9] ? security_inode_permission+0xcb/0x100 [ 1797.756289] link_path_walk.part.0+0x699/0xbf0 [ 1797.757039] netlink: 996 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1797.757225] ? walk_component+0x6a0/0x6a0 [ 1797.757259] path_parentat+0xa8/0x1b0 [ 1797.759914] filename_parentat+0x19a/0x570 [ 1797.760777] ? getname+0xd0/0xd0 [ 1797.761466] ? lock_acquire+0x197/0x470 [ 1797.762302] ? __might_fault+0xd3/0x180 [ 1797.763121] ? lock_downgrade+0x6d0/0x6d0 [ 1797.763969] ? __virt_addr_valid+0x170/0x5d0 [ 1797.764872] filename_create+0x9e/0x4a0 [ 1797.765696] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1797.766810] ? filename_parentat+0x570/0x570 [ 1797.767724] do_mkdirat+0xa2/0x2b0 [ 1797.768459] ? user_path_create+0xf0/0xf0 [ 1797.769307] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1797.770375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1797.771440] do_syscall_64+0x33/0x40 [ 1797.772202] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1797.773245] RIP: 0033:0x7f83de4d1b19 [ 1797.774008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1797.778011] RSP: 002b:00007f83dba47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1797.779572] RAX: ffffffffffffffda RBX: 00007f83de5e4f60 RCX: 00007f83de4d1b19 [ 1797.779585] RDX: 00000000000001ff RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1797.779596] RBP: 00007f83dba471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1797.779608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.779619] R13: 00007ffea935e57f R14: 00007f83dba47300 R15: 0000000000022000 15:41:40 executing program 3: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000d038c8a9fb3500d5596e79a7cd7b05ad913adf5bc1e0c3b5f41e13c0d67cce91187363bfa6deb66d2ffb50541a293ae33331ee585af884f65398d11288994fafcb5fcb7f41f74016ce86583aef85b13fb7cf7df5a4fc3828d19873667a103cda952d78dc8515a81072425929589c51e01c02f90404408cced723fb7f2b241a958ff7b4f66270f8ce325670e0616902e4ca6087e5e85946956e0353d8b140885ad05c52011def5234925f", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x001\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000018000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00.\x00']) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0xe, &(0x7f0000000240)={&(0x7f0000000a00)={0x3f8, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x3f8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = fcntl$dupfd(r0, 0x406, r2) openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) 15:41:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x600, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:41:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 15:41:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x98, &(0x7f0000012c00)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80c80, 0x1a) creat(&(0x7f00000000c0)='./file0\x00', 0x20) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x24) 15:41:40 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) [ 1797.839131] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12906 comm=syz-executor.5 15:41:40 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:41:40 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac24874a332d8f36180837e0a0e04bc05f3bc7e5f345942482a0a36c4dca255302365273066e9ad08636950ae7edd4fb661873468c936a8ab025332cb4fde4a597d2ef835851d5d9da85ee7ee29a0cccc42c0890fcd87f1fb93a41e2d163c0c873b3bc977f54d1b86e619ff95b60462dec467db14753e1d9b3801a4f19e36d67581ba259c7f9a8b69699e4cea0337f4f9a8539"]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80c80, 0x1a) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x24) faccessat2(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 15:41:40 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv(r3, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/215, 0xd7}, {&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000640)=""/4, 0x4}, {&(0x7f0000000680)=""/124, 0x7c}, {&(0x7f0000000ec0)=""/4107, 0x100b}, {&(0x7f0000004f40)=""/4105, 0x1009}, {&(0x7f0000000580)=""/71, 0x47}, {&(0x7f0000000ac0)=""/165, 0xa5}, {&(0x7f0000001f00)=""/239, 0xef}, {&(0x7f0000002000)=""/4096, 0x1000}], 0xb, &(0x7f0000000740)=[{&(0x7f0000000800)=""/135, 0x87}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000000dc0)=""/200, 0xc8}, {&(0x7f0000000a00)=""/121, 0x79}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/203, 0xcb}], 0x8, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x9, 0x6, 0x57, 0x0, 0x0, 0x10000, 0x100, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x0, @perf_config_ext={0x9, 0x4}, 0x80, 0x80000000, 0x80000000, 0x3, 0x0, 0xa293, 0x1f, 0x0, 0x6}, 0xffffffffffffffff, 0x3, r0, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = getpgrp(0x0) pidfd_open(r5, 0x0) perf_event_open(&(0x7f0000000c40)={0x5, 0x80, 0x4, 0x3, 0xca, 0x8, 0x0, 0x3, 0x10001, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x2}, 0xa002, 0x5, 0x178, 0x4, 0x6, 0x1852, 0x8, 0x0, 0x3, 0x0, 0x5000000000000}, r5, 0x5, 0xffffffffffffffff, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, 0x0) copy_file_range(r6, 0x0, r4, 0x0, 0x10001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x20d315) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x20, 0x8, 0xbd, 0xeb, 0x0, 0x6, 0x24000, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xaa, 0x20}, 0xa401, 0x10001, 0x2, 0x7, 0xda49, 0x2, 0x81, 0x0, 0x1, 0x0, 0xf71}, r3, 0x5, r7, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x28, r1, 0x711, 0x0, 0x0, {{0x5}, {@void, @val={0x28}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) 15:41:40 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) (fail_nth: 6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 1798.009235] FAULT_INJECTION: forcing a failure. [ 1798.009235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.010695] CPU: 1 PID: 12950 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 1798.011485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1798.012569] Call Trace: [ 1798.013002] dump_stack+0x107/0x167 [ 1798.013422] should_fail.cold+0x5/0xa [ 1798.013866] _copy_to_user+0x2e/0x180 [ 1798.014308] simple_read_from_buffer+0xcc/0x160 [ 1798.014857] proc_fail_nth_read+0x198/0x230 [ 1798.015351] ? proc_sessionid_read+0x230/0x230 [ 1798.015880] ? security_file_permission+0xb1/0xe0 [ 1798.016434] ? proc_sessionid_read+0x230/0x230 [ 1798.016963] vfs_read+0x228/0x620 [ 1798.017366] ksys_read+0x12d/0x260 [ 1798.017775] ? vfs_write+0xb10/0xb10 [ 1798.018206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1798.018818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1798.019412] do_syscall_64+0x33/0x40 [ 1798.019840] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1798.020423] RIP: 0033:0x7f83de48469c [ 1798.020850] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1798.022956] RSP: 002b:00007f83dba47170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1798.023828] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f83de48469c [ 1798.024642] RDX: 000000000000000f RSI: 00007f83dba471e0 RDI: 0000000000000004 [ 1798.025472] RBP: 00007f83dba471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1798.026288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.027113] R13: 00007ffea935e57f R14: 00007f83dba47300 R15: 0000000000022000 [ 1798.086091] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1798.281567] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 15:41:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:41:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0xffffffff00000000}, 0x0) 15:41:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x900, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:41:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80c80, 0x1a) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@reiserfs_4={0x10, 0x4, {0x584c, 0x101, 0x5, 0x7}}, &(0x7f0000000180), 0x400) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x24) 15:41:54 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=tcp']) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) accept(r0, &(0x7f0000000040)=@ethernet={0x0, @local}, &(0x7f00000000c0)=0x80) 15:41:54 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:41:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:41:54 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) chdir(&(0x7f0000000080)='./file2\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000140), 0x440d0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e616d653d2c6e616d653d002c6e6f7072656669782ce370757365745f76325f6d6f64652c6673636f6e746578743d73797361646d5f752c00"]) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file2\x00', 0x400000, 0xb0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x5, 0x20, 0xf8, 0xfa, 0x0, 0x7f, 0x8, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x239, 0x2, @perf_bp={&(0x7f00000002c0), 0x1}, 0x2069, 0x6, 0x3ff, 0x4, 0x8f3, 0xfffffffe, 0x1, 0x0, 0x756d, 0x0, 0x7}, 0x0, 0x2, r2, 0x1) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r3, 0x0, 0x10000000c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') fcntl$notify(r4, 0x402, 0x12) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4000, @fd_index=0x3, 0x4, 0x6000000000, 0x3, 0x2, 0x2, {0x3}}, 0x5bbf) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)="df698c3b6a0697a08cba569c02978c1d8af4f9174fa03a59986e666a5fcda15b106355a20a431dedbcd16b922033029d840c627fa13dab9852fb5870767f4850678ad8a28b688ea70c5d8290e477faa4ea69d455261ff30c4b2e7f076fae3878e2a561d08ab96acf957e2b83d6f2c35176fbceb911b31ba2d4bc338c955bbd40ed578e6956073cede609ab", 0x8b, 0x24008001, 0x0, {0x0, r6}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd=r4, 0x8001, &(0x7f0000000500)="a0f29028cf744dace08e365cc41515d4337ca8831bb90c9e8dde8f40742871cf04eb33236c98f53918b560811aae8b8ebd73094ae11bb027ae975c9a205ca22f1470c4be80d9ad419d9ba2445f0cb9395c0239568c6f497bc31583e918aefbb60850b546c7329cebba4c9a557965229c4ae3f8a3759975343b6edb2b00cb69192f0b813ebbafaee5f47a901c27392a4fc92492e32f09c0e9ef1ad925d4244f16952f5d9c5bfcc0173360", 0xaa, 0x5, 0x1}, 0xf840) ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0xfffffffffffffffb) [ 1812.170431] loop5: detected capacity change from 0 to 32768 [ 1812.186963] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:41:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) [ 1812.221009] 9pnet: p9_fd_create_tcp (12976): problem connecting socket to 127.0.0.1 [ 1812.268474] 9pnet: p9_fd_create_tcp (12976): problem connecting socket to 127.0.0.1 15:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 15:41:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x404}, {&(0x7f0000000340)="0200000003000000040000006a000f4c74b8cfcc66b956f4549b9b31cb96c0ef4ff80ad81986a0ba68cfac013a844c8347c2a5983c1e115a0bd940c2dd704b0b4335d0d4e777cf46594895b46383f2210c30500f", 0x54, 0x800}, {&(0x7f00000003c0)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004cc89f8c8368bfc33dd3f427590ac7385e4dcee9b742c630332b89e110dc917ae6f4167875d4389248adf514f", 0x49, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00e94b94c9897878b3d0b36fb55ddcc95f47f33324f57953cd475c559ce11fe4b2b9fbc52d322ae0b6299af1cb0293cf900c99c3f5bef19d9462fb8f2d003791aac6396d6d14b745a44d5c550cd4cb11e5d358e42b0be84ea54a5e78dd6a0338815d033c697678c0925355c514bd0d8fd8bf06b5e96271e3f0d44a1d324f37f93772db0b3d0b2eb82999825da94f"]) mknod(&(0x7f00000002c0)='./file0\x00', 0x10, 0x1f) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80c80, 