d8101713ea84d1ba4404012f4be1cd3f640ad7212149b9541fc2f7c747ad5de193bed5eeda3084f6082f165e789403cc7f9ae1aa93cd2be4df08799908cabae453aa580604dd061ae9ccabee093039152448963863611295ea49c658b51040054f56cffb46fb9f1fc0f06cf4df1efad339cf0c4d614e542cc9cd907d3fba3ee2407c77bd5085b9311ef9fe02256647e34d4158944c65ac5d38c497fadaefd8babae379463e42aa25d77de2469f5f1cabbd5fab398d887ee4be64bd69d1ad4ef2ccfbb3a8dac84ab7c57442ec4a981124e2edb0d299d686ee8055423a2d8c14be5f57de765738432488276d8a402245e5148a9831f448c31ccd895159fdb1218979f265eda6973ad6558716d168f09cfd4199c828b8583233d4f92f22e703bd76d5e96da089d1c5444728e771684de93256efd8be2bfedf173f868c0b2ab0805e43ec65bc78d9888dbb8602c3f6713e669c8e90c9e3306e1480fd09ca312acf65a6077f19bf0c95db985da5e83cf3d02bfad93668a05a0903792cd026f742c4be340b4315a75351928780390660c1ff01199856a83b05b2332607d9710f4a23fc347564ae710923a8baca21bbc0c36e4590c963d0574c859404f9701ea04117374b284065f4780d2f5cb8bb72b2084392258683ca526298b49f9b65780d8a784e58ea4848ea3b5525a4014fd04d241f4a2f2fadf8925e278fc3a8b78911e627189164adc02226444634add79e53a774b7466a0d69dfe27e9ed4160a31ac6f4e8b95240e805ebd1b7c344b1f6f0adb172de9396cdabfb8344970c3106759af8a93ffe9c951a7d72aef631d2b1898d4c0b6bdf415cdeb4a90523d902feeca85a31686b3928b4ec4eaa218821c45bc0e6a33708d3890537860b5ae9024fd859ae563dad0b81099355011228f7b48bafb0f344925a5e6e2d348309b011941d11ba652bb61ae6b7541209c0fc1e5e2a1485f5844caadc80f939f0df27112d6cc10d8adac50c4badbe66c568461fe5f3dab2441064765b1a44894d6eced25fb2cf0fa840e9d43e4401ba3b7be9d9d8aee557dc59fa17e84ae96988dfa3c0c1ab015deda3d9865dc3b3c840efdb5ff46d82e91e4784c9e3b48a11af2aaf207b93ba2aa41a2fa12e8321aaa4413170254d9bd84317945f69866d5ababc186853ceb2f896685c7afc41302dccc60ee5d6089af84af2e982bbdaa6ae3f868c46718d9ca6e3aa913e1cc551610f5e9447188ef6782f4a05edc5ad380f8cfab47b503496975301cde2db26228cca7de86018d3b7ecd4c43a39ee40f785c8f97be8a96094b495320bee21ec06b50f3b6adc51fb30f8242e14c2b819bd355a189099c271d60ae056fb3d46cd4a56f376b98695fda9c3cc386d2c97504d4f9d5736498e591f259584c496d1d0505db2c6725f396bd2bf2041c65357ee9f24ec9bf880eacc51241a23af44fff9dd24f43581be7dcee1e6b7f93a178cd28c0c089087dd4af87ff65dd0cc8a292b355c067bb6674c9c17f34cfc836c4755acadf39df789f0fef41fbdd2bb18ee0d3cc0b4fad1156d2610a79b89623b032224a92a07528776f46b0c82613dc584de3feb128964052cac04e71a494b68db1aed3b4e50be3861de83df32818aedf3b07fefd3d0abaa6cfee60876e6989b8ed7aa6624d7afefd6b3cc612bd261d0536bb3a57cf9cb2c7237aca020747467ccd6950cd8e83e69c9fa56616090673c77a5686857e33a54f483577942e92a85437d5355b0dc78085feeac00017a44ef362ba54f62c64febd43e0a136a28df2305fe04d36762d7077c4b2638ead65bac0aac01a9e5e9ba57abfe5246a966ce8cc5f833cd031c46af2b3edc6cc07c0685c44b3852744faf6dd124aac306c24627a46db482cbd54d151a1babbf3436d0c1b0480fe828dc77cf37d655d178b8eaa463d876c4a057bb93c06e84fe4a7410c0ffb6ea6499066746f4f8dd8953062b207a0fefee15c2aae099e6d7a8024aeb79ebfcc4917c80c0e385fcb7c6f6c6e1f474610a39acec39ff791ff67c71d26195dcbf05762d32bc85f870ab175314541cabf91af32c09403db90fde8f4ab1b2902d1d37a46a6d2f56f7bf7386ac657e2ceaafb5f4630b5f8b898b1baa7b10cc06ab660a1ed2993d90dc16db80c53cb3322f2db16e48ddaff94b69f29f467516000f0bb3130fd13e2903ad434b66fe9814c6c8e25bc275827dc88109339da4a414590f4e2644bda2dcadd502a9a42ea99dd6129bd6a9aa983ec7f14a4048cb5917f8f5ca67493d348781ecdacb01fb8928b04f6dfc84215d629c89fa6ff428fce99d40fc6bfa22163861a2553bf7848c9c928cc3f2f420e4b13f73ef3b591f90544baf6bf669cc29f67cb0da23a585b632ce98aab82f7409b1e17a1b7598b2dfd001b022bf347d01a6268ac69205d30e65b70068307d7fb9327a637c2e7991dad9fbeae42d7c910f6ce9bef6f8d9961a8eab1a5986f528a590357a9fa507365372dd699f89c50fb6cb896f93919113ab5bdd55cc2ef582881343a9770752260c069ee3d22d67140a2230f8091214badde3d6a5178cfc4d3a0824590fa4dbce3b10b92e313a3ffcca77011ffb4b1dc729e792ac65ff03bcc602cb59d50323e81ddfc87c61fd9df9956d7cd104b46927ee5e16fcc832c92144b1d2a725c5a25da894d5b1f952e53e780861efd0a3d6c3b4c2e2d00e008741d142773e0e15b8fd0a51e8cbde3842a48eb5d6e937f5fea04635c1003236cbb7e1431128700e597647677ade80d395a7444087374b942d835642a87875c317ef11c215aa88110716930e1ba2650136e5c5ae2b58eccf34a4b154e8ead9faef2671a853c067f843c50f058a70acd506b60c2b8cec41956ce92bc7d3e8a24b75fe0e2fea80ec0564f3a8881ae3ccfa61b1078083efc1cb1ca743b8ffb9d6fe37a751c4310e8754c4c74b0a010e4a82fa2ca432c797e0bb0a5afb25c06f2294459e8753021cca765ce9cdd54d9dca3898414da319a6d99b3fd61b4d0c79eaaada4cf2e1d66e704a2a8027fd6aca10d803084a475e15f38bc33b716e5db70dbbc768bc41896a236d487ad80dd231f752bd2a1d7f1779e7b343619be16383a288e2dae255a6202a7fc057b83e2a8c677b74ff3e6230ecf47109e39ef7b7e7da05f4f209e1ca82a640bc2a6cf483a4e36fe52d2873646ae57f9693b2269adf955a221a9605221a9446efc5f9fd0454e043c6181dee592de40c7efaf7de9e3528dc4a0f67eea5a861da484cba2c78f6a7d6c977a434b9b112f2d87358608982134a791be481e4001d3a5cf6813ea2e4e6538f46143b82270761eade55f6245a953faaa0bcd9ad663de7f25eccd98f5ff8e8a3fc6911c396ae5c8a0744ab2b1acbc0ba2154914c91ad2cc24cdcb930dea752bee56e22d9df8185050763fea282560d263e106fa16dbacf5aff4b2b9d8ef14cb792e0bd6085b6413572626ab93730fb0e842ce8d8ed7c0a9c6140645ec5803f8178475e26abd494a6afb6ce3bf3be319cb9b0100a55b196ceb17773a9b03ac0436dfa6ad19a267c0370ec4ec591a56bb0b66f9fb1737f9d7da1e49bf27917d7feb0d06def5a1092e735fabafe378bacfaa85c2e17c93b3e82c56172bc1e08bd838e50ef25f13c8f5d9e8f62a5edb9bec6da39b9df41c219086b817402ee84492f3fc910dad1cf52de0e4b6a297cdfd57a01ef67fbea204b26fae4e066d1309cf5b6cb49c5eefcaad11d25a0c132ab6de6b22b5491af9b124f33905f8ef7142c72c1a2d8800e5ccad40504dc7207dddffa10a99f316134464c5011650dec045139ca71d8068128c42955250b9abf2337ea3fe5e3d92afb122a0348b007846fc93c5b28458fb288bce1b7ae4cdd496f5b8c73591ecd97f6fe14ceac20984ccbc239e7010f26fee175d14020d42bb66b012900ae84d5f4076ef6db7dbf80bde36395cd3687189826c3ff1982481e9402f9b1e105768d19d9d1ea9f74254766b3ffab390b8c1b0b3b452121bc185a9723fdb08c6f1a71cb31f8b9c9931207895c9eecee4d9e24c4c158adbb921c539748a664c644ec2a6e17be18d70c50be09bfa6ee97f04894e0f69e451ed882158fad7aac5da571f227c844f68c4a9d96690974e58be7e5"}}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010102}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x20}, @algo_auth={0x1048, 0x1, {{'sha3-224-ce\x00'}, 0x8000, "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"}}, @mark={0xc, 0x15, {0x35075b, 0x80000001}}]}, 0x21a8}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r7, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xfffffffffffffc9a}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x2c}}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0xe, &(0x7f0000000280)={@empty, r9}, 0x14) 06:22:51 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x1f, &(0x7f0000ffe000/0x2000)=nil, 0x2) 06:22:51 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:22:51 executing program 6: unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x74a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xfd00ae9fb133f86) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0x78) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) unshare(0x1c010900) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x1e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c6530200a863d9ccfbc3e6b07c1957f07147b07e33018b08994e2501f663ae8e82045f24967f6954c302a9be464d1c9b0ad7314b67e0b74a733598cfe98fcb2f51ee5d69e86f36b6ead46f21172cc3de2cdcd51245e9da8ad11751c8d758155c1c4b897b77ab1a471da132a8ed27312234fe84e1af856d87a98c94d6125b10de4eadbccf7b8c4b6ee06a5589ad5799c6c548ed4b5419cfb9accd684868a598fe38540625cd870b90f9a5a493f547df2d7f07b171311f21a8bf2edacac01bf18446b5dfee5cfbb5e35131a25d0d666bc5353d2d137038d39ef0993e4b825e170e8a20cb64fe82d7aeb30f4f036ec266f4b9d02f1ecada673e472d2f9aa2b6f54ac352e796976b910a2bf0600"/290], 0x45) utimes(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0xea60}, {0x0, 0x2710}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x7f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) unshare(0x48020200) 06:22:51 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 80) 06:22:51 executing program 3: unshare(0x28020600) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 06:22:51 executing program 5: ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/62) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66d5e7d4f801", 