0x1a) unlink(&(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x24) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) unlink(&(0x7f0000000300)='./file1\x00') rmdir(&(0x7f0000000280)='./file0\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000a, 0x100010, r1, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000440)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 15:41:55 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:41:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x30000, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:41:55 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 1812.412003] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1812.429543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1812.430769] print_req_error: 1867 callbacks suppressed [ 1812.430788] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 15:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x3}, 0x0) 15:41:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x29, &(0x7f0000000340)={'mangle\x00'}, &(0x7f00000003c0)=0x54) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x800) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) 15:41:55 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:41:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x60000, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:41:55 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:41:55 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:41:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x4}], 0x0, &(0x7f0000012c00)=ANY=[@ANYBLOB="b2"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80c80, 0x1a) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x24) creat(&(0x7f00000000c0)='./file0\x00', 0xc1) 15:41:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x6}, 0x0) 15:41:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x80000, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:41:55 executing program 5: semget$private(0x0, 0x4, 0x100) r0 = semget$private(0x0, 0x4, 0x8) semop(r0, &(0x7f0000000000)=[{0x3, 0x81, 0x400}], 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xe98c, 0xffffffff, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f00000001c0), 0x0, &(0x7f00000001c0)) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r1 = semget$private(0x0, 0x3, 0x241) getresgid(&(0x7f00000010c0), &(0x7f0000000240), &(0x7f0000001140)) r2 = semget(0x2, 0x0, 0x8) getuid() stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r3, 0x0, 0x39, 0x8}, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) semtimedop(r2, &(0x7f0000000280), 0x0, &(0x7f0000000100)={0x0, 0x989680}) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0xb) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000010c0)=""/79) semop(0x0, &(0x7f0000000180)=[{0x3, 0x0, 0x1800}, {0x2, 0x0, 0x1800}, {0x2, 0x8, 0x800}, {0x4, 0x0, 0x800}], 0x4) semctl$SEM_INFO(0x0, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) 15:42:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x3f, 0x3, 0x9, 0x0, 0x42f8000000, 0x40000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x1000d, 0x3, 0x8, 0x7, 0x3, 0x7, 0x6, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xc4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x3, 0xde, 0x1, 0x80, 0x0, 0x5, 0x1808, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x4840, 0xffffffff, 0x9, 0x9, 0x6, 0x7, 0x5, 0x0, 0x5, 0x0, 0x65}, r3, 0x1, r0, 0xf) r4 = openat$cgroup_int(r2, &(0x7f0000000180)='io.max\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000300)={0x6, 0x1, 0x800, 0xad}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20d315) r5 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r6, r5) 15:42:11 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001f00)=[{{&(0x7f00000001c0)=@isdn, 0x80, &(0x7f0000000680)=[{&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f0000000580)=""/198, 0xc6}], 0x5}, 0x800}, {{&(0x7f0000000700)=@rc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/200, 0xc8}], 0x1, &(0x7f0000000880)=""/121, 0x79}, 0x80000001}, {{&(0x7f0000000900)=@can, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/117, 0x75}], 0x1, &(0x7f0000000a40)=""/216, 0xd8}, 0x222}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/171, 0xab}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/153, 0x99}, {&(0x7f0000000dc0)=""/243, 0xf3}], 0x4, &(0x7f0000000f00)=""/146, 0x92}, 0x20}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000fc0)=""/17, 0x11}, {&(0x7f0000001000)=""/133, 0x85}, {&(0x7f00000010c0)=""/71, 0x47}, {&(0x7f0000001140)=""/86, 0x56}, {&(0x7f00000011c0)=""/45, 0x2d}], 0x5, &(0x7f0000001280)=""/128, 0x80}, 0x2}, {{&(0x7f0000001300)=@rc={0x1f, @none}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001380)=""/75, 0x4b}, {&(0x7f0000001400)=""/133, 0x85}], 0x2, &(0x7f0000001500)=""/70, 0x46}, 0x401}, {{&(0x7f0000001580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001600)=""/210, 0xd2}, {&(0x7f0000001700)=""/252, 0xfc}, {&(0x7f0000001800)=""/157, 0x9d}, {&(0x7f00000018c0)=""/2, 0x2}, {&(0x7f0000001900)=""/100, 0x64}, {&(0x7f0000001980)=""/200, 0xc8}], 0x6, &(0x7f0000001b00)=""/160, 0xa0}, 0x2}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/91, 0x5b}, {&(0x7f0000001c40)=""/81, 0x51}], 0x2, &(0x7f0000001e00)=""/194, 0xc2}, 0x1}], 0x8, 0x40000040, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:42:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x8}, 0x0) 15:42:11 executing program 2: setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="6da27617afdda7f2d1afb9d698fc2974", 0x10) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0xc1}, {&(0x7f0000000280)="02000000030000426a000f0000000047587e749358b65fe2fdf22c197aab2f5f017668c788529cb5c18745ee9ac371681faa0510cb9c39e703f8f9626eee1d57a285c1fc4b5d07c2436bfbf0078847e193be6efeeb8e60c0180ffbe7dc06a9db410ff293edebd276980317a1d32d6837ad000e6ad88b69bda2d462ba92c9eef2ce4bb0279954ad2526eca85526976290afd93b67ee5562f7a61dacc75790b3e4d6c83fb758e57da170e8ea52373cb1a70eef006c6679293fd9954d710fea1ca88b5b1b01c6707da8235dd1b176070fb441", 0xd1, 0x2}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x800, &(0x7f0000012c00)) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x148) r2 = dup2(r1, r0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80c80, 0x1a) r4 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x600, 0x1d) dup3(r1, r4, 0x0) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x24) 15:42:11 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:42:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x1000000, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:42:11 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000080), 0x14) sendmmsg$sock(r2, &(0x7f00000021c0)=[{{0x0, 0x2303, 0x0}}], 0x324, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2e25, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)=ANY=[@ANYBLOB="14100000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000017000000"], 0x14}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001500)={0x0, 0x1, r1, 0x3, 0x80000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002200)={0x0, r6, "13a918f77968f35510e9c2995f8f145b5a993ed98182f0458528c488d13cb059ebdaf35758b6c4a404e740a316f28bf9a0255e9728c1d77e372b2c36be4b341cba62603bfec2044d3afccc48519863c67001a67e310b20901d1ff651b95f6446cfe5a8529a0d50486e35b928534fd449ef689a49f3ca9fa17c9dcdd79aa5ce8eab24307435c9fa8f1626428abc21b9e44cb07223408500fdaec3f7e9d7fbbfbc3ce39c68ed5779d9e41801f3b314cdf804ad7bbd560b7f6a88686ab581b4650fd6f7ae2e4a3d08c32f1d6ed93a6e655e75b225f5d9b6c254c6147b919e066cff818d816d5f82ef03878d88dba88bd1c700", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000200)={r5, r6, "dbd650efb2372a0f8127aa73024d12ce98d50fbb4d8f7fc3248a817aac61b1d29b2620863e3825000063432e6db5d0e761e993b81e9ab3456e75883facd8f00a031f0843e0d6eeaa618b6c4e69c528a1d73e07e1dc1a939b6f1980d19ee4e03dc6a5c0fc3a682b13103f80b87185cdaf38eba41a32439af1cc357a98cad9937d448f5967e5fd8e729730c7a9ca7f5a4c14e3e2476b18b216e1bc1a3e95ec7d4e58aa8758914c3716a7f5fab1840ece81999262741f78dadb4c1eb3e1437c0b4ff8c9d986ee509aee8ca013ef654807886892a17c19da0979b8d4e7c16f23e16efde424bc3f469bec12c05550ce9d233b7eadca2cd8b657a6ff2b1f071bbffcc0", "afc6a9ec32868a86d844ba7e16153f88f8899e9c053e63910a0e0c0cb98de8e4415c80787fdfcd71be4badfc230050b2b78e22c03dfd0f48802f34394e6730d4982e6213d227257f155d22f53b5bf912a032b7a80b1276f3c351d9bdedd4fa72d967818130e6880cc3275ffe29909b47c426a489fff660972c009dadc575ea0873a3f34a7f4d474ecda71d2550afe134b86d0f7f7171accd3273b4ef29404c7738fa86da610321cbe2a1142cfd0f7d6333205321462eafe7f4e48aa21f31057a8514a177a9b6c5da66822b90ec83c03e9538947103a1df7bcc209ca45b971fac2f4c28fe823ea33b7c2093c504515d808d29f66761913d94737bb610942b7fa2ac871d1a1b3e330e017c4f0fff389b90a026f0a3f2e3fbbd5f3125b724a0e5673753336d07cf8c2be629fc0e02aa9ab46ed7c3a7879d08cb214b4f56e7d29ab1ea14f01c30fc85329148ec0b5779af7d58efc4579a66f4bdab2bedccd012abe8c5d75dc72a33bde9f51163a756c2e4b6c069e645a5ba6802b925d9329950b02286fc4ca58963398e05e1d1850eaf08a2260d5639b8f5d687fba69827286fb825148e5bbae0fdddfa37f79b56c668472d53538e224a7b83f269c78251f2a2cf7a9e9c4b673186ae685879b13ada0ad51facc9af9244de315da54015a8d47cdd272492c60609336989464c7be8b93f79661847fe3ee03e58e1d1699de21dafd9b512d9610c0e568cee18814a37aa268ef4c22461f86739f114527d879f08c812227ef0c1de3092f6eb22a739ae20b6416280115cac26dcb74d9a090b6b0be7ce56f3b572afb947f2599abe6e8bd5949cc78aa06b971b5b1c8d4d5145ada20c335f4301dbf7dd24eccd0165a903e2109ba472637362068dc4c7f8011d1d353fa6261340e16525732c274d6722fc32e90267b0a8bd8aa298abbabd391a20ed3f83a1d189212860de75ece41e9bd38221825858cc3767cc57f0a04b10b5882ac1da2194d5d4be08d288461ac8c5ace28eea93a042254b5d911ddb68f62777afc41249c2a0132ee08b2cff05c2666558b6b0959433123878b5019bfcfa3ba42905b6b2619f21604101093b83e5959bf19b120dd665faa73bbe3d80d2a3236a69afa01408649c0aaf2c1458977d0d7422c807a85a1361c4800f0dc30cbf4b94453f6370aea810deebc918336d2ece10bc69675c80e91cd341f6dc66d550cf02b65437494ea7bb86d54f6a1d099d6045e53e9dd48533a4cddad9e24cff271dcea4c777d2f7a5d07b3292b9aaf0f5101fc7cff315fdd7e868032d3e4e729dbd09cecd9bec7ca1c5ed8627cb3d03aa4472999cbcdc9096e0bb8f559c2017d1eb6ce62e0a482fb594619a8941e5b1afb70c4b0f779b8a7b1a7a7971d4426cf3fb5efc92b0708fede7afae961f22bd3a7b3526b867395619d9cc24b71228a59dea8fd510dbc523f0edf33555af39939750020d70330a06efc16bdcc5f473030537883ec115b0a921cc2b2dea2696fa84ddfe753ece4dddb8f6e1e8e18aba99ac26e2f000ef2b3b211a6af8e998530f87a805d4bfa67cb7ace7f01c44abe99c0b11ebbf961f7936e1f62b2acde5f5e7208879294549f96eb0a022c0c764bd9a903c680ef8601bc44611d460d1c505f338d53d84e529f8e35452f758e9e054b3fb601b069626e7ca7087a2b0f687d80ce128929d6b95258de739e149a2b4188f4958e67ecdfcffdd6b8ebee07c239d86c1d5cd7d81d37daba3189aef5f5039e7cfcced4bf2358adc6ce03feda69821a98eef2e48fefa61184c7789485a51dd5bd85a6875aa5a39c378413aab99a3f74641716cb1586933925b57ba4a25f6fb4949207bc3e792c8dfdaaec93d640b0e3cc8b119162854b6f3cf6d2abd4ac68f8c21fc8dc3878791eef0e7d76c15e08f7cff127e98a095835e4d599220f985944e4b2cd10a8b71071bd90d29f126802ece31a60387d1a3f5df308932ea684eb8980b8af128ca59515d0abb504fd520fc3aa8045f3115a0bb2f260b91e46e94d1c43fcd1b7de855d7a1f4333dc0701d4e82810b1d846ef3a7d0e744c8998c5c5d29dbe4dfe7d4b4e4cd486e0e30b4bfbdb6ef8e3e241ba1813382396897c2c822c5a38f7994f453ca237c1f4a2da809412ff7ee94bd3e073361c4d4e36d2cf50abf6697befbe4eb7603de3afdb013985487a04af4053186ead0a433d18f47b9bbc831ad579bbca098e826bcf2438b0ba8aa01556b8a3b831c43fa55283a12a678013727aeacc798e4a3da7e1cc1dc6d83c9085722462ac1deaac7bd0b8e7f3e862d678ee88f7366b9734c408fe8d032192c9e4d39423e9577f7dc45e9eee699833405bae4c49d824d17ac5cb61d10fe483c7609ff30f717360a54eca431d98fb9a8618af5602040dbdc4990037b7cc2a4596c44a2da23640c8488e44f816c59b959946dcbb3a3e72989c7136e967e81437db1550d2430cd22956e6a2ed695715a4ef3589c36853765c84456993a5dc7bb5b9be1145ebeed371f757377340dfcbd3d8f13f52ae325d2a3e86784d9f50501ebe7f93429910a785e3cbf84a0652c279ee087c9c1013163555e62144db2e5407d9eff2ad96e394c3c00c0ab5194c5f27776eea15dc0c65f88243a42cfd2344f06f1656fada628b1311a64c77612bac85c2471cccda0648556ec0268a4327785c79fd34040f8a7f814cb068bb4decb7c624c1a1121d4077452a5a5834df9f4d54be61fd00c1953761c84d61901e3a08b693804cc87b7880527f12c59b911690cb9bbe02395f5a49f2836dcb0fd001110f0853e4f2d4c2b7fe691b1d676029a28ebff97f49c5798c75912f9fdd6e436194f07a37dd77d822b2d50beb903f691ab03535389b1d640668cd3d63b08cf2e8cfb29b65efdb3958e2b52b334e8515b7f3e49ac97631e8af6bae8b1001136522eddcfc6e109dd75d7c1cc4bf0385f22e2172c1eace5628364e68fc7fad715d5aae40c17931f2c395cc85b4bed545bd6f4ea660aabdf65f428245d07a86fc4ddf3b69eaf6054981d2c8f6c1815da0f674269a61877fd548a34298abd91b05eed3fb774f66ffce1918f1ed1be4a16c087767db8b7a54da4f14b6fa7cde095f472f50c7294cb98a4fef7519ba097f66f676a93c05b4af7489633cde4fcbad9f897967348a46f97fbae18eb69c5c4802f193daf3ebe808ec2c4225b2b7a9fbc1085cf2da5e45b911fa4b073b6c9160dd52c73905807d375efb48c7f19f4ef9393b03a0c8e48b3aaf1b21db01cd752b7ca7487f840cb918261c01a1610a235a0410bb513ac14603b4b4713becd56477f9279d0e032ddeb12d7000a462bfa2185a9ba71d570c854311cc84ca93c2901579fd03045c52176520c6458d23cd27ffb50181383fd5b358f053897118be1e19d74c6c8dab0d3d9f25e117b684ef0b87a06370522f06fd9782eb7e0928c9f0a44959f6adeb69fcfdd352dcd90de7c0fdedbb3feec6c59156513047a6fa9ea9db3c94378e771e24172c1563012b56217a9b138c38e058c28eb5bceec1fcf4da1ed507d5e354788e5683ef4c3e3f2f47aa34cac7c8aca50e055953717c801aec899b1e6d0b54d76f075e595c13449d0cbfaae6095ac94258e8bfef5db7eac72ae00fc9f6af6ecb1dea84e91db538ccdd452c9db640d3790f8deade1a7acc8e719373b69f6b5aba0b1b7d412a126b8ca2d2cb5acc9d883b0b46894022e5b04e5fe181754bec429fa792b7283541f7f7831d1862bcc59fc241e2ae79a8fab8571bbd157d0575c3095be531afcf280c28bf217f0a2a398a191dcb76836d247b33f28189de94e31409c543cfc939e705987761f19408377f64abefc1792f629dcccd16bb4d09d64f718397b593b28d777515a6190bdfa1796d237d98fede59c2aca3d2711f3a16aa77c8a7c768ff776dc61fdffdb8f34d32cb685c6f9ce1294a13c0a3a2ac22a34416f9d8547e0a6bf95e144bc0ba7f2434a180f9573dce75dd5e0c73a6118f35607de1dd72131c2c07a664ba6989213b39a5c49da57667c4418504e046c078ba2ccb81ebba2cf3cd22767a329bc0a979c990732d15c848558efcfd80258293c21df5626a41d2182474ff37891c952614c0ddca46bdd8f3371f7d230fc450e240c258ea680eb02b19f4dbb11fcdc0ce4037090d0099b2ebbc0d60a0a8591c082d6758da3b3b7737cfe42d5c5d1d30ebfbefa95ce7105483cda995bdf16f0498649996c9ccb606f6433fc5bc72283c8539ac02da73eb3f14db3b958efce275998aaea70c595eb0b56348ce345445e161591da81f4b93457228415e6a5939e466eea72fc94baf3c75ff111b11be6ed28af968d57d4b189c14f50a933950d00848e64268b8ad0eba3ee9cbfec89787224a6f8e330ca78a50d50920d1b549c23f7c85a3c7fc587ce1a496f3992f39ab0e89155f2ac0db4f3ba983e81ef01540f8dc0e413897c18671db9ce28bbc98762eed5d0476de22499f89f2ebafdf4753133484efeeb84f2fcb8e2c03ecb24f9d7aa1b5b9c1e6c546192ae798666f24d66d2c18fa42248a51b3c54738b0436c0315a9806872af638b6e5ce80e341eddc2691d3e8b974c040f45a68bc52cb2c6541bda3826db7978465f01beaa4b72c1ff2db24842f7e81c23ba6710f3fac70df71cbf1393cc6272dccbd530973b5fce22dac48552e2fbdf14cd2c77b0b8c06bed322bd643431f9ab4deaf03bbee21cd0b68b8da7afc6d22eedb198c6a1039425cafa9b25375d651abdd1401967fd149a6b138f4e756dad40089d842df30b1b2f2c57caf411c146be56e0afebab44cd1e5cda1cd3c49031549499792e20c5ac0cfc02d10bfd221ff0f44e7b8eaeeff52b9f5645ddaf644503565bb81a9506a38c0744e7e3ab47c5dc5879fdfa108dcf9101634ce713bbda0f249e65d5e12a8faf58fe6f5b96d7f3a429a094444264068ee96d7c775daece135a392d1d745cd3b72e88dee0c55ddf9ecf28cb5f8e83c7717366c9c91113378286179068a5b6b4082bd6de951400881cf0f6674819493102a0f4a167c7e07adea049bb96df3887cff0ed6b42ebfca0c33988ad60d7eaa2f6085a6b56d0d0fc591bb11ded978604a0980a264dd45705861f3a64511f91d2bb7e63a58595fdf350261305cdfcac4172b180a569cf6926e1972a219a14989eba759a413df1a67b3a86b5d2c19dc72aba460c71aa2a9941ba15e4ea2261b5d3ac918a67f79688f20b93e3ea3a7b38686850464f280d79ddeb11a6eec635eaa2c783d09f236370cf94f7a2e8368d04277f7992b83f93216fcdc9bcdce7c5e27f9f3c19e382e513ef5ac2e26fbdff0ceb687dbf3ec4e53fd2670bfa67e81b68d104ea77d6dccc494fdc57b2e80a2ab37c9f1b8fc266e77e679815359117cf98041adbed6583b85da5a4594569"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000500)={r5, 0x0, "65327ad5de44f2bdfffde974545f6e04ebb9f9f6a5e19462990eac09ee5886d4e66610a138b50243a8367d1d07562048f1c7be89eced7870e0b0da85a1c919acc38e2cd3e7e9c02bccfb4787bf2dfa52cd60a95b7bfd5b43357e179c47dbb172113acd1d8701f95e011b31c904797769adcc4c4d382e358c9c28c2095248f22d1de0aa408f94bb24b1aeb7a65c577dd7e17d400d99e28b6acb8c6d6ad98fa0b7f4a3ed76c330e970e925ea732db18672a0a71a21b47355480851419fc9b59add04ad8a8fed35317478374b0868fa819a48505c3e57495dd89341ba62f41eba4bba7ee73ee7cc0e1da90c2117890d76ba3e756fd5413a8640da494794b518c682", "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"}) 15:42:11 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 1828.839360] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13038 comm=syz-executor.2 [ 1828.865173] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13038 comm=syz-executor.2 15:42:11 executing program 6: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) [ 1829.003493] audit: type=1326 audit(1770306131.771:165): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13037 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f7ac89b19 code=0x0 15:42:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x2000000, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:42:24 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0xe8, "44dc6ee166dc388b881c2db338ed666fdc9fb7571daf5f838d5cdd2a0606a29638f8c00e3c742968148551a8a489ec64f93a9ab21fa5ef78772005f87ba791c816e2c34941ad0e960b06387322b3284252e64b5073ebcac9e3b04e579dc47828cf9b5e93e7bccaac2a57f3fd6b5c8bc761d3d4ee44bd827a3ca55abf0feebec3a037fafa85ba4380ef9a6e877923ae4892ddf8076ba45ab566b3cf8f33bd59bba50b4ab7cb94cc1e8d15685e29ef0d94278b971e2d875a21623fb94feff92fd67c9d41700b928533a4df216fe67dd5cc8dfc2f2578f1b5d242c819425fe1975ff5ce0f076cab5660"}}) 15:42:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, {0x1, @remote}, 0x4, {0x2, 0x0, @multicast2}, 'wlan1\x00'}) 15:42:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x9}, 0x0) 15:42:24 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:42:24 executing program 6: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:42:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat(r0, &(0x7f0000000140)='./file0\x00', 0x101040, 0x104) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80c80, 0x1a) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') syz_io_uring_setup(0x2dce, &(0x7f00000000c0)={0x0, 0xebb5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r4, 0x80, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @empty, 'vlan1\x00'}}}, 0x5af5) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') syz_io_uring_setup(0x2dce, &(0x7f00000000c0)={0x0, 0xebb5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r8, 0x80, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @empty, 'vlan1\x00'}}}, 0x5af5) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(r2, r9, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r10, 0x0, &(0x7f0000000280)="0b4babc502b79f22a318443e2e76364e4269a65728da4284e00fdb7b07455702a01b9901b300f373e49e5a8d67502aca4ef5e4d04cfea8ff86b255d6f44de0f1bb04935165c00b75fff46793469bc37998d186d317d70664076c69e030e7bfa626fcf6fdf884ccb7f641e04dc4991e49a0c58774d42d449bf52386d13b13ed435e0074", 0x83, 0x2100}, 0x5) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x24) 15:42:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef", 0xffffffffffffffa0, 0x400}], 0x89, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) 15:42:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf}, 0x0) 15:42:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x3000000, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:42:24 executing program 6: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:42:24 executing program 2: socket$inet(0x2, 0x3, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000940)={0xffffffffffffffff, 0x1, 0x10000, 0x1}) openat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x100, 0x0) syncfs(r0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0x7ff, 0x7, &(0x7f00000003c0)=[{&(0x7f0000000100)="b794255e99ab", 0x6, 0x5}, {&(0x7f0000000140)="3631682b34b3c06e61b8c6f8e26d55a4953ae11bff4d9feea2e39f51a2a5be488f49d3bd2953ee742fd6093ed4b9435f2f", 0x31, 0x43a6b59a}, {&(0x7f0000000180)="b3ed252064e6f96aa907f8d6510cb8877ed6055df2db5494274d6eab064c604e5a20f88aab390883b767c194c734175e98", 0x31, 0x4}, {&(0x7f00000001c0)="521b504aa8c03afcd223d85c9ddc93f0750244946d995e3fcbd88aeb9b6cdbace5b673d2f8379e096a9495e79a1cd98e0a0b7f32375c0de1375fdef60d", 0x3d, 0x1}, {&(0x7f0000000200)="b078", 0x2, 0x400}, {&(0x7f0000000240)="7f52e8cf73a19ba1fde287431d3b97771a15d344f0743bfa909e7d0d52dc417cee8c1c849cd1bcc0a3df4ba15b04ca6d522f8276019c12edf30775a97139baea7d31890338e28c5555d482ec221498c9176652577eaf961c601f70a4de9ad47c08df6da1ed111d46ad638135bafa1e5c8866784240faa8bce2ed01d690e2a250238610568f9915c0be3edb66e38a33332d28f6d602e4a08fc039043cea2b28a49c7210d179f7b1116205f9429ba3ef7836f9eeb504fd6e8c3f38dbf4950088cb3f82aa1ef16642c2edfcc597bcfaf76afa41", 0xd2, 0x200}, {&(0x7f0000000340)="d8109ef043cff9c5a82ed78c8803c9750a95db02af1f2acd851803be2f25b93ec3e66277e1a9385bf63dfea67564f6788f78a592779618703270382810762b27223841c268b32d0317a2f1e865b74f8b6bfaef00afa70f038045585ba4b8ab4acfe8eb951787c18dae066e49ddc194316ee5dc26", 0x74, 0x9}], 0x80, &(0x7f0000000980)=ANY=[@ANYBLOB='nr_inodes=t-tg-,huge=advise,huge=always,gid=', @ANYRES16, @ANYRES64=r2, @ANYRESDEC=0xee01, @ANYBLOB=',dont_measure,hash,fsmagic=0x0000000000000000,permit_directio,\x00']) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000540)) 15:42:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:42:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x9000000, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:42:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x300}, 0x0) 15:42:24 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) [ 1842.036845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13100 comm=syz-executor.2 [ 1842.092978] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13116 comm=syz-executor.2 [ 1846.634711] Bluetooth: hci1: command 0x0406 tx timeout 15:42:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:42:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0xf000000, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:42:37 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x9, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0xe41b, [0x9, 0x1], 0x2}, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file1\x00'}, 0x6e) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'nr0\x00', {}, 0xc9f9}) r3 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x23a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x400000, 0x0) fallocate(r4, 0x10, 0x0, 0x5) sendfile(r3, r1, 0x0, 0x4000007ffffffc) 15:42:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x600}, 0x0) 15:42:37 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:42:37 executing program 3: openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x2000, 0x14) io_submit(0x0, 0x0, &(0x7f0000001680)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRESDEC, @ANYBLOB="300074f5ae37e923ebd20fba0f1ca5440d6485c73a5d7828563cdaa85e585bae38dd10ae9f368bffe46be1164788842e7e0a5a74ac6f794be92291c493ae92fa825ebd6a537d7c15536f66b9d3f85461187cf7aabe13459ed998d3df65c09e355068b35a9805575d"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x80, 