0xb}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000000040)={[{@utf8no}]}) r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@rc, &(0x7f00000000c0)=0x80) fsetxattr$security_ima(r0, &(0x7f00000001c0), &(0x7f0000000240)=@sha1={0x1, "b30e2e9ba2c0cae2f87886a36d1438044cec2149"}, 0x15, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) dup2(r1, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r3, @ANYBLOB="165a80020010d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf68364053820814001000fe800000000000332c660c4ce562956bf30363335c6a2400fe008000000000000000"], 0x108}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) 06:22:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 71) 06:22:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 72) [ 2749.377328] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2749.407039] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2749.408968] CPU: 0 PID: 18506 Comm: syz-executor.5 Not tainted 5.10.238 #1 [ 2749.410536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.412415] Call Trace: [ 2749.413008] dump_stack+0x107/0x167 [ 2749.413836] sysfs_warn_dup.cold+0x1c/0x29 [ 2749.414793] sysfs_do_create_link_sd+0x122/0x140 [ 2749.415871] sysfs_create_link+0x5f/0xc0 [ 2749.416788] device_add+0x703/0x1c50 [ 2749.417633] ? devlink_add_symlinks+0x970/0x970 [ 2749.418691] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2749.419886] wiphy_register+0x1da6/0x2850 [ 2749.420835] ? wiphy_unregister+0xb90/0xb90 [ 2749.421826] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2749.423023] ieee80211_register_hw+0x23c5/0x38b0 [ 2749.424101] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2749.425170] ? net_generic+0xdb/0x2b0 [ 2749.426031] ? lockdep_init_map_type+0x2c7/0x780 [ 2749.427093] ? memset+0x20/0x50 [ 2749.427841] ? __hrtimer_init+0x12c/0x270 [ 2749.428777] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2749.429925] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2749.430960] ? hwsim_new_radio_nl+0x967/0x1080 [ 2749.431996] ? memcpy+0x39/0x60 [ 2749.432739] hwsim_new_radio_nl+0x991/0x1080 [ 2749.433729] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2749.434904] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2749.436551] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2749.438017] genl_family_rcv_msg_doit+0x22d/0x330 [ 2749.439112] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2749.440648] ? cap_capable+0x1cd/0x230 [ 2749.441541] ? ns_capable+0xe2/0x110 [ 2749.442389] genl_rcv_msg+0x36a/0x5a0 [ 2749.443249] ? genl_get_cmd+0x480/0x480 [ 2749.444160] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2749.445323] ? lock_release+0x680/0x680 [ 2749.446217] ? __lockdep_reset_lock+0x180/0x180 [ 2749.447266] netlink_rcv_skb+0x14b/0x430 [ 2749.448190] ? genl_get_cmd+0x480/0x480 [ 2749.449083] ? netlink_ack+0xab0/0xab0 [ 2749.449966] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2749.450989] ? is_vmalloc_addr+0x7b/0xb0 [ 2749.451916] genl_rcv+0x24/0x40 [ 2749.452654] netlink_unicast+0x54e/0x800 [ 2749.453570] ? netlink_attachskb+0x870/0x870 [ 2749.454569] netlink_sendmsg+0x90f/0xe00 [ 2749.455504] ? netlink_unicast+0x800/0x800 [ 2749.456467] ? netlink_unicast+0x800/0x800 [ 2749.457415] __sock_sendmsg+0x154/0x190 [ 2749.458320] ____sys_sendmsg+0x70d/0x870 [ 2749.459235] ? sock_write_iter+0x3d0/0x3d0 [ 2749.460188] ? do_recvmmsg+0x6d0/0x6d0 [ 2749.461075] ? __lockdep_reset_lock+0x180/0x180 [ 2749.462126] ___sys_sendmsg+0xf3/0x170 [ 2749.463010] ? sendmsg_copy_msghdr+0x160/0x160 [ 2749.464060] ? __fget_files+0x2cf/0x520 [ 2749.464949] ? lock_downgrade+0x6d0/0x6d0 [ 2749.465877] ? __lockdep_reset_lock+0x180/0x180 [ 2749.466922] ? futex_exit_release+0x220/0x220 [ 2749.467950] ? __fget_files+0x2f8/0x520 [ 2749.468852] ? __fget_light+0xea/0x290 [ 2749.469737] __sys_sendmsg+0xe5/0x1b0 [ 2749.470597] ? __sys_sendmsg_sock+0x40/0x40 [ 2749.471568] ? __do_sys_futex+0x2bb/0x480 [ 2749.472525] do_syscall_64+0x33/0x40 [ 2749.473362] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.474511] RIP: 0033:0x7f2c5417db19 [ 2749.475354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.479486] RSP: 002b:00007f2c516d2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2749.481194] RAX: ffffffffffffffda RBX: 00007f2c54291020 RCX: 00007f2c5417db19 [ 2749.482806] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 2749.484417] RBP: 00007f2c541d7f6d R08: 0000000000000000 R09: 0000000000000000 [ 2749.486015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2749.487625] R13: 00007fff5d08f02f R14: 00007f2c516d2300 R15: 0000000000022000 [ 2749.535100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2749.539291] FAULT_INJECTION: forcing a failure. [ 2749.539291] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.540904] CPU: 1 PID: 18542 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2749.541913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.543061] Call Trace: [ 2749.543458] dump_stack+0x107/0x167 [ 2749.543992] should_fail.cold+0x5/0xa [ 2749.544560] ? ptlock_alloc+0x1d/0x70 [ 2749.545094] should_failslab+0x5/0x20 [ 2749.545663] kmem_cache_alloc+0x5b/0x310 [ 2749.546269] ptlock_alloc+0x1d/0x70 [ 2749.546809] pte_alloc_one+0x68/0x1a0 [ 2749.547350] __pte_alloc+0x1d/0x330 [ 2749.547884] copy_page_range+0x1b62/0x3810 [ 2749.548482] ? perf_trace_lock+0xac/0x490 [ 2749.549084] ? lock_chain_count+0x20/0x20 [ 2749.549715] ? vm_iomap_memory+0x190/0x190 [ 2749.550311] ? kcov_remote_stop+0x310/0x310 [ 2749.550922] ? __vma_link_rb+0x540/0x700 [ 2749.551508] copy_process+0x7654/0x78b0 [ 2749.552104] ? __cleanup_sighand+0xb0/0xb0 [ 2749.552748] ? _copy_from_user+0xfb/0x1b0 [ 2749.553346] kernel_clone+0xe7/0x980 [ 2749.553876] ? __lockdep_reset_lock+0x180/0x180 [ 2749.554537] ? create_io_thread+0xf0/0xf0 [ 2749.555142] ? ksys_write+0x21a/0x260 [ 2749.555696] ? lock_downgrade+0x6d0/0x6d0 [ 2749.556312] __do_sys_clone3+0x1e5/0x320 [ 2749.556902] ? __do_sys_clone+0x110/0x110 [ 2749.557494] ? rcu_read_lock_any_held+0x75/0xa0 [ 2749.558143] ? vfs_write+0x354/0xb10 [ 2749.558666] ? fput_many+0x2f/0x1a0 [ 2749.559178] ? ksys_write+0x1a9/0x260 [ 2749.559724] ? __ia32_sys_read+0xb0/0xb0 [ 2749.560304] do_syscall_64+0x33/0x40 [ 2749.560829] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.561546] RIP: 0033:0x7f2b50818b19 [ 2749.562061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.564639] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2749.565712] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2749.566718] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2749.567721] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.568722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2749.569711] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:22:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x64d79ca4eb02dbd8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001d00210c00000000fbdbdf250100020058e1f427ac228a56bc00c90f3fe66caa1497d1c4f4df5ae2c0158ab966c0f8ac7a2a330419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32fd06d2267d09aae07f6db51a7ddcfe39e42a36bda4a8694badc4f48b0754e2a90b7deddf481d2e832ae0fcb0019f7cc3acf992c083678e7a263c462644cad337c4642a7ab9b18b837342e073f13b7487e7f38441e3171a400804cfdf4e57246f8b4b4f5f282c84723120903"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000001400)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) lseek(r3, 0x0, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x208, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x14c}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x1}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf53}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x8}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3f}, {0x6, 0x16, 0x3f}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0x101}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xe24}, {0x6, 0x16, 0xfff9}, {0x5}}]}, 0x208}, 0x1, 0x0, 0x0, 0x20000000}, 0x48844) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000001400)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) lseek(r2, 0x0, 0x3) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x3fdb, @mcast2, 0xaa1}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 06:22:52 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) (fail_nth: 1) 06:22:52 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 81) 06:22:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x4900, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x200000) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'filter\x00', 0x0, [0x0, 0xfff, 0x0, 0x6]}, &(0x7f0000000380)=0x54) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x20000000) [ 2749.675456] FAULT_INJECTION: forcing a failure. [ 2749.675456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2749.677226] CPU: 1 PID: 18616 Comm: syz-executor.3 Not tainted 5.10.238 #1 [ 2749.678213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.679406] Call Trace: [ 2749.679785] dump_stack+0x107/0x167 [ 2749.680317] should_fail.cold+0x5/0xa [ 2749.680874] _copy_to_user+0x2e/0x180 [ 2749.681420] simple_read_from_buffer+0xcc/0x160 [ 2749.682075] proc_fail_nth_read+0x198/0x230 [ 2749.682694] ? proc_sessionid_read+0x230/0x230 [ 2749.683339] ? security_file_permission+0xb1/0xe0 [ 2749.684052] ? proc_sessionid_read+0x230/0x230 [ 2749.684684] vfs_read+0x228/0x620 [ 2749.685190] ksys_read+0x12d/0x260 [ 2749.685689] ? vfs_write+0xb10/0xb10 [ 2749.686245] do_syscall_64+0x33/0x40 [ 2749.686788] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.687515] RIP: 0033:0x7fd95540b69c [ 2749.688056] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2749.690635] RSP: 002b:00007fd9529ce170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2749.691724] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fd95540b69c [ 2749.692766] RDX: 000000000000000f RSI: 00007fd9529ce1e0 RDI: 0000000000000005 [ 2749.693764] RBP: 00007fd9529ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.694747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2749.695744] R13: 00007fff9e35ad0f R14: 00007fd9529ce300 R15: 0000000000022000 06:22:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 73) [ 2749.712112] FAULT_INJECTION: forcing a failure. [ 2749.712112] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.714752] CPU: 0 PID: 18630 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2749.716327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.718199] Call Trace: [ 2749.718795] dump_stack+0x107/0x167 [ 2749.719627] should_fail.cold+0x5/0xa [ 2749.720486] ? vm_area_dup+0x78/0x290 [ 2749.721348] should_failslab+0x5/0x20 [ 2749.722204] kmem_cache_alloc+0x5b/0x310 [ 2749.723122] vm_area_dup+0x78/0x290 [ 2749.723958] ? lock_release+0x680/0x680 [ 2749.724855] ? mark_lock+0xf5/0x2df0 [ 2749.725711] ? lock_chain_count+0x20/0x20 [ 2749.726647] ? mark_lock+0xf5/0x2df0 [ 2749.727501] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2749.728685] ? lock_chain_count+0x20/0x20 [ 2749.729634] ? mark_lock+0xf5/0x2df0 [ 2749.730477] ? vm_area_alloc+0x110/0x110 [ 2749.731407] ? __lock_acquire+0x1657/0x5b00 [ 2749.732415] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2749.733590] ? vmacache_find+0x55/0x2a0 [ 2749.734494] __split_vma+0xa8/0x4e0 [ 2749.735326] __do_munmap+0x365/0x1260 [ 2749.736187] ? arch_get_unmapped_area+0x450/0x450 [ 2749.737272] ? lock_release+0x680/0x680 [ 2749.738172] mmap_region+0x7c8/0x1500 [ 2749.739040] do_mmap+0xcdb/0x11e0 [ 2749.739851] vm_mmap_pgoff+0x198/0x1f0 [ 2749.740732] ? randomize_page+0xb0/0xb0 [ 2749.741642] ksys_mmap_pgoff+0x41c/0x560 [ 2749.742555] ? find_mergeable_anon_vma+0x250/0x250 [ 2749.743682] do_syscall_64+0x33/0x40 [ 2749.744520] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.745004] FAULT_INJECTION: forcing a failure. [ 2749.745004] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.745657] RIP: 0033:0x7f8bb9614b62 [ 2749.745678] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2749.745696] RSP: 002b:00007f8bb6b8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2749.753888] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bb9614b62 [ 2749.755487] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffe000 [ 2749.757075] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2749.758672] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 2749.760277] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2749.761904] CPU: 1 PID: 18633 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2749.762707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.763679] Call Trace: [ 2749.763987] dump_stack+0x107/0x167 [ 2749.764408] should_fail.cold+0x5/0xa [ 2749.764843] ? create_object.isra.0+0x3a/0xa20 [ 2749.765370] should_failslab+0x5/0x20 [ 2749.765808] kmem_cache_alloc+0x5b/0x310 [ 2749.766277] create_object.isra.0+0x3a/0xa20 [ 2749.766775] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2749.767415] kmem_cache_alloc+0x159/0x310 [ 2749.768078] __pmd_alloc+0x94/0x5e0 [ 2749.768492] copy_page_range+0x2bd8/0x3810 [ 2749.768975] ? perf_trace_lock+0xac/0x490 [ 2749.769450] ? lock_chain_count+0x20/0x20 [ 2749.769944] ? up_write+0x191/0x550 [ 2749.770358] ? vm_iomap_memory+0x190/0x190 [ 2749.770831] ? downgrade_write+0x3a0/0x3a0 [ 2749.771324] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2749.771937] ? __vma_link_rb+0x540/0x700 [ 2749.772400] copy_process+0x7654/0x78b0 [ 2749.772870] ? __cleanup_sighand+0xb0/0xb0 [ 2749.773370] ? _copy_from_user+0xfb/0x1b0 [ 2749.773842] kernel_clone+0xe7/0x980 [ 2749.774270] ? __lockdep_reset_lock+0x180/0x180 [ 2749.774796] ? create_io_thread+0xf0/0xf0 [ 2749.775286] ? ksys_write+0x21a/0x260 [ 2749.775731] ? lock_downgrade+0x6d0/0x6d0 [ 2749.776206] __do_sys_clone3+0x1e5/0x320 [ 2749.776662] ? __do_sys_clone+0x110/0x110 [ 2749.777146] ? rcu_read_lock_any_held+0x75/0xa0 [ 2749.777675] ? vfs_write+0x354/0xb10 [ 2749.778099] ? fput_many+0x2f/0x1a0 [ 2749.778512] ? ksys_write+0x1a9/0x260 [ 2749.778943] ? __ia32_sys_read+0xb0/0xb0 [ 2749.779429] do_syscall_64+0x33/0x40 [ 2749.779849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2749.780433] RIP: 0033:0x7f2b50818b19 [ 2749.780857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.782945] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2749.783831] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2749.784644] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2749.785471] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.786290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2749.787109] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 06:22:52 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2749.811552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2749.832365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:22:52 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a87abcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5f52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:23:07 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 06:23:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="080100001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f5a000080d27896176b6eeade62d836e053289e95ed9ed36e3dbdef473b34", @ANYRES32=r0, @ANYBLOB="165a80020000d9d4412311e6aff72addd111d9d5cf06ce8fb8bd53762c0644171d258d85415d153269a728d9cccbdb994fb4b9815f6bbf7b0c04edc083ae854fb95d5782cbcf6836405382080096006401010014001000fe80000000000000feffffffffffffba08000a00ac1e0101000000"], 0x108}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000200)={0xfffffffffffffffd, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "93de92", 0x28, 0x0, 0x0, @remote, @local, {[@srh={0x84, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [@remote, @private0, @ipv4={'\x00', '\xff\xff', @dev}, @private0, @remote, @dev, @loopback, @empty]}]}}}}}, 0x0) syz_emit_ethernet(0x63, &(0x7f0000000000)={@multicast, @multicast, @void, {@llc_tr={0x11, {@snap={0x1, 0xab, "a3fc", "789cce", 0x16, "4f5e615f606c21afa2419420dd980ea7776ab08c041b6971255f9118b68d986524b1decc40f16678e3737c1de711ff91c2af689c5006660d11b010a9843f7295caabfbf1f4ddad4e7b40ee89"}}}}}, &(0x7f0000000140)={0x1, 0x2, [0x8ab, 0x108, 0x4a5, 0xc03]}) 06:23:07 