0x0, 0x2, 0x0, 0x0, 0x7ffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000000140)=""/37, 0x25}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f00000001c0)=""/16, 0x10}], 0x4, 0xff, 0xfffffffd) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) syz_io_uring_setup(0x4d4f, &(0x7f0000000340)={0x0, 0xfffffffc, 0x2, 0xfffffffe, 0xfffffffd}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000180)) 15:42:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x26, 0x0, 0x4, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x1000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000044) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x10c0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040850}, 0x800) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r2, 0x100, 0x70bd2d, 0x8, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c011}, 0x801) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x291f0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$inet6(r3, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000000c0)="d9ec921f7e649cf889140387452ed0d8c99825a5388b5b03ddd121c96d61d9e47c89338964ff1c679665f3ea219c123adf0c4743dc7bb3c4144f1af4aa191f85fe187f8953a2b2b8225afb6434fe1642e230924c715ba90141c94502f915e9f65958bc70ed2bc61cec1d4aefb060a13d8df29b45af1e609eb5a626ff1b607e07b2b2", 0x82}, {&(0x7f0000000300)="cb1e87133359b814e3a023f8b34777720d961efd4bf9d0dbd5226b9a8d265e8305059fcf41bea5cc8e44f7b24ae2cff644e28b919187771742767e304413279d86347d61718021660fcd6d7e217f5f1bf3411b10b224ef0823b9f2b8e580d472909f3d65de84d1a275a8b59e921e00d00c2126a811ec72878843ad46bcc9dde05f93197c808f6f5d63467567991ba1cb4f58fb862c234be62aad52c178b657056cdb74956074c4f38c53bb8fe2245f3fcfde85e93c01b2da83d691c54f5cab2cf2a08c9fe57e6afd4da01e2199c193b2d7", 0xd1}, {&(0x7f0000000640)="ba373cca6fd42ba8c0ef19823ccf051e8b104f42d2aa19bf231e20b9bac732624b64315abb5067917acd2a3dc3d173b94d", 0x31}, {&(0x7f0000000840)="a4e2cfd5317e8241532d02d638f4694b06badc2268afca81e5b1857bf6dc63f4e40035b278416e636659165fa7c9f3d5e38e62c85850d657298cb98dbd88863fdf7a6ff6a832c3507b46d8913428f9f9b2bd11b90f0457f48cdda9725721385e4db52b1a03453176d0eb628412989c5f0f3ce1fc8ae107d1caf960db40cbedfe9744a060d34a717c3308c72e191200bf7586ab404d7ababd5ad3475da08e3d7a6c9933da2ad00a134a96b400a5e3b4ba0a5ec02eba1f501a5302085d9dfc48", 0xbf}, {&(0x7f0000000680)="933f2cebce668405b1806e25ee910de88002", 0x12}], 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="3800000800001e0029000000390000000b040001000000000abc2278ec778358ca12f6433a0000000000000000000001fe8000d50000000000000000001100e028edce603ebb5adde493c2d4b010c4bc246e6b3b17e1e4d6f1a334f817cbcc5a527cf176920700000087877eabd5367724b9392a80a9e743578bc07ee9c6a697febf927fe693c78b37899a8edd055d7fc0d416cb8205718e35f9db5f98371480db5458542c25984b75f114cc66be9375f5"], 0x38}, 0xc080) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104, 0x74bfda24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001700)=""/4099, 0xffffff3e, 0xcd04, 0x0, 0xfffffffffffffed7) 15:42:37 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="2f66696c653000e11e66a43433d2acfe3054cdace12dd0d872098bea6c643e65cd427e1a3aec7f1ccc9201a5f99f20"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000200)={0x0, 0x0, "dbd650efb2372a0f8127aa73024d12ce98d50fbb4d8f7fc3248a817aac61b1d29b2620863e3825000063432e6db5d0e761e993b81e9ab3456e75883facd8f00a031f0843e0d6eeaa618b6c4e69c528a1d73e07e1dc1a939b6f1980d19ee4e03dc6a5c0fc3a682b13103f80b87185cdaf38eba41a32439af1cc357a98cad9937d448f5967e5fd8e729730c7a9ca7f5a4c14e3e2476b18b216e1bc1a3e95ec7d4e58aa8758914c3716a7f5fab1840ece81999262741f78dadb4c1eb3e1437c0b4ff8c9d986ee509aee8ca013ef654807886892a17c19da0979b8d4e7c16f23e16efde424bc3f469bec12c05550ce9d233b7eadca2cd8b657a6ff2b1f071bbffcc0", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052840)={0x0, [], 0x26, "e7235b39d39226"}) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:42:37 executing program 7: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x9450, 0x1da, 0x0, 0x4, 0x7ffb, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000008000004}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:42:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0xffffff7f, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:42:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x900}, 0x0) [ 1854.652323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=13124 comm=syz-executor.2 15:42:37 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) [ 1854.684938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=13124 comm=syz-executor.2 15:42:37 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x87, 0x5, 0x100000001}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{r3}, 0x8, &(0x7f00000001c0)=[0x94ff, 0x2, 0x9, 0x4a, 0x74, 0xae14, 0x6, 0x3f], 0x100000001, 0x1, [0x4, 0x767, 0x3f, 0xc000000]}) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r4, 0xb) [ 1854.695340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=13124 comm=syz-executor.2 [ 1854.706728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=13124 comm=syz-executor.2 15:42:37 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x100, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) inotify_init1(0x0) sendfile(r0, r1, 0x0, 0x100000001) 15:42:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf00}, 0x0) [ 1854.817882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=13124 comm=syz-executor.2 [ 1854.829278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13124 comm=syz-executor.2 [ 1854.838971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=13124 comm=syz-executor.2 [ 1854.842044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=13124 comm=syz-executor.2 [ 1854.881004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=13124 comm=syz-executor.2 [ 1854.882725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=13124 comm=syz-executor.2 [ 1871.386829] Bluetooth: hci6: command 0x0406 tx timeout 15:42:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="6c917d5068143eb5", 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x2) inotify_init1(0x0) socket$netlink(0x10, 0x3, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x480040, 0xc0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6d00) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x8, 0x0) 15:42:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002e2f66696c65112f66696c653000"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:42:54 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x9, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0xe41b, [0x9, 0x1], 0x2}, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file1\x00'}, 0x6e) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'nr0\x00', {}, 0xc9f9}) r3 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x23a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x400000, 0x0) fallocate(r4, 0x10, 0x0, 0x5) sendfile(r3, r1, 0x0, 0x4000007ffffffc) 15:42:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:42:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0xf, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:42:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x30000}, 0x0) 15:42:54 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:42:54 executing program 3: syz_mount_image$iso9660(&(0x7f0000001e80), &(0x7f0000001ec0)='./file0\x00', 0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000013c0)={[{@session={'session', 0x3d, 0x100000}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f00000005c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r1, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8001, 0x4, &(0x7f0000001400)=[{&(0x7f0000000080)="8300526a94de10699bb4de620608d55f8dc46c484c0f6a56eae7d5068ba13ec5e2ae695a64ef4b027f804649c83e35e1313108f5bad6cef1f3a3ac13b64016c97f7560c790e6f3a875a1f5e0881d9c02be39d47e26c6c1e5a76b8d21ac27a5a9ef99d0bcae4b46fdd2aa3b2e731368f3937196d76bed42cb752bc07fcdd0c62b421bd8e08eb39f97844f0bed133a6abc071a7136f292fa0e7ece5f1b14b4240b8f3bf83be62a4534023442cb5d11817c00184d375794742f948e016334e44da197af346d8df590e78989b256e4b660c74a3ac007224e3cbcad0b678b6bde92d78b4c", 0xe2, 0x3}, {&(0x7f0000000180)="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", 0x1000, 0xfffffffffffffff8}, {&(0x7f0000001180)="87359514a9e3afcd0db15725cc5ac6417a3e4865f8e5973f7018da21d5f61a0a3a3607024a1000af6980bdf1ce43e6959dbeed3afd8ea5da6ac0c7c92586dc8bdf0166eb0430ba9763212e3193ebb00bf86619e34bb39963fb726d2a6783d8343d203c7e6d3228c8c1d3bcb4a92f4cafe7b2a8aa2dca9d9f85d073550015f39c822836f76e5ca544d28bc6f69825abda33dde2c87df1355536bbc07114a256766803d3a3adef6d68b7b5b8023ce216c7be2bb4c9b96455f1b621a4cff9c00d7fa868870e191eedb1e7c6288965030cf02d9fc5c4b2b9cb8d6d8d72768aaa96fae6c51a80e4a53e4342", 0xe9, 0x1}, {&(0x7f0000001280)="62b90618fbb9d2900b379cde7127f5b548f1889f00fdc48b9b472ab9679791285e2f169df15686c1dff6d96abacac32ff51dc4f453327352190f10f97aed62ab2483e323c32e6b939b23145b8a64711ce3415f3b849a1b0bc84b5e09b8f78f6fa9b8107d06325e6b20862b135d398f880f3dd6f78fce8f1f474a7855e93e7bf3129936d44ae22d46d3c8f840cd023c49fbbe5e6ba78a0aaa60fa85db7ab74dcb141eb8b22fdbb832aaecdfa916161df68c3be95a306f7d9185a6f022728ac427538123df962b000f398d99a13712de6ce40959f4549646", 0xd7}], 0x108000, &(0x7f0000001a40)={[{@huge_within_size}, {@huge_never}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {@huge_never}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r2}}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x78, 0x39, 0x35, 0x6b]}}, {@huge_within_size}, {@huge_within_size}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fsname={'fsname', 0x3d, '-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x0, 0x33, 0x36, 0x36, 0x39, 0x65, 0x35], 0x2d, [0x38, 0x0, 0x39, 0x34], 0x2d, [0x63, 0x31, 0x63, 0x37], 0x2d, [0x33, 0x61, 0x33, 0x39], 0x2d, [0x36, 0x51, 0x31, 0x33, 0x65, 0x30, 0x30, 0x51]}}}, {@dont_hash}, {@subj_type}, {@smackfsfloor={'smackfsfloor', 0x3d, 'session'}}, {@uid_eq={'uid', 0x3d, r0}}, {@euid_gt={'euid>', r1}}, {@audit}]}) umount2(&(0x7f0000001880)='./file0\x00', 0xa) statx(0xffffffffffffff9c, &(0x7f0000001680)='./file0\x00', 0x100, 0x800, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f00000015c0), &(0x7f0000001600)='./file0\x00', &(0x7f0000001640), 0x4000, &(0x7f00000017c0)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@cache_mmap}, {@afid={'afid', 0x3d, 0x3f}}, {@fscache}, {@cache_fscache}, {@fscache}, {@noextend}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, 'fsuuid'}}]}}) setxattr$security_evm(&(0x7f00000018c0)='./file1\x00', &(0x7f0000001900), &(0x7f0000001940)=@sha1={0x1, "fdc9fe61a8b6ad5b8e830a3edab78cb56847c7c8"}, 0x15, 0x0) 15:42:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0xc0, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:42:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x60000}, 0x0) 15:42:54 executing program 3: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000000c0)={0x20, {{0x2, 0x4e20, @multicast1}}}, 0x88) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000180)={0x4, 0x28, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) close(r0) r1 = signalfd4(r0, &(0x7f00000001c0)={[0xfff]}, 0x8, 0x800) setsockopt$inet6_int(r1, 0x29, 0x9, &(0x7f0000000200)=0x33, 0x4) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000, 0x1) 15:42:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:42:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x1, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 1871.694000] selinux_netlink_send: 28 callbacks suppressed [ 1871.694018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=13190 comm=syz-executor.2 15:42:54 executing program 3: fork() r0 = gettid() tkill(r0, 0x3) getpid() 15:42:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x80000}, 0x0) 15:42:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0xec0, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) [ 1871.784044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=13190 comm=syz-executor.2 [ 1871.812139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=13190 comm=syz-executor.2 [ 1871.856462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=13190 comm=syz-executor.2 15:42:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:42:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_aout(r0, &(0x7f00000001c0)={{}, "ebf75a08d9ce19d6c00108d79f153d426b96ea15ab4eae67ff8de905597a7259341c15aaa9f8eedf36c3c52bbfb20af57affabb3488101c7015af96f46264d61073b4361056e5659f6814e689d4ce911a177de2efb5bf0d4b24d7581b1010500d14fc8a766d20ad103000000fd1c11598f5b26a7a127b2f9e7618b2bc83973ede883eeebcd89e2805b1db07ee6e29efaf56337c7e6913a95219374dfd4c11b"}, 0xbf) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0x9) [ 1871.956719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13227 comm=syz-executor.5 [ 1872.028461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=13190 comm=syz-executor.2 [ 1872.062986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13190 comm=syz-executor.2 [ 1872.097000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=13190 comm=syz-executor.2 [ 1872.115525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=13190 comm=syz-executor.2 [ 1872.175098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=13190 comm=syz-executor.2 15:43:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x8, 0x0) syz_io_uring_setup(0x1001, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x4800, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000280), 0xf8, 0x24000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) syz_io_uring_setup(0x132, &(0x7f0000000180)={0x0, 0xe94e, 0x0, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000085b000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) 15:43:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x9) openat(r0, &(0x7f0000000080)='./file1\x00', 0x800, 0xe0) io_cancel(0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}]}, 0x18, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x7fff, 0x2) 15:43:08 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x9, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0xe41b, [0x9, 0x1], 0x2}, 0x10) r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file1\x00'}, 0x6e) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'nr0\x00', {}, 0xc9f9}) r3 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x23a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x400000, 0x0) fallocate(r4, 0x10, 0x0, 0x5) sendfile(r3, r1, 0x0, 0x4000007ffffffc) 15:43:08 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000181000000d1913015f365062ae9aab57d1393a06d27f4657d75260cba0d7967fad5c906210c76fd2ef0000000000e0ff0883c07c58fc3a92b7e648dde34d70c2e85b17a35c81c2048596", @ANYRES32=r1, @ANYBLOB="00000000eaffffff000000000000000000000092855d"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000ffa000/0x1000)=nil, 0x6000) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:43:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x33fe0, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:43:08 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:43:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) 15:43:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:43:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20000414, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:43:08 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:43:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 15:43:08 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4}, 0x100d1, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="68000000c8fa4ad800964d79c863f6b9fc2e140a1900b3cb32f683dfab2c983e7b8bcc2adcecd3bf636cc7dc960acee5d9bce865ea16d2649e161f3db6daa7e9ded21da68eb8462c7562b1e3354fabac37b1821cba538804540bc7e8f65777aa524ace6e74186a6db83b6d2aa257b8f595e7a50cebec2e259c345c343b4b731d9ecdc41c7ae7e6a26a"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) r5 = epoll_create1(0x0) copy_file_range(r5, 0x0, r1, &(0x7f00000000c0)=0x4, 0xe000000000, 0x0) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:43:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x7ffff000, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:43:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x3000000}, 0x0) [ 1885.638026] selinux_netlink_send: 25 callbacks suppressed [ 1885.638046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=13251 comm=syz-executor.2 [ 1885.717036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=13251 comm=syz-executor.2 [ 1885.731152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=13251 comm=syz-executor.2 [ 1885.742126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=13251 comm=syz-executor.2 [ 1885.798155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=13251 comm=syz-executor.2 [ 1885.802938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13251 comm=syz-executor.2 [ 1885.810241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=13251 comm=syz-executor.2 [ 1885.812895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=13251 comm=syz-executor.2 [ 1885.830435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=13251 comm=syz-executor.2 [ 1885.832002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=13251 comm=syz-executor.2 [ 1889.898730] Bluetooth: hci7: command 0x0409 tx timeout [ 1891.946817] Bluetooth: hci7: command 0x041b tx timeout [ 1893.994864] Bluetooth: hci7: command 0x040f tx timeout [ 1895.154474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.156589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.162065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1895.187999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.189689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.192035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1896.042737] Bluetooth: hci7: command 0x0419 tx timeout 15:43:30 executing program 3: r0 = syz_open_dev$rtc(&(0x7f00000001c0), 0x1, 0x5059c0) ioctl$RTC_VL_CLR(r0, 0x7014) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="636f6d6d69743d3078303030300030303030303030333232302c070000006e616c5f696f7072696f3d3078303030303030303030303030303030302c64656275675fb1d4f47e53426cda33157814c4bdcf77616e745f65783078303030303030303030063030303000100000000000"]) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x180000) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @loopback}, 0x20, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)='syz_tun\x00', 0x2, 0x7, 0xd5}) chroot(&(0x7f0000000040)='./file0\x00') mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x8c) 15:43:30 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x4000008000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/fiLe0\x00']) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x50002013}) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:43:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendfile(r1, r0, 0x0, 0x4000007ffffffc) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x10, r2, 0x8000000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000008c0), 0x1f, 0x200003) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x100, 0x0) r7 = accept(r1, &(0x7f00000019c0)=@nl=@proc, &(0x7f0000001a40)=0x80) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0xa, &(0x7f0000001b40)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2000, r2, &(0x7f00000001c0)="e2a29631c1207b8674c65ae0cfa6dd1623fbe09a9b6e60035d888a517df22ccd7e6a04c02e945b4e63bac5bc52f9e65c4c62615c4c246d195b086a98f923802f5ec3495cf22d1624f6e4967d49dc2dc9d049b8341d1565a0ea38cdcbad1802f10db72ec19485569224e63dc17f883c9dc7cb4161677f8ac59cd724b3831817a82f8a799582f1c59606d709fedbaf65a82e56d6f5170685527addeac0072ed066d5d6ed0c17f5b3f010adce64e02b82afc21935e3fb9896af93cd74f41444a0c4cc9c34ad60acb50020e2c5e813779bc51ceec0eae51d2ef765a822688c9bb1a8", 0xe0, 0x7, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f00000002c0)="587657cd2f1659736e84eae49b4c757183a0accdc53bcee2d247934050ee5fa012c31902fa62e2df13f25d09848a07213e96c3aeab6d71739bd09d14c154bf541e88d89d8a3829d2d78ef1a72ab58dc89ecf31e9064c2830ea45007ca4c174644af060326860bc2c442a2a7aded5e1a512ce1de5e6c1005ebee1b1d9b75abcae7d91a04c4392edd690a5338b1f17dd3ec8313a8ef660ad2eafb3b8802c3aba5304cc2ab718191a26046557dc1a4976ffabdc028e2180e3d3ea8ec437b2890580b30e2af4330564c60af59561b8a0", 0xce, 0xfff, 0x0, 0x0, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x2, r2, &(0x7f00000003c0)="54584ded668080aff3127ff1ad0a3233dbc981bfc1c4a45a5e52bf0d67cbe8b7e5207388494ec82799a89fadd1877db7eb70e34e257d6ba9a38de3f0fd638e925b52105010bae56618b666d9d936e96edcf0a221cfe58debc9a7eb9d9834012b6fcf4b58a5584b554c88fa5b6adec2cb1283a1ba883448ce8bcd21b3a131c95a65f396f4177aa8e4ef3631cec7025f307f", 0x91, 0x9ba0, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x7, r2, &(0x7f0000000480)="9ad2b29d72a843ef88006d998766e8ea36a21c28e298a38ab5f7295c11cd9f609350a0831b379d08118ce7c9dde5a8034d4bfdeecdf2a8bf0ec891d3835cb4e6cb288dfd436fc63853e58316134d24e726c49171d6ce68892a2d74c2e5861f466636a92ce8d778d00591b640b4704902343b5e79ebd2f0d57d588e3cc1ff6f42e0cac86824b0239df88a14fa7662d40cc4e2b116487f8d300377728d43", 0x9d, 0x80, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x1ff, 0xffffffffffffffff, &(0x7f0000000580)="7031dfc9e7653d7e9fdd7a38473bc37683dcfbb99c0cc1bc6a03f8c8ca7e03a4823b7fe729c76497626b48748835df57e1d3edd1919978d9cf9e4fda692bec9a75b41c02fd0d1650bc86a9a607a34a608ab1b580e25d735565cef8bf1fe59d3821ea91292cdd8fa6a8b1bb67c2887dd249102f35ff172691b2843c146cd6cfe2e5f81e5c925e51988e88c87a166c600ef65113e3923a39d894ab94f7c9f06aa52c511ebe4b3b78133277931930397d3110fa1cf50166d70c271e6ac5c39bbf00f430594c51883373280a4ae32fa2e60d0d", 0xd1, 0x9, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7d3643f0f52d70bb, 0x8, r1, &(0x7f00000006c0)="6d18c5e7b576025816bb157815aa42cf230788ef6bd8b5265f5050789e4478b576d08c98ae31bf388e1266e498ac6c7955095182e488aeb5241dd2495c24ca33cbfe222af2c5c34df6270b087b801a687122e35728a597653e50b8f89b7eeaa0ca374e5f2d8ede1df0dbe15fe46906810a965ea2c5b5", 0x76, 0x6}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0x80, 0xffffffffffffffff, &(0x7f0000000780)="d67588ffce6895b6ffbec7d611288d117d4325957c93d34b4ce711c6e74aba03110d35d5ec3f5dd1d9c3c64da62c", 0x2e, 0xbb47, 0x0, 0x2, r3}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000800)="fe420dd68a96863d77d34e934eefe8bfafd7c02a0b42159d9880dc358013d6421e10f71deae0e851b1635c6d96645ab73ecfcdc1be5bbc624f7a1597eb4ad9e1cf0aa0d3df6606b54ff68cde727756551020df1ce6b6bfdc35d4de986343e48ec5f4c6d71f2c4dfd85514efdb7e684c1f0b2e3f16109bb56bc196c0b273e8465b1dac23dcf476f9363b699bfd3a68fa177087246963b9e54ef534f2dd9cbb49a587983291a9fdeebfb42eb5368b7d7c5ab", 0xb1, 0xa0ef, 0x0, 0x1, r5}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0x7915, r6, &(0x7f0000000980)="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", 0x1000, 0x1, 0x0, 0x2}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x2, 0xd400, r7, &(0x7f0000001a80)="ff8b197d636b4eb24752fd08f75ab244edc6ec8be221d24795741db5ebc1596c303c7cdde68307a3589cd1a6c7d5c92e60b42d9d19d6455d5eb0f62dd66cb799f7868a44d7b8ff38e0fd61d6", 