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000000)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) syz_io_uring_complete(0x0) r1 = epoll_create(0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000380)=""/94, 0x5e}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="18004c268910", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc0}, 0x10040) syz_io_uring_setup(0x3a62, &(0x7f0000000ac0)={0x0, 0x50f1, 0x20, 0x2, 0x209}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000c40)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xa4}, 0x101) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8212}, 0x1}, 0x5) accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x800, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) wait4(0x0, 0x0, 0x2, 0x0) 06:23:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 74) 06:23:07 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000061c0)={0x0, 0x0, &(0x7f0000006180)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2c, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1b}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x7c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat(0xffffffffffffffff, &(0x7f0000000200)='./cgroup/cgroup.procs/file0/file0\x00', 0x53d280, 0x86) ftruncate(r1, 0x1) setsockopt$inet6_int(r4, 0x29, 0xb4017a8758487d15, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, 0x0, 0x0, 0x200}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r6, r5, 0x0, 0x80464c453f) 06:23:07 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 82) 06:23:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:23:07 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09000000000000002e2f2b8cb0d98df97f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x209) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 2764.846242] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2764.871175] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2764.873203] CPU: 1 PID: 18655 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2764.874775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2764.876671] Call Trace: [ 2764.877381] dump_stack+0x107/0x167 [ 2764.878298] sysfs_warn_dup.cold+0x1c/0x29 [ 2764.879245] sysfs_do_create_link_sd+0x122/0x140 [ 2764.880317] sysfs_create_link+0x5f/0xc0 [ 2764.881210] device_add+0x703/0x1c50 [ 2764.882045] ? devlink_add_symlinks+0x970/0x970 [ 2764.883078] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2764.884270] wiphy_register+0x1da6/0x2850 [ 2764.885422] ? wiphy_unregister+0xb90/0xb90 [ 2764.886400] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2764.887624] ieee80211_register_hw+0x23c5/0x38b0 [ 2764.888795] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2764.890101] ? net_generic+0xdb/0x2b0 [ 2764.890971] ? lockdep_init_map_type+0x2c7/0x780 [ 2764.892034] ? memset+0x20/0x50 [ 2764.892765] ? __hrtimer_init+0x12c/0x270 [ 2764.893685] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2764.894809] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2764.895863] ? hwsim_new_radio_nl+0x967/0x1080 [ 2764.896912] ? memcpy+0x39/0x60 [ 2764.897695] hwsim_new_radio_nl+0x991/0x1080 [ 2764.898701] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2764.899899] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2764.901368] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2764.903063] genl_family_rcv_msg_doit+0x22d/0x330 [ 2764.904180] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2764.905663] ? cap_capable+0x1cd/0x230 [ 2764.906549] ? ns_capable+0xe2/0x110 [ 2764.907406] genl_rcv_msg+0x36a/0x5a0 [ 2764.908270] ? genl_get_cmd+0x480/0x480 [ 2764.909158] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2764.910323] ? lock_release+0x680/0x680 [ 2764.911402] ? __lockdep_reset_lock+0x180/0x180 [ 2764.912512] netlink_rcv_skb+0x14b/0x430 [ 2764.913409] ? genl_get_cmd+0x480/0x480 [ 2764.914289] ? netlink_ack+0xab0/0xab0 [ 2764.915165] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2764.916180] ? is_vmalloc_addr+0x7b/0xb0 [ 2764.917081] genl_rcv+0x24/0x40 [ 2764.917831] netlink_unicast+0x54e/0x800 [ 2764.918760] ? netlink_attachskb+0x870/0x870 [ 2764.919782] netlink_sendmsg+0x90f/0xe00 [ 2764.920734] ? netlink_unicast+0x800/0x800 [ 2764.921709] ? netlink_unicast+0x800/0x800 [ 2764.922705] __sock_sendmsg+0x154/0x190 [ 2764.923623] ____sys_sendmsg+0x70d/0x870 [ 2764.924628] ? sock_write_iter+0x3d0/0x3d0 [ 2764.925617] ? do_recvmmsg+0x6d0/0x6d0 [ 2764.926542] ? __lockdep_reset_lock+0x180/0x180 [ 2764.927609] ___sys_sendmsg+0xf3/0x170 [ 2764.928475] ? sendmsg_copy_msghdr+0x160/0x160 [ 2764.929535] ? __fget_files+0x2cf/0x520 [ 2764.930477] ? lock_downgrade+0x6d0/0x6d0 [ 2764.931529] ? __lockdep_reset_lock+0x180/0x180 [ 2764.932654] ? futex_exit_release+0x220/0x220 [ 2764.933771] ? __fget_files+0x2f8/0x520 [ 2764.934718] ? __fget_light+0xea/0x290 [ 2764.935624] __sys_sendmsg+0xe5/0x1b0 [ 2764.936472] ? __sys_sendmsg_sock+0x40/0x40 [ 2764.937439] ? __do_sys_futex+0x2bb/0x480 [ 2764.938406] do_syscall_64+0x33/0x40 [ 2764.939257] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2764.940417] RIP: 0033:0x7f277f764b19 [ 2764.941265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2764.945356] RSP: 002b:00007f277ccda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2764.947056] RAX: ffffffffffffffda RBX: 00007f277f877f60 RCX: 00007f277f764b19 [ 2764.948747] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2764.950334] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2764.951932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2764.953540] R13: 00007fff5bc6ce3f R14: 00007f277ccda300 R15: 0000000000022000 06:23:07 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2, r0) [ 2765.004022] FAULT_INJECTION: forcing a failure. [ 2765.004022] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.006895] CPU: 1 PID: 18707 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2765.008487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.010418] Call Trace: [ 2765.011026] dump_stack+0x107/0x167 [ 2765.011871] should_fail.cold+0x5/0xa [ 2765.012782] ? vm_area_dup+0x78/0x290 [ 2765.013697] should_failslab+0x5/0x20 [ 2765.014624] kmem_cache_alloc+0x5b/0x310 [ 2765.015618] ? lock_downgrade+0x6d0/0x6d0 [ 2765.016612] vm_area_dup+0x78/0x290 [ 2765.017502] ? _cond_resched+0x10/0x30 [ 2765.018448] ? copy_page_range+0x24e9/0x3810 [ 2765.019597] ? vm_area_alloc+0x110/0x110 [ 2765.020517] ? up_write+0x191/0x550 [ 2765.021395] ? vm_iomap_memory+0x190/0x190 [ 2765.022416] ? downgrade_write+0x3a0/0x3a0 [ 2765.023438] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2765.024669] ? __vma_link_rb+0x540/0x700 [ 2765.025699] copy_process+0x298b/0x78b0 [ 2765.026710] ? __cleanup_sighand+0xb0/0xb0 [ 2765.027859] ? _copy_from_user+0xfb/0x1b0 [ 2765.028970] kernel_clone+0xe7/0x980 [ 2765.029896] ? __lockdep_reset_lock+0x180/0x180 [ 2765.031201] ? create_io_thread+0xf0/0xf0 [ 2765.032237] ? ksys_write+0x21a/0x260 [ 2765.033103] ? lock_downgrade+0x6d0/0x6d0 [ 2765.034047] __do_sys_clone3+0x1e5/0x320 [ 2765.034986] ? __do_sys_clone+0x110/0x110 [ 2765.035973] ? rcu_read_lock_any_held+0x75/0xa0 [ 2765.037112] ? vfs_write+0x354/0xb10 [ 2765.037945] ? fput_many+0x2f/0x1a0 [ 2765.038771] ? ksys_write+0x1a9/0x260 [ 2765.039651] ? __ia32_sys_read+0xb0/0xb0 [ 2765.040663] do_syscall_64+0x33/0x40 [ 2765.041510] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2765.042677] RIP: 0033:0x7f2b50818b19 [ 2765.043698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.048069] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2765.050065] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2765.051695] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2765.053361] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.055036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2765.056679] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2765.059107] FAULT_INJECTION: forcing a failure. [ 2765.059107] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.062078] CPU: 1 PID: 18705 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2765.063760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.065748] Call