0x4c, 0x40, 0x0, 0x2, r8}]) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x296000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x80000004}) 15:43:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x9000000}, 0x0) 15:43:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0xfffffdef, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:43:30 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:43:30 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:43:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000f00ac562e5a530462ae2af2391414bb0405000000753f00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0xdd, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x4}, @loopback, 0x7, 0x700, 0x4, 0x80000000}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="7400feff", @ANYRES16=0x0, @ANYBLOB="010229bd7000ffdbdf250300000008000200040000000800030002000000080002000500000048000180050002008300000008000700", @ANYRES32=r2, @ANYBLOB="060005004e24000014000400ff020000000000000000000000000001060005004e20000008000300000000000800060002000000"], 0x74}, 0x1, 0x0, 0x0, 0x4040097}, 0xc881) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x8, 0x3f, 0x7, 0x2}, {0x0, 0x0, 0x20, 0x2}, {0x76ae, 0x0, 0x81, 0x3}]}, 0x10) 15:43:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r6, 0x3, 0x6, @random="e84d67fd941f"}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x20, 0x1, 0x8, @remote, @private0, 0x1, 0x20, 0xc000, 0xdf}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x134, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x52954e38f85196f5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x400, 0x3, 0xffffffff}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000100)) 15:43:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x8, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:43:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf000000}, 0x0) 15:43:30 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) [ 1907.523003] selinux_netlink_send: 28 callbacks suppressed [ 1907.523021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13762 comm=syz-executor.3 [ 1907.531857] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13760 comm=syz-executor.2 [ 1907.544506] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13762 comm=syz-executor.3 [ 1907.554313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13762 comm=syz-executor.3 [ 1907.583015] device lo entered promiscuous mode [ 1907.604520] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13762 comm=syz-executor.3 15:43:30 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="0aa0de67cd1ac66885477ddaa8db1c87097068ff887f0fdbe200000000", @ANYRES32=r1, @ANYBLOB="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"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 1907.626436] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=13754 comm=syz-executor.2 15:43:30 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x34, 0x222, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x511800, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000200), &(0x7f00000004c0)=ANY=[@ANYBLOB="040582ed98f4c95e10213b1a1d17988117788a0694c2"], 0x11, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f154f2f1810d0dc930b7fbbdfe44584e00000000d7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)=ANY=[@ANYBLOB="5931295d2d4a8d1ce76eb7e94226", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x58, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@chsw_timing={0x68, 0x4, {0x7, 0x7}}, @supported_rates]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x1000, {0x1, 0x4, 0x9ad, 0x80}}}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "c8fd9ebfd604a9c9c3"}], @NL80211_ATTR_USE_MFP={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x880d0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x5, 0x6441) accept4$bt_l2cap(r5, &(0x7f0000000440)={0x1f, 0x0, @fixed}, &(0x7f0000000580)=0xe, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57ed, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000340)={0x11, 0xcb, &(0x7f0000000680)="2c47418edbf0e3a89bbc45d6190cfdf1240de2de8f5bc44aa966839c4f6cc6c103a47343ca091a0947d500ecbf72f1a249b152cb73a263a8dbc33a4f4479a4c3a06207ff4dc582c227b103aab608134e094c5be4ff1ef824365277536a4b64bbc773d196f6f8c897be395fb04fa94280bd72c7751dbcb6e2240360d225ee28446e23080f580491122ba78a10204c4daff9e56b38cc6648284f41534c280acc23c53e06598e2b9e8c54876216bf9a688429d2a56142f5461b731acd59a575f638edac9118d5f0445f2b8fd3"}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) 15:43:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) 15:43:30 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:43:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x18, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) [ 1907.766953] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=13754 comm=syz-executor.2 [ 1907.777111] device lo left promiscuous mode [ 1907.779661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1907.793901] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13762 comm=syz-executor.3 [ 1907.794591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13782 comm=syz-executor.3 [ 1907.799336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13783 comm=syz-executor.3 [ 1907.810544] device lo entered promiscuous mode [ 1907.819877] device lo left promiscuous mode 15:43:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x3000000000000}, 0x0) [ 1907.896426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.897989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1907.902530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:43:44 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x100010, 0xffffffffffffffff, 0x0) 15:43:44 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:43:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000400)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000100)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed3400006552e0f40004", 0xa, 0x2100}], 0x0, &(0x7f00000000c0)={[{@debug}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'debug'}}]}) syz_io_uring_setup(0x798, &(0x7f0000000180)={0x0, 0x5e3a, 0x10, 0x2, 0x32e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r1 = socket$netlink(0x10, 0x3, 0x4) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000900)=@IORING_OP_READ=@pass_buffer={0x16, 0xca9d549ab32cd1da, 0x0, @fd_index, 0x6, &(0x7f0000000b00)=""/4096, 0x1000, 0x1}, 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) syz_io_uring_setup(0x476e, &(0x7f0000002040)={0x0, 0xaf41, 0x20, 0x0, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000020c0), &(0x7f0000002100)) syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x3, 0x8, &(0x7f0000001e80)=[{&(0x7f00000009c0)="89a0d6fe7242094065f7f4608a5a64449560eb7d6ae7a86e0988ebaf55fc2dac", 0x20, 0xa8f2}, {&(0x7f0000001b00)="8dc3943d284119f68ba51541c2965a5568801640cea800e32369eababf62088050dc92f3e205c09f26527c3c113a9743ed25ea394f1d02d9b8eca453e1263086562fc4b1173c8377371964027bae9d46ca7ee118f7180f74c606700e0a42047989109411db6e008650dd8300138a017f7564d0c138af30edf13f21a4f4d5d8321d7e67b908b4869f791edf4569441c31a64fb22ea3aa007bf33b8fab8a6ec2c3e628870b6072f23678fcdd35bcb86b0e987b3342365c88c84eb62511987c72e23840c44f7d261b1715623ba1bb7e2f32e53b1982b747a33e316113bd463c", 0xde, 0x1}, {&(0x7f0000000a00)="b08bfc9350fb406b8b65fce7933efa495281fc72412a4313fb328b7776c945069040c0611e9b764508110aa8f3b7baf8653b17d4952d2a79f820e58b7c99efc465a7ba9e9c", 0x45, 0x1ff}, {&(0x7f0000001c00)="6b28c80a764d0a003a2272c92fbc27750f1343b4ffa0d0fca21ad810605cc40d4a472623c6c104136f056d2a31a20bc98aa02f6a9cca20bfa5994e95dcd12df604103015804bd6a7f06521bf27db2e9004b58b511708bb93b3429528614f288a64aad862d9590200ad1117aba17aee46c762f46b0ffeec37300629bca6e22bb169a06171fb", 0x85, 0x7}, {&(0x7f0000001cc0)="73591ba695ce82fe1b09376f3a7049f6", 0x10, 0x1}, {&(0x7f0000001d00)="04bdacdfa79cd503e38a42fcab32b9b4638c56d4d2317b19d2ea864df04ae329dfd60cabe660088d1f", 0x29, 0x64}, {&(0x7f0000001d40)="ef7a9d6a8d4d583528a30c828e119ce171a902ef434ddab8fcb5ff71932f1b9b2152d25d", 0x24, 0x1}, {&(0x7f0000001d80)="b978653ba62ce1a68fd5c3a38bca5391c90189b387e135b36e43ab5d7985b9542199000b28b002f9a5e784b79e23f101358b601caf6bd745d60660c293b1b84b9833a0138d06b5db7e07a2cee5b96321d809d0cf3cd2c712b82bfd64ad4cc567df22b8640a04ac0e75da721c7e9014d9a1a02e4f99f2bd047c5baf5d75205c063ee0716931156ffb42720ba346b6763d8dd7a0e8c2d82664d128f21c86d729dcde45fe6fef5b2bdb630f487b135a7effcfeb71c87ddb8c2511e1f23589daf52a4fddb930", 0xc4, 0x3f}], 0x841000, &(0x7f0000002140)=ANY=[@ANYBLOB="6e6e6f6e756d7461696c3d3f55cf49a014e94f6f72746e616d653d6d6978dcb12c736d01bfce26454e61636b627364656600000000"]) epoll_pwait(0xffffffffffffffff, &(0x7f0000001f80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x10001, &(0x7f0000002000)={[0x7f]}, 0x8) syz_io_uring_submit(r0, 0x0, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0xfffff0c4, @remote, 0xfffffffd, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000300)="7d2f2a9e394919390127fcfbf0bb77802bc197b0043f722ca6f67a4d0e2e53ee667c3b49c5148997d6dbad", 0x2b}], 0x1, &(0x7f0000000480)=[{0x28, 0x11, 0x96, "ba8bd3a7e7085e2771b2e564c9cf6720ccbcb35d44"}, {0xe8, 0x27, 0x4, "b153e9a6ddce791709072b49f00f1871438c8c293cfcf170cfe29621d376e3f55fa88678290069b33d13afaf86495f55d0f94e7a1096d13ca034371f987db4b4553bfd589b106821e13b74862ec73a164a799118b29289af955e1479c5bc241d950a47a34be0264a79f4fa8f04ecd42092dd06e6a31845a90afd0d33fe5e7b4b0c1ed4b551a2ab327494609e478b1dd82b373575e4ab5cec3e159d2624800161e95ece198f81d4ba84dd3fed2d3e74bafd3b0718b692d257f87eb63dbba802b3f074b53c1bd9abe0f42f686fd5456891f31dc7862a"}, {0x88, 0x1, 0x2, "2287c02f0eb61dc595feda1a190bbe90cab41fa662e9b7ce72839590e97054fd6766dafea81b74d78fcc7f8333a2559e18c41fcf958ec2abdf09b11262a5b1b24cd55b8c084e2e22f6d60aeba2ad49f0125cd5c6386edbf87d387f100f6321d240fef063a62670f76d4d05acfb75a45551e5b7"}, {0xf8, 0x1, 0x1f, "849d21591f2280c2eda50c81c7ca57b09d5f653b63f547787b5b70102eae272dcdd9bcf5a6d7a108e543372e4ec87a454c1ee4dbd8271a8a4a6bf4b7f03de8794ed7176e3a60afe31d234462f466911d262ec30e2d3f36dc9a4da216233a2140d59e74e2aa236efa6b58336646770672f3501992fecf2d7c34c5470f09d406c1e8d207d22b4ded620e5cdf8d8b051b578cf78c91746d22cf7988169551594588edbb68ed69c09ceadecb6e745107699c1594176b1a70d5c26b51dddaadd72109d1d9618a33592c659d5802e3d5d967bf2a92c74f30d2c0df43dc82aab1d2aa0b7062c541399007"}, {0xf0, 0x111, 0x8001, "6146a9d708f8d5fcfb7c5ddcdc7906a5cf5e9457a219798237c95e252e58c729ad835b1f7133bd88a3a39b403ba6fd08ebb38df5b12cb86e20bfb4f887829ed20a70b66e734586776f4ee7452ffaa25ae233733782ac2ba7683e1f0522909950a887ecf23892b28258dbba23b63abb380ab2791f5c2613419da52826f661677c7bc84d3cb4a47656419a45d581bdff6fed475071d8aea85aa7ae515f249a140a3c4810f9494f4d727cb4b0861cb875555baa03eef789fd6555837f98b943ebf670061f536e41d74a25b10cb06c4f0509cda7364a81a25f81454a831c899b"}, {0xf0, 0x109, 0x40, "0ca1dbe1b253f75de7ef867542b79cc3bc903ad624826ca42247d5487f5acad44da965a61ad5dd0a621eae97c455802e1fb27af43e257564ed560382222a94996e10d77a2e23b5b6d18a416809c7734550e5304e02d2cf242168ee2e64377f3022d6cac7818f36b1962765e0928c236ac48b9a80df59106b5d75a8feb7ab157f540689c0b1f270cb07afe0de9f344a23336bc016a0f69cfff9f19ab897236f4bcd55f4cf1e5d22526a5621f7dba5a509148b229fa2da471561dbbc44a3604be597cbaefcb183449cf7f3166d93af67e245cdac4b7b84839ae1e089442c14898f"}], 0x470}, 0x0, 0x1}, 0x9) 15:43:44 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002e2f66696c65312f66696c6530004a81f5e180c4c0f962e4e4d6c91b111271efbe766f2892f9b139a6d46c603b981548a48463d4b20869ef5e86b1e008ba24d3f6dfd1bd9d4b29e40e4ce182db2c565888405176c8f84c44383da4e7bb9577c88923e3f4b18100000000000000"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) shmctl$IPC_RMID(r3, 0x0) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 1921.903506] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x2a, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:43:44 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:43:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x78, 0x1f, 0xc21, 0x0, 0x0, {0x3, 0x0, 0x2}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic="f8"]}, @typed={0x8, 0x62, 0x0, 0x0, @u32=0x1}, @generic="0d2d859bded25e59d5b34c4a5e5a093a94c2f87b590e0faca9ab5d95f545f2f19735cf39d27ee486849cd1c043e88c0698ae359f76b3217c038ef623da827f6bdb102c4bfd53cba0857bb854347865aac3b9375d"]}, 0x78}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20048801}, 0x40800) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000340)={0x0, 0x8000, [0x9e, 0xbb7, 0x0, 0xb3, 0x4, 0x7]}) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x8000) 15:43:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x6000000000000}, 0x0) [ 1921.923813] selinux_netlink_send: 47 callbacks suppressed [ 1921.923832] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13810 comm=syz-executor.3 15:43:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x8000000000000}, 0x0) [ 1921.980370] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13827 comm=syz-executor.3 15:43:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) [ 1922.034312] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:44 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:43:44 executing program 5: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) close(r4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0xf, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000842}, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x100, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) inotify_init1(0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r5, r6, 0x0, 0x0) [ 1922.104163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13839 comm=syz-executor.5 15:43:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x2, 0x0, {0x2a}}, 0x14}}, 0x0) 15:43:44 executing program 3: ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000000)="4dead378429e5e20c7c4f4119e062d0ae986e0ff81e9e7a66d4a0e3352d515949007e87474ac7b4dbd") syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)={[], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) [ 1922.163435] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13839 comm=syz-executor.5 15:43:44 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) 15:43:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x3, 0x0, {0x2a}}, 0x14}}, 0x0) 15:43:44 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) [ 1926.507737] Bluetooth: hci5: command 0x0409 tx timeout [ 1928.555821] Bluetooth: hci5: command 0x041b tx timeout [ 1930.603054] Bluetooth: hci5: command 0x040f tx timeout [ 1931.829485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.831291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.835325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1931.874010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.875769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.878527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1932.651201] Bluetooth: hci5: command 0x0419 tx timeout 15:44:07 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:44:07 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:44:07 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:44:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) 15:44:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x842, 0x10d) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB=' Nr'], 0x378) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x400) 15:44:07 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x20800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x48da, &(0x7f0000000180), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf, 0x40010, r1, 0x8000000) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r0, r6, &(0x7f0000000340)=0x7, 0x8) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f0000000940)={{r8}, "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"}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x0, @fixed}, &(0x7f0000000300)=0xe, 0x800) r9 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14, 0x0, 0x200}, 0x14}}, 0x0) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="2ddcfc67b4fbdd8faa6275436b23b32e5b9f935a2a0c724e5f1ad5e7ac2885d6c70fd5e987ace621649bb337fd3a2b6f9119dcb199abc0f7576dc7f9a3bfa6f0c7cd0acc44bf7053d1fa7e149de4c3a63695bf81d4fbab79e4c600cd93b4867e8db09d6a7f40b9c6905c97", 0x6b}, {&(0x7f0000000500)="5db7f75b1aa320fc2cc931389a8f563e33a6c716ead3d58dabfaa74241334e5035c80432416353261a95219a2ace6142e8f73a49b1cb0522573f4e767a0407d9683c029287b55264056ed95f68567e78ca57cf5b138d0dc94a90cbd9622f8af915d96c0af3d7d8881d369e7ce8b666a3660972da62c1db190d56dbace16e03b97171f9ada11e21cb8611481a1413bdcc1a84e0cdcff0f5f5bef68837a3fb93cab4181198709de7d5ee10641395c400febdcbdd579cc868cea861b6842121a91556a31b2eb25484e18b5946474b04760d7f5b031ca767a6c506bbec1755cfe502a9fc", 0xe2}], 0x2) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 15:44:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x6, 0x0, {0x2a}}, 0x14}}, 0x0) 15:44:07 executing program 3: semget(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0xfffffffffffffffa, 0x9}, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) io_uring_enter(r4, 0x44a0, 0x7185, 0x3, &(0x7f0000000080)={[0x1ff]}, 0x8) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat(r5, &(0x7f0000000100)='./file0\x00', 0x100, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 1944.814545] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14327 comm=syz-executor.2 [ 1944.819994] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14327 comm=syz-executor.2 [ 1944.824596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14336 comm=syz-executor.3 [ 1944.825062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14327 comm=syz-executor.2 [ 1944.847416] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14339 comm=syz-executor.2 15:44:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x8, 0x0, {0x2a}}, 0x14}}, 0x0) [ 1944.858013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14339 comm=syz-executor.2 [ 1944.863240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14339 comm=syz-executor.2 [ 1944.881369] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14336 comm=syz-executor.3 15:44:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x300000000000000}, 0x0) 15:44:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000840)=[&(0x7f0000000140)=']\x00', 0x0, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', 0x0], &(0x7f0000000440), 0x1000) ftruncate(r0, 0x9) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000b80)=""/145, 0x91}, {&(0x7f0000000b00)=""/108, 0x6c}], 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24004850) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x4a) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xb2, 0xd34, 0x1, 0x0, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}]}, 0x18, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x6}, 0x4051}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000240)=""/12) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x8, 0x0, 0x4e, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0x6, 0x20}}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r7, 0x3, 0x6, @random="e84d67fd941f"}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000c40)={0x4ec, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x3, 0x97, 0x7ff}, {0x9, 0x8, 0xda, 0x7ff}, {0x7fff, 0x3f, 0x1, 0x3000000}, {0x3f, 0x4f, 0xf2, 0x7f}, {0x7fff, 0xff, 0x7f, 0x3}, {0xfff, 0x7, 0x8, 0x100}, {0x11, 0x40, 0x7, 0x6bb6}, {0x2, 0x5, 0x0, 0x1}, {0x1, 0x20, 0x1}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r3}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8, 0x1, 0x0, 0x9c53}, {0xb4bc, 0x7, 0xc0, 0x80000001}, {0x8000, 0x0, 0x3, 0xfffeffff}, {0x9, 0x8, 0x1, 0x8}, {0xfeff, 0x64, 0x80, 0xff}]}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x2e, 0xd2, 0x2}, {0xa2, 0x1, 0x80, 0x5}, {0x1, 0x1, 0x5, 0x7}, {0xfffe, 0xb8, 0x40, 0x7ff}, {0x1f, 0xf9, 0x0, 0x9f}, {0x9, 0x1, 0x5, 0x100}, {0x3, 0x2, 0x8, 0x3}, {0x2, 0x96, 0x0, 0x853a}]}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x6, 0xac, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xde0}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r7}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x928f, 0x3f, 0x7, 0x800}, {0xfffc, 0x7, 0x0, 0xd87}, {0x4, 0x1, 0x5, 0x1}]}}}]}}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) 15:44:07 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) read(r1, &(0x7f0000000040)=""/140, 0x8c) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x10) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) connect$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0xbf, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5321, 0x2}, 0xe) 15:44:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x9, 0x0, {0x2a}}, 0x14}}, 0x0) 15:44:07 executing program 7: perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x7, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3, 0x9}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_LOCK(0x0, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002e2f66696c65312f66696c653000a4c8fa68944dee8942ce76a27f02137fa8d50781e129f53e5351f9231e17c7dfdf14e2b69e106632"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:44:07 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 1945.072496] device lo entered promiscuous mode 15:44:07 executing program 3: perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = dup(0xffffffffffffffff) connect$inet(r2, 0x0, 0xffffffffffffff28) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@private2}, &(0x7f0000000240)=0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x0, 'netpci0\x00', {0x3}, 0x1f}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000001340)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/71, 0x47}], 0x2, &(0x7f00000015c0)=ANY=[@ANYBLOB="18000000df91141a010000000190fb78e3a34e053898fdfe01000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}, {{0x0, 0x0, &(0x7f0000000400)}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/85, 0x55}, {&(0x7f0000001240)=""/136, 0x88}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f0000000680)=""/252, 0xfc}], 0x5}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000900)=""/140, 0x8c}, {&(0x7f00000009c0)=""/151, 0x97}], 0x2, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000bc0)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000c40)=""/124, 0x7c}, {&(0x7f0000000cc0)=""/82, 0x52}, {&(0x7f0000000d40)=""/115, 0x73}, {&(0x7f0000000dc0)=""/180, 0xb4}, {&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000ec0)=""/104, 0x68}], 0x6, &(0x7f0000000fc0)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000001000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000001080)=""/42, 0xfffffdf7}, {&(0x7f00000010c0)=""/48, 0x30}, {&(0x7f0000001100)=""/77, 0x4d}, {&(0x7f0000001180)=""/125, 0x7d}], 0x4, &(0x7f00000014c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd8}}], 