Trace: [ 2765.066379] dump_stack+0x107/0x167 [ 2765.067262] should_fail.cold+0x5/0xa [ 2765.068202] ? vm_area_alloc+0x1c/0x110 [ 2765.069209] should_failslab+0x5/0x20 [ 2765.070198] kmem_cache_alloc+0x5b/0x310 [ 2765.071144] vm_area_alloc+0x1c/0x110 [ 2765.072002] mmap_region+0x97e/0x1500 [ 2765.072922] do_mmap+0xcdb/0x11e0 [ 2765.073745] vm_mmap_pgoff+0x198/0x1f0 [ 2765.074719] ? randomize_page+0xb0/0xb0 [ 2765.075672] ksys_mmap_pgoff+0x41c/0x560 [ 2765.076758] ? find_mergeable_anon_vma+0x250/0x250 [ 2765.078102] do_syscall_64+0x33/0x40 [ 2765.078939] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2765.080133] RIP: 0033:0x7f8bb9614b62 [ 2765.080980] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2765.085430] RSP: 002b:00007f8bb6b8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2765.087142] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bb9614b62 [ 2765.089058] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffe000 [ 2765.091033] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2765.093021] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 2765.094995] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2765.105594] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2765.119342] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 2765.121423] CPU: 1 PID: 18655 Comm: syz-executor.1 Not tainted 5.10.238 #1 [ 2765.123019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.124904] Call Trace: [ 2765.125523] dump_stack+0x107/0x167 [ 2765.126341] sysfs_warn_dup.cold+0x1c/0x29 [ 2765.127311] sysfs_do_create_link_sd+0x122/0x140 [ 2765.128398] sysfs_create_link+0x5f/0xc0 [ 2765.129343] device_add+0x703/0x1c50 [ 2765.130192] ? devlink_add_symlinks+0x970/0x970 [ 2765.131232] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 2765.132454] wiphy_register+0x1da6/0x2850 [ 2765.133511] ? wiphy_unregister+0xb90/0xb90 [ 2765.134572] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 2765.135875] ieee80211_register_hw+0x23c5/0x38b0 [ 2765.137030] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 2765.138167] ? net_generic+0xdb/0x2b0 [ 2765.139098] ? lockdep_init_map_type+0x2c7/0x780 [ 2765.140231] ? memset+0x20/0x50 [ 2765.141023] ? __hrtimer_init+0x12c/0x270 [ 2765.142016] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 2765.143271] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 2765.144384] ? hwsim_new_radio_nl+0x967/0x1080 [ 2765.145487] ? memcpy+0x39/0x60 [ 2765.146287] hwsim_new_radio_nl+0x991/0x1080 [ 2765.147353] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2765.148622] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 2765.150205] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 2765.151813] genl_family_rcv_msg_doit+0x22d/0x330 [ 2765.152976] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 2765.154541] ? cap_capable+0x1cd/0x230 [ 2765.155510] ? ns_capable+0xe2/0x110 [ 2765.156410] genl_rcv_msg+0x36a/0x5a0 [ 2765.157336] ? genl_get_cmd+0x480/0x480 [ 2765.158306] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 2765.159577] ? lock_release+0x680/0x680 [ 2765.160550] ? __lockdep_reset_lock+0x180/0x180 [ 2765.161673] netlink_rcv_skb+0x14b/0x430 [ 2765.162648] ? genl_get_cmd+0x480/0x480 [ 2765.163624] ? netlink_ack+0xab0/0xab0 [ 2765.164569] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2765.165660] ? is_vmalloc_addr+0x7b/0xb0 [ 2765.166639] genl_rcv+0x24/0x40 [ 2765.167441] netlink_unicast+0x54e/0x800 [ 2765.168427] ? netlink_attachskb+0x870/0x870 [ 2765.169487] netlink_sendmsg+0x90f/0xe00 [ 2765.170457] ? netlink_unicast+0x800/0x800 [ 2765.171489] ? netlink_unicast+0x800/0x800 [ 2765.172509] __sock_sendmsg+0x154/0x190 [ 2765.173465] ____sys_sendmsg+0x70d/0x870 [ 2765.174440] ? sock_write_iter+0x3d0/0x3d0 [ 2765.175498] ? do_recvmmsg+0x6d0/0x6d0 [ 2765.176459] ? __lockdep_reset_lock+0x180/0x180 [ 2765.177596] ___sys_sendmsg+0xf3/0x170 [ 2765.178539] ? sendmsg_copy_msghdr+0x160/0x160 [ 2765.179683] ? __fget_files+0x2cf/0x520 [ 2765.180653] ? lock_downgrade+0x6d0/0x6d0 [ 2765.181647] ? __lockdep_reset_lock+0x180/0x180 [ 2765.182806] ? futex_exit_release+0x220/0x220 [ 2765.183918] ? __fget_files+0x2f8/0x520 [ 2765.184888] ? __fget_light+0xea/0x290 [ 2765.185841] __sys_sendmsg+0xe5/0x1b0 [ 2765.186768] ? __sys_sendmsg_sock+0x40/0x40 [ 2765.187803] ? __do_sys_futex+0x2bb/0x480 [ 2765.188826] do_syscall_64+0x33/0x40 [ 2765.189733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2765.191001] RIP: 0033:0x7f277f764b19 [ 2765.191918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.196320] RSP: 002b:00007f277ccda188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2765.198175] RAX: ffffffffffffffda RBX: 00007f277f877f60 RCX: 00007f277f764b19 [ 2765.199922] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2765.201657] RBP: 00007f277f7bef6d R08: 0000000000000000 R09: 0000000000000000 [ 2765.203365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2765.205112] R13: 00007fff5bc6ce3f R14: 00007f277ccda300 R15: 0000000000022000 06:23:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:23:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 75) 06:23:07 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 83) 06:23:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:23:07 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2400, r0) [ 2765.367956] FAULT_INJECTION: forcing a failure. [ 2765.367956] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.368787] FAULT_INJECTION: forcing a failure. [ 2765.368787] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.370857] CPU: 0 PID: 18784 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2765.375198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.377252] Call Trace: [ 2765.377896] dump_stack+0x107/0x167 [ 2765.378779] should_fail.cold+0x5/0xa [ 2765.379738] ? ptlock_alloc+0x1d/0x70 [ 2765.380661] should_failslab+0x5/0x20 [ 2765.381573] kmem_cache_alloc+0x5b/0x310 [ 2765.382556] ptlock_alloc+0x1d/0x70 [ 2765.383448] pte_alloc_one+0x68/0x1a0 [ 2765.384418] __pte_alloc+0x1d/0x330 [ 2765.385319] copy_page_range+0x1b62/0x3810 [ 2765.386364] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2765.387481] ? finish_task_switch+0xef/0x5d0 [ 2765.388624] ? up_write+0x191/0x550 [ 2765.389500] ? vm_iomap_memory+0x190/0x190 [ 2765.390544] ? downgrade_write+0x3a0/0x3a0 [ 2765.391598] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2765.392930] ? __vma_link_rb+0x540/0x700 [ 2765.393930] copy_process+0x7654/0x78b0 [ 2765.394934] ? __cleanup_sighand+0xb0/0xb0 [ 2765.396012] ? _copy_from_user+0xfb/0x1b0 [ 2765.397022] kernel_clone+0xe7/0x980 [ 2765.397908] ? __lockdep_reset_lock+0x180/0x180 [ 2765.399045] ? create_io_thread+0xf0/0xf0 [ 2765.400112] ? ksys_write+0x21a/0x260 [ 2765.401056] ? lock_downgrade+0x6d0/0x6d0 [ 2765.402077] __do_sys_clone3+0x1e5/0x320 [ 2765.403074] ? __do_sys_clone+0x110/0x110 [ 2765.404113] ? rcu_read_lock_any_held+0x75/0xa0 [ 2765.405236] ? vfs_write+0x354/0xb10 [ 2765.406128] ? fput_many+0x2f/0x1a0 [ 2765.407010] ? ksys_write+0x1a9/0x260 [ 2765.407986] ? __ia32_sys_read+0xb0/0xb0 [ 2765.409031] do_syscall_64+0x33/0x40 [ 2765.409952] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2765.411195] RIP: 0033:0x7f2b50818b19 [ 2765.412128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.416571] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2765.418418] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2765.420163] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2765.421919] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.423694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2765.425439] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2765.427220] CPU: 1 PID: 18785 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2765.428690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.430413] Call Trace: [ 2765.430977] dump_stack+0x107/0x167 [ 2765.431766] should_fail.cold+0x5/0xa [ 2765.432571] ? anon_vma_clone+0xdc/0x590 [ 2765.433426] should_failslab+0x5/0x20 [ 2765.434228] kmem_cache_alloc+0x5b/0x310 [ 2765.435089] anon_vma_clone+0xdc/0x590 [ 2765.435926] __split_vma+0x17c/0x4e0 [ 2765.436737] __do_munmap+0x365/0x1260 [ 2765.437539] ? arch_get_unmapped_area+0x450/0x450 [ 2765.438565] ? lock_release+0x680/0x680 [ 2765.439394] mmap_region+0x7c8/0x1500 [ 2765.440219] do_mmap+0xcdb/0x11e0 [ 2765.440960] vm_mmap_pgoff+0x198/0x1f0 [ 2765.441791] ? randomize_page+0xb0/0xb0 [ 2765.442658] ksys_mmap_pgoff+0x41c/0x560 [ 2765.443532] ? find_mergeable_anon_vma+0x250/0x250 [ 2765.444592] do_syscall_64+0x33/0x40 [ 2765.445384] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2765.446466] RIP: 0033:0x7f8bb9614b62 [ 2765.447236] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2765.451109] RSP: 002b:00007f8bb6b8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2765.452745] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bb9614b62 [ 2765.454487] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffe000 [ 2765.456141] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2765.457734] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 2765.459466] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:23:07 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000c80)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRESHEX, @ANYRES32=0xee00, @ANYBLOB="2e2f6e696c6530661f04f1bf92562848be2807bab8ccb6907b33521edb186d1f5555689f868690a48f1e8cbe176681c4b00bba15e965fea9e32032bec4505a3f52bfe689184a2d77bbbdf2f3c275c1d0842353168b2a28c46b2f9462a692de3493f9df897a15763acb5fcad407df9d9abfbe1d16489205904bae6976fb46ee8db0a391dfa03c39681b9d91e5eed15a18efd90677c9d76fa1"]) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) preadv(r2, &(0x7f0000000b80)=[{&(0x7f0000000400)=""/150, 0x96}, {&(0x7f00000007c0)=""/215, 0xd7}, {&(0x7f00000008c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f00000009c0)=""/247, 0xf7}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000ac0)=""/82, 0x52}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f0000000b40)=""/51, 0x33}], 0xa, 0x3f, 0x6) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) openat$sr(0xffffffffffffff9c, &(0x7f0000000c40), 0x30a00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) r6 = signalfd(r5, &(0x7f00000003c0)={[0x1]}, 0x8) fcntl$setstatus(r6, 0x4, 0x46800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r7, 0x0, 0x0, 0x1000002) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000005c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x2) 06:23:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}]}, 0x1c}}, 0x1) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000200)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @initial, {0x5, 0x4}}, @ver_80211n={0x0, 0x40ac, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x0, 0x3, 0x40, @val={0x10, 0x1, 0xde}, [{0xdd, 0x60, "578d2187e622e49b54e92fd854a71439ab8afe451e27de34911f27459acfc292b8d78524ac6887d6573d2f72f30a55a0f2b90f9d09e26223a975c25db22c2572b1fa65b2556ce7e833948cbeb8695f4f7cf2bf19ea0d2930d9621b0fd1662ff3"}]}, 0x87) nanosleep(&(0x7f0000000140), &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@ctrl_frame=@bar={{}, {0x4}, @device_b, @broadcast, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x3, {0x7, 0x80}, "6dc706265929614a"}, {0x0, 0xa, {0x8, 0x74}, "d2729898c1a222c8"}, {0x0, 0x5, {0x7, 0x20}, "2f7fe9811eaa028e"}, {0x0, 0x4, {0x5, 0x7f}}]}}, 0x42) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r3, &(0x7f0000000380)=""/30, 0x1e, 0x2000, &(0x7f00000003c0)=@hci={0x1f, 0x4, 0x4}, 0x80) nanosleep(&(0x7f00000002c0)={r1, r2+10000000}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}}) r4 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$inet_udp(0x2, 0x2, 0x0) sched_rr_get_interval(r4, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 06:23:08 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x3}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0x6, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRESOCT]) flock(r2, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r2, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r3, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x140000000, &(0x7f0000ffe000/0x2000)=nil, 0x8) 06:23:08 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2401, r0) [ 2765.562174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2765.606870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2765.627849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:23:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 76) 06:23:23 executing program 5: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81019021}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000440)) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r3, 0x1, 0x32, &(0x7f0000000080), 0x4) dup(r3) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\\&\\^+%))#7\x00', r4) add_key$keyring(&(0x7f0000000300), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) 06:23:23 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2402, r0) 06:23:23 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d0829d4a353c1d238172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36bc17e942d79bba738bdf3d075517f097cc8a4dabcc2a7d9b4ba52c3e261690ca72eeeb6ae9bb5d52", @ANYRES32, @ANYBLOB="09000c61274aa52c69b1547a19870000e5caee8c000000002e2f2b8cb0d98df97f1ec0722c66202279d97e7289"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:23:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)=0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x4c, 0x0, &(0x7f0000004b80)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in6=@private2}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r3) syz_io_uring_setup(0x5e76, &(0x7f00000004c0)={0x0, 0x6f2f, 0x1, 0x2, 0x1bf}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) r4 = creat(&(0x7f0000000240)='./file0\x00', 0xc) syz_io_uring_submit(r3, r2, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r4, 0x2, 0x0, 0x20}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000c00)={0x7, [], 0x3a}) 06:23:23 executing program 1: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x28}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x40, 0x200, 0x70bd27, 0x25dfdbfb, {0x20}, [@generic="e4f7b13665f421069bb40040ee20707960cbf3d239de809914fd5d7ac6ba4ee4be701ceec842154fd68984bdcd"]}, 0x44}, 0x1, 0x0, 0x0, 0x24000004}, 0x20011) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000500)='hpfs\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r4, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x98, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x81, 0x11, 0x0, 0x1, [@generic="cabdd69942ae86268a922047d9b931f72731084d0549ba3c39c937995472e7f2c4854ccde899bf6e5e124c44777b29b0c0368c91fc2f36ad312f94d2f47690f0c18af62f53c4dcf3c63e9bcd1d5b817bd1df8e075435d45ef1d2286d14eb74dc272eda069ed0643222101a57610aa97329fbf38aeb21dfafba4f9f7eaf"]}]}, 0x98}}, 0x0) [ 2781.367178] FAULT_INJECTION: forcing a failure. [ 2781.367178] name failslab, interval 1, probability 0, space 0, times 0 06:23:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() [ 2781.370057] CPU: 0 PID: 18822 Comm: syz-executor.0 Not tainted 5.10.238 #1 [ 2781.371912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.373947] Call Trace: [ 2781.374598] dump_stack+0x107/0x167 [ 2781.375511] should_fail.cold+0x5/0xa [ 2781.376463] ? vm_area_dup+0x78/0x290 [ 2781.376921] FAULT_INJECTION: forcing a failure. [ 2781.376921] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2781.377399] should_failslab+0x5/0x20 [ 2781.377419] kmem_cache_alloc+0x5b/0x310 [ 2781.377447] vm_area_dup+0x78/0x290 [ 2781.381605] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2781.382747] ? lock_downgrade+0x6d0/0x6d0 [ 2781.383774] ? copy_page_range+0x24e9/0x3810 [ 2781.384877] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2781.386021] ? avc_has_extended_perms+0xf40/0xf40 [ 2781.387213] ? vm_area_alloc+0x110/0x110 [ 2781.388228] ? selinux_vm_enough_memory+0x114/0x180 [ 2781.389446] ? selinux_sb_statfs+0x250/0x250 [ 2781.390536] ? percpu_counter_add_batch+0x8b/0x140 [ 2781.391760] ? __vm_enough_memory+0x184/0x360 [ 2781.392851] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 2781.394130] copy_process+0x298b/0x78b0 [ 2781.395146] ? __cleanup_sighand+0xb0/0xb0 [ 2781.396214] ? _copy_from_user+0xfb/0x1b0 [ 2781.397230] kernel_clone+0xe7/0x980 [ 2781.398145] ? __lockdep_reset_lock+0x180/0x180 [ 2781.399431] ? create_io_thread+0xf0/0xf0 [ 2781.400749] ? ksys_write+0x21a/0x260 [ 2781.401799] ? lock_downgrade+0x6d0/0x6d0 [ 2781.402834] __do_sys_clone3+0x1e5/0x320 [ 2781.403845] ? __do_sys_clone+0x110/0x110 [ 2781.404882] ? rcu_read_lock_any_held+0x75/0xa0 [ 2781.406028] ? vfs_write+0x354/0xb10 [ 2781.406946] ? fput_many+0x2f/0x1a0 [ 2781.407859] ? ksys_write+0x1a9/0x260 [ 2781.408804] ? __ia32_sys_read+0xb0/0xb0 [ 2781.409836] do_syscall_64+0x33/0x40 [ 2781.410762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.412037] RIP: 0033:0x7f2b50818b19 [ 2781.412953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2781.417486] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2781.419426] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2781.421204] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2781.422964] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.424742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2781.426495] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2781.428290] CPU: 1 PID: 18829 Comm: syz-executor.4 Not tainted 5.10.238 #1 [ 2781.429169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.430140] Call Trace: [ 2781.430458] dump_stack+0x107/0x167 [ 2781.430886] should_fail.cold+0x5/0xa [ 2781.431336] __alloc_pages_nodemask+0x182/0x600 [ 2781.431887] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2781.432591] ? walk_mem_res+0x170/0x170 [ 2781.433066] alloc_pages_current+0x187/0x280 [ 2781.433584] pte_alloc_one+0x16/0x1a0 [ 2781.434046] __pte_alloc+0x1d/0x330 [ 2781.434474] remap_pfn_range_internal+0x9a3/0xf60 [ 2781.435045] ? lookup_memtype+0x5b/0x200 [ 2781.435530] ? apply_to_existing_page_range+0x40/0x40 [ 2781.436147] remap_pfn_range+0xcd/0x160 [ 2781.436614] ? remap_pfn_range_notrack+0x70/0x70 [ 2781.437165] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2781.437772] io_uring_mmap+0x398/0x530 [ 2781.438226] mmap_file+0x5e/0xe0 [ 2781.438621] mmap_region+0xc49/0x1500 [ 2781.439084] do_mmap+0xcdb/0x11e0 [ 2781.439496] vm_mmap_pgoff+0x198/0x1f0 [ 2781.439967] ? randomize_page+0xb0/0xb0 [ 2781.440445] ksys_mmap_pgoff+0x41c/0x560 [ 2781.440926] ? find_mergeable_anon_vma+0x250/0x250 [ 2781.441515] do_syscall_64+0x33/0x40 [ 2781.441949] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.442554] RIP: 0033:0x7f8bb9614b62 [ 2781.442987] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2781.445130] RSP: 002b:00007f8bb6b8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2781.446037] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bb9614b62 [ 2781.446863] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffe000 [ 2781.447699] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2781.448544] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 2781.449380] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:23:23 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 84) [ 2781.453336] ------------[ cut here ]------------ [ 2781.453356] WARNING: CPU: 1 PID: 18829 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2781.453360] Modules linked in: [ 2781.453374] CPU: 1 PID: 18829 Comm: syz-executor.4 Not tainted 5.10.238 #1 06:23:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 77) [ 2781.453379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.453390] RIP: 0010:get_pat_info+0x216/0x270 [ 2781.453401] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 51 89 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 3a 89 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 65 8f 5a 00 e9 [ 2781.453407] RSP: 0018:ffff888058cd7898 EFLAGS: 00010246 [ 2781.453416] RAX: 0000000000040000 RBX: ffff888049176300 RCX: ffffc900013f9000 [ 2781.453422] RDX: 0000000000040000 RSI: ffffffff81124696 RDI: 0000000000000007 [ 2781.453428] RBP: ffff888058cd7950 R08: 0000000000000000 R09: ffff888058cd7820 [ 2781.453435] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2781.453441] R13: 1ffff1100b19af13 R14: 0000000000000000 R15: ffff888049176350 [ 2781.453451] FS: 00007f8bb6b8a700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 2781.453459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2781.453466] CR2: 0000001b2d521000 CR3: 000000006367e000 CR4: 0000000000350ee0 [ 2781.453469] Call Trace: [ 2781.453482] ? pgprot_writethrough+0xc0/0xc0 [ 2781.453492] ? finish_task_switch+0x126/0x5d0 [ 2781.453500] ? finish_task_switch+0xef/0x5d0 [ 2781.453517] untrack_pfn+0xdc/0x240 [ 2781.453528] ? track_pfn_insert+0x150/0x150 [ 2781.453541] ? lock_downgrade+0x6d0/0x6d0 [ 2781.453551] ? uprobe_munmap+0x95/0x560 [ 2781.453565] unmap_single_vma+0x1bc/0x300 [ 2781.453580] zap_page_range_single+0x2ce/0x450 [ 2781.453592] ? unmap_single_vma+0x300/0x300 [ 2781.453602] ? remap_pfn_range_internal+0xc56/0xf60 [ 2781.453618] ? lookup_memtype+0x5b/0x200 [ 2781.453637] ? apply_to_existing_page_range+0x40/0x40 [ 2781.453655] remap_pfn_range+0x139/0x160 [ 2781.453667] ? remap_pfn_range_notrack+0x70/0x70 [ 2781.453680] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2781.453695] io_uring_mmap+0x398/0x530 [ 2781.453708] mmap_file+0x5e/0xe0 06:23:24 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 85) [ 2781.453718] mmap_region+0xc49/0x1500 [ 2781.453737] do_mmap+0xcdb/0x11e0 [ 2781.453752] vm_mmap_pgoff+0x198/0x1f0 [ 2781.453766] ? randomize_page+0xb0/0xb0 [ 2781.453785] ksys_mmap_pgoff+0x41c/0x560 [ 2781.453796] ? find_mergeable_anon_vma+0x250/0x250 [ 2781.453814] do_syscall_64+0x33/0x40 [ 2781.453825] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.453832] RIP: 0033:0x7f8bb9614b62 [ 2781.453841] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2781.453847] RSP: 002b:00007f8bb6b8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2781.453858] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bb9614b62 [ 2781.453864] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffe000 [ 2781.453870] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2781.453876] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 2781.453882] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 [ 2781.453899] irq event stamp: 991 [ 2781.453911] hardirqs last enabled at (997): [] vprintk_emit+0x490/0x4e0 [ 2781.453923] hardirqs last disabled at (1002): [] vprintk_emit+0x422/0x4e0 [ 2781.453934] softirqs last enabled at (664): [] asm_call_irq_on_stack+0x12/0x20 [ 2781.453946] softirqs last disabled at (577): [] asm_call_irq_on_stack+0x12/0x20 [ 2781.453950] ---[ end trace 4880889a38ca997d ]--- [ 2781.563659] FAULT_INJECTION: forcing a failure. [ 2781.563659] name failslab, interval 1, probability 0, space 0, times 0 [ 2781.578858] CPU: 1 PID: 18840 Comm: syz-executor.0 Tainted: G W 5.10.238 #1 [ 2781.579808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.580752] Call Trace: [ 2781.581055] dump_stack+0x107/0x167 [ 2781.581473] should_fail.cold+0x5/0xa [ 2781.581905] ? create_object.isra.0+0x3a/0xa20 [ 2781.582421] should_failslab+0x5/0x20 [ 2781.582858] kmem_cache_alloc+0x5b/0x310 [ 2781.583326] create_object.isra.0+0x3a/0xa20 [ 2781.583829] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2781.584410] kmem_cache_alloc+0x159/0x310 [ 2781.584887] vm_area_dup+0x78/0x290 [ 2781.585304] ? avc_has_perm_noaudit+0x1c9/0x3e0 [ 2781.585826] ? lock_downgrade+0x6d0/0x6d0 [ 2781.586291] ? copy_page_range+0x24e9/0x3810 [ 2781.586796] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2781.587321] ? avc_has_extended_perms+0xf40/0xf40 [ 2781.587877] ? vm_area_alloc+0x110/0x110 [ 2781.588346] ? selinux_vm_enough_memory+0x114/0x180 [ 2781.588914] ? selinux_sb_statfs+0x250/0x250 [ 2781.589410] ? percpu_counter_add_batch+0x8b/0x140 [ 2781.589975] ? __vm_enough_memory+0x184/0x360 [ 2781.590511] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 2781.591115] copy_process+0x298b/0x78b0 [ 2781.591611] ? __cleanup_sighand+0xb0/0xb0 [ 2781.592116] ? _copy_from_user+0xfb/0x1b0 [ 2781.592612] kernel_clone+0xe7/0x980 [ 2781.593052] ? __lockdep_reset_lock+0x180/0x180 [ 2781.593602] ? create_io_thread+0xf0/0xf0 [ 2781.594098] ? ksys_write+0x21a/0x260 [ 2781.594543] ? lock_downgrade+0x6d0/0x6d0 [ 2781.595027] __do_sys_clone3+0x1e5/0x320 [ 2781.595503] ? __do_sys_clone+0x110/0x110 [ 2781.596014] ? rcu_read_lock_any_held+0x75/0xa0 [ 2781.596556] ? vfs_write+0x354/0xb10 [ 2781.597006] ? fput_many+0x2f/0x1a0 [ 2781.597434] ? ksys_write+0x1a9/0x260 [ 2781.597882] ? __ia32_sys_read+0xb0/0xb0 [ 2781.598366] do_syscall_64+0x33/0x40 [ 2781.598816] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.599419] RIP: 0033:0x7f2b50818b19 [ 2781.599866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2781.602007] RSP: 002b:00007f2b4dd8e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2781.602898] RAX: ffffffffffffffda RBX: 00007f2b5092bf60 RCX: 00007f2b50818b19 [ 2781.603788] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000740 [ 2781.604624] RBP: 00007f2b4dd8e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.605449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2781.606293] R13: 00007ffea68b267f R14: 00007f2b4dd8e300 R15: 0000000000022000 [ 2781.634393] FAULT_INJECTION: forcing a failure. [ 2781.634393] name failslab, interval 1, probability 0, space 0, times 0 [ 2781.635863] CPU: 1 PID: 18845 Comm: syz-executor.4 Tainted: G W 5.10.238 #1 [ 2781.636830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.637802] Call Trace: [ 2781.638125] dump_stack+0x107/0x167 [ 2781.638554] should_fail.cold+0x5/0xa [ 2781.639003] ? ptlock_alloc+0x1d/0x70 [ 2781.639445] should_failslab+0x5/0x20 [ 2781.639901] kmem_cache_alloc+0x5b/0x310 [ 2781.640382] ptlock_alloc+0x1d/0x70 [ 2781.640812] pte_alloc_one+0x68/0x1a0 [ 2781.641258] __pte_alloc+0x1d/0x330 [ 2781.641685] remap_pfn_range_internal+0x9a3/0xf60 [ 2781.642252] ? lookup_memtype+0x5b/0x200 [ 2781.642734] ? apply_to_existing_page_range+0x40/0x40 [ 2781.643340] remap_pfn_range+0xcd/0x160 [ 2781.643825] ? remap_pfn_range_notrack+0x70/0x70 [ 2781.644401] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2781.645012] io_uring_mmap+0x398/0x530 [ 2781.645473] mmap_file+0x5e/0xe0 [ 2781.645869] mmap_region+0xc49/0x1500 [ 2781.646322] do_mmap+0xcdb/0x11e0 [ 2781.646734] vm_mmap_pgoff+0x198/0x1f0 [ 2781.647193] ? randomize_page+0xb0/0xb0 [ 2781.647673] ksys_mmap_pgoff+0x41c/0x560 [ 2781.648148] ? find_mergeable_anon_vma+0x250/0x250 [ 2781.648731] do_syscall_64+0x33/0x40 [ 2781.649170] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.649771] RIP: 0033:0x7f8bb9614b62 [ 2781.650203] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2781.652360] RSP: 002b:00007f8bb6b8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2781.653252] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bb9614b62 [ 2781.654094] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffe000 [ 2781.654928] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2781.655775] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 2781.656601] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:23:24 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2403, r0) 06:23:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:23:24 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="01fb110000001800000000006f1c972d7313f0ae1e5d38172d998c0297a2dc73e6a4451fe349b613f3c2568b8a05e93c7f36f097cc8a4dabcc2a7d9b4ba52c2e261690ca72eeeb6ae9bb5d52bc9679b84e3775", @ANYRES32, @ANYBLOB="09002000000000002e2f2b8cb0d98dd87f1ec4722c660000000000"]) flock(r1, 0xd69f0b97d7161db7) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000000), 0x1, 0xd4db0fb921676202) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xffffffffffffff80, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:23:24 executing program 4: syz_io_uring_setup(0x3a79, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) (fail_nth: 86) 06:23:24 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fork() rt_sigqueueinfo(r1, 0x5, &(0x7f0000000200)={0x0, 0x0, 0xfffffc00}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) [ 2781.748474] FAULT_INJECTION: forcing a failure. [ 2781.748474] name failslab, interval 1, probability 0, space 0, times 0 [ 2781.749892] CPU: 1 PID: 18857 Comm: syz-executor.4 Tainted: G W 5.10.238 #1 [ 2781.750842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.751799] Call Trace: [ 2781.752104] dump_stack+0x107/0x167 [ 2781.752519] should_fail.cold+0x5/0xa [ 2781.752950] ? create_object.isra.0+0x3a/0xa20 [ 2781.753472] should_failslab+0x5/0x20 [ 2781.753903] kmem_cache_alloc+0x5b/0x310 [ 2781.754364] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 2781.755056] create_object.isra.0+0x3a/0xa20 [ 2781.755556] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2781.756153] kmem_cache_alloc+0x159/0x310 [ 2781.756629] ptlock_alloc+0x1d/0x70 [ 2781.757043] pte_alloc_one+0x68/0x1a0 [ 2781.757479] __pte_alloc+0x1d/0x330 [ 2781.757898] remap_pfn_range_internal+0x9a3/0xf60 [ 2781.758453] ? lookup_memtype+0x5b/0x200 [ 2781.758922] ? apply_to_existing_page_range+0x40/0x40 [ 2781.759516] remap_pfn_range+0xcd/0x160 [ 2781.759981] ? remap_pfn_range_notrack+0x70/0x70 [ 2781.760522] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2781.761108] io_uring_mmap+0x398/0x530 [ 2781.761561] mmap_file+0x5e/0xe0 [ 2781.761946] mmap_region+0xc49/0x1500 [ 2781.762387] do_mmap+0xcdb/0x11e0 [ 2781.762786] vm_mmap_pgoff+0x198/0x1f0 [ 2781.763231] ? randomize_page+0xb0/0xb0 [ 2781.763704] ksys_mmap_pgoff+0x41c/0x560 [ 2781.764164] ? find_mergeable_anon_vma+0x250/0x250 [ 2781.764733] do_syscall_64+0x33/0x40 [ 2781.765154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2781.765737] RIP: 0033:0x7f8bb9614b62 [ 2781.766157] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2781.768243] RSP: 002b:00007f8bb6b8a0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2781.769107] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f8bb9614b62 [ 2781.769912] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffe000 [ 2781.770721] RBP: 0000000020ffe000 R08: 0000000000000004 R09: 0000000000000000 [ 2781.771530] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100 [ 2781.772341] R13: 0000000020ffc000 R14: 0000000020000240 R15: 0000000020ffe000 06:23:24 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x382}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x0, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0xffffffc1}, 0x0, 0xf, r0, 0x3) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000200)=""/14, 0xe}], 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0e, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000700)={0x0, 0x4, 0x7, 0xff, r2}) ptrace$peek(0x1, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fork() 06:23:24 executing program 3: unshare(0x28020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x4b47, r0) VM DIAGNOSIS: 06:23:24 Registers: info registers vcpu 0 RAX=0000000000000011 RBX=0000000000000011 RCX=ffffc90001bfd000 RDX=00000000000001f4 RSI=ffffffff81f4a211 RDI=0000000000000007 RBP=00000000000101f4 RSP=ffff888058f77120 R8 =0000000000000000 R9 =0000000000006d2c R10=0000000000010000 R11=0000000000000001 R12=ffff88800f4c0058 R13=ffff88800f4c0050 R14=ffff88800f4c0048 R15=ffff88800f4c0060 RIP=ffffffff81f4a217 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f74b12c0700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f49e003f098 CR3=000000003e1c2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000dd060a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fc157e797c000007fc157e797c8 XMM02=00007fc157e797e000007fc157e797c0 XMM03=00007fc157e797c800007fc157e797c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e1721 RDI=ffffffff879f5140 RBP=ffffffff879f5100 RSP=ffff888058d8f838 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000031 R13=0000000000000031 R14=ffffffff879f5100 R15=dffffc0000000000 RIP=ffffffff822e1778 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2c516d2700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc7b1ffd260 CR3=00000000568fa000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000