0x6, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20d315) open(&(0x7f0000000040)='./file1\x00', 0x8000, 0x1e0) [ 1945.097393] device lo left promiscuous mode [ 1945.106160] device lo entered promiscuous mode 15:44:07 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) [ 1945.113827] device lo left promiscuous mode 15:44:07 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x5, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x62, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x81, 0x39}, 0x80, 0x0, 0x5, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002e2f66696c65312f66696c655827560ee9bfab291e90c8ca9218c274a39d30ffc0b56b54a98ac75d57cde58cc0ebf05badae8cd5ef0805f2c9c3ac17d285005bd05d3d27564cc9649cd869728aea825456607e3a63df535282198d0edf7e9e850b156103f0e0596db8d1e391f666ad1637d1f192d2d26c19e02e0183db7780e62446684781e77db68c3b9027283615fe9fc0fcaba568b70000000000000000000000000000976729f7c5cc391101b715c4c424b8"]) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 1945.132977] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14365 comm=syz-executor.3 15:44:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x900000000000000}, 0x0) 15:44:07 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) openat(r4, &(0x7f0000001100)='./file0\x00', 0x290100, 0x104) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) writev(r5, &(0x7f00000019c0)=[{&(0x7f0000000880)="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", 0xfd}, {&(0x7f0000000980)="25df46c0b5fb7783730ae90042e132cc", 0x10}, {&(0x7f00000009c0)="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", 0x5f4}], 0x3) dup(r5) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg$unix(r3, &(0x7f0000000800)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000480)=""/180, 0xb4}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000600)=""/130, 0x82}, {&(0x7f00000006c0)=""/152, 0x98}, {&(0x7f0000000240)=""/46, 0x2e}], 0x6, &(0x7f0000000fc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}], 0x1, 0x142, &(0x7f00000010c0)) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x3, 0x2, 0x4, 0x81, 0x0, 0xffffffffffffff80, 0x2082, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x20, 0x161, 0x1000, 0x7, 0x7fffffff, 0x80000001, 0x2, 0x0, 0x2, 0x0, 0x7}, r6, 0x7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x2, 'caif0\x00'}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x40010, r7, 0x8000000) [ 1945.316078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14365 comm=syz-executor.3 [ 1949.802728] Bluetooth: hci0: command 0x0409 tx timeout [ 1951.850765] Bluetooth: hci0: command 0x041b tx timeout [ 1953.898740] Bluetooth: hci0: command 0x040f tx timeout [ 1954.751903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.754035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1954.760111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1954.800311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1954.802011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1954.804186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1955.946793] Bluetooth: hci0: command 0x0419 tx timeout 15:44:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0xf, 0x0, {0x2a}}, 0x14}}, 0x0) 15:44:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000840)=[&(0x7f0000000140)=']\x00', 0x0, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', 0x0], &(0x7f0000000440), 0x1000) ftruncate(r0, 0x9) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000b80)=""/145, 0x91}, {&(0x7f0000000b00)=""/108, 0x6c}], 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24004850) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x4a) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xb2, 0xd34, 0x1, 0x0, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}]}, 0x18, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x6}, 0x4051}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000240)=""/12) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x8, 0x0, 0x4e, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0x6, 0x20}}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r7, 0x3, 0x6, @random="e84d67fd941f"}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000c40)={0x4ec, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x3, 0x97, 0x7ff}, {0x9, 0x8, 0xda, 0x7ff}, {0x7fff, 0x3f, 0x1, 0x3000000}, {0x3f, 0x4f, 0xf2, 0x7f}, {0x7fff, 0xff, 0x7f, 0x3}, {0xfff, 0x7, 0x8, 0x100}, {0x11, 0x40, 0x7, 0x6bb6}, {0x2, 0x5, 0x0, 0x1}, {0x1, 0x20, 0x1}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r3}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8, 0x1, 0x0, 0x9c53}, {0xb4bc, 0x7, 0xc0, 0x80000001}, {0x8000, 0x0, 0x3, 0xfffeffff}, {0x9, 0x8, 0x1, 0x8}, {0xfeff, 0x64, 0x80, 0xff}]}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x2e, 0xd2, 0x2}, {0xa2, 0x1, 0x80, 0x5}, {0x1, 0x1, 0x5, 0x7}, {0xfffe, 0xb8, 0x40, 0x7ff}, {0x1f, 0xf9, 0x0, 0x9f}, {0x9, 0x1, 0x5, 0x100}, {0x3, 0x2, 0x8, 0x3}, {0x2, 0x96, 0x0, 0x853a}]}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x6, 0xac, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xde0}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r7}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x928f, 0x3f, 0x7, 0x800}, {0xfffc, 0x7, 0x0, 0xd87}, {0x4, 0x1, 0x5, 0x1}]}}}]}}]}, 0x4ec}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) [ 1968.234080] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 15:44:30 executing program 2: prctl$PR_CAPBSET_DROP(0x18, 0x23) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f0000000080)=""/150, 0x96}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000380)=""/198, 0xc6}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}, 0x2000) capset(&(0x7f0000000680)={0x20071026, r0}, &(0x7f00000006c0)={0x5, 0x5, 0x1, 0x5, 0x3, 0x6}) 15:44:30 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:44:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf00000000000000}, 0x0) 15:44:30 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="2acd3d46002224908cd28add000700000000000ddb22b84dd25fd36a2f6b93783742962a00ffff000000800065312f66696c7e1e46bbb46ca75697e5300c98ce774db1fa37039a1529938b35ecd7c16c522477ee2f4eb27d1952fb8c94ca9fb3ff188e9b8bd250f509e1a748c738aeca9563985a437fcb7c66df5e3051cc10736b35b59c71fc50788f2259c08e7e9de4bd1b82522b39d3862e893f208778262eaef51561d8c7784d90d22e4443f2b350d2be1b297857e8b7cb1f3194ab55bc3c01488c925d9ac6a4fbb2986cc243e8a9c4a6729e24f088d200d52cb445f8294a422879d546cb"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) r4 = shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:44:31 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:44:31 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:44:31 executing program 2: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_create(0x3, &(0x7f0000000080)={0x0, 0x6, 0x1}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:44:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 1968.293378] device lo entered promiscuous mode [ 1968.295847] device lo left promiscuous mode 15:44:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x300, 0x0, {0x2a}}, 0x14}}, 0x0) 15:44:31 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="01000009000000001808220000fcc7", @ANYRES32=r1, @ANYBLOB="0000d40000000000000053b6bdc9c2674d8954e4f21376ce9c1318bbc66c4cb2"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:44:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010300)="000000000000006cef", 0x9, 0x640}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="bf0694fdaf829fd211c794b4f38bdfdcada3b23d5cc47c56bc4887846a188375c9fbab8d87f334824597fe9bed2d65a684f64b35d497c447894043d83d2572f476144ede34542c13b23dba35f210e7b5d6ae5ff7793a3a611db8d5d8e298bf34e5b873354b2a5ac48a54fe9a1c0e22a43f9c203300e7a6463e2605a6a332aa230bcab4e1d2bbef97099f9ba57a678f06cca429c892fce289dc3c5af4db3b3dfe2a76db2879ad2241d857823d2378f215d87173914a80efa2f379d4cdb11542e27a81d897c58b7b1c9945"]) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1, 0x0, &(0x7f00000000c0), 0x1005000, &(0x7f0000000140)={[{'ext4\x00'}, {'ext4\x00'}, {'*.{Z@'}], [{@obj_role={'obj_role', 0x3d, '\'+//.:'}}, {@pcr={'pcr', 0x3d, 0x5}}]}) 15:44:31 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:44:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x600, 0x0, {0x2a}}, 0x14}}, 0x0) 15:44:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file2\x00', 0x400000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000240)={0x6, {{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x21}, 0x4}}}, 0x88) syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') fsetxattr$security_selinux(r0, &(0x7f0000000140), 0x0, 0x0, 0x3) 15:44:31 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) [ 1973.098764] Bluetooth: hci1: command 0x0409 tx timeout [ 1973.163698] Bluetooth: hci2: command 0x0409 tx timeout [ 1975.147850] Bluetooth: hci1: command 0x041b tx timeout [ 1975.211808] Bluetooth: hci2: command 0x041b tx timeout [ 1977.194695] Bluetooth: hci1: command 0x040f tx timeout [ 1977.258716] Bluetooth: hci2: command 0x040f tx timeout [ 1978.618698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1978.620030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1978.622975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1978.658444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1978.659950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1978.661915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1978.748542] loop5: detected capacity change from 0 to 262144 [ 1978.755007] EXT4-fs (loop5): Unrecognized mount option "¿”ý¯‚ŸÒÇ”´ó‹ßÜ­£²=\Ä|V¼H‡„jƒuÉû«‡ó4‚E—þ›í-e¦„öK5Ô—ÄG‰@CØ=%rôvNÞ4T" or missing value [ 1978.870238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1978.871202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1978.874849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1978.883398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1978.884391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1978.886192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1979.242695] Bluetooth: hci1: command 0x0419 tx timeout [ 1979.306733] Bluetooth: hci2: command 0x0419 tx timeout 15:44:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 15:44:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:44:53 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:44:53 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:44:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x900, 0x0, {0x2a}}, 0x14}}, 0x0) 15:44:53 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:44:53 executing program 5: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:44:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) vmsplice(r1, &(0x7f00000009c0)=[{&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000580)="a3c6e0702d04c5d9f10064ebddafbf17a991fa31b0b333b5880d9ea662352f65142356f44ee0d87a2efb13f829068fa4d18c13bb41340364a16681be94923d667ed2f10e260d6899908288257d37263a176555717e0ef9b5cc3a0bc8b0e2290bbab58a59a6aac068f3cb4d1dea3fa16483b980a01a54dd431ea4efaae4a3eedbefa9fc3560dcf4181aac53f3d3337f9bba1261b0ca713ee31777d4de592c34a14da016ec503914adcd984d0f1c7fee71429ab60200d13b7f775ee67c6ab25e398ae936b8352ccd7e7140870e5482a8f844ecf0ff3815", 0xd6}, {&(0x7f0000000800)="d7472340ff53fff17b8036726edfd42f707fc706b5ff9d77be0f06a6f91b8d731994ccd16f4e228646a7a412a8e8dabe94860d4dd6414f9593de2999a1a28fbebc592e805efc3ccddb2179cfb919fb", 0x4f}, {&(0x7f0000000880)="00fd77061d1d1ab321a837bc996b931e5755fbf77af70642d9ce63f55c8a77cc472d6e9baf6e81dfdd9ac6fcd91c8a9a065b105d01e8cbc388d512b8030a1a654f6ab4a78e4f2bdc849cade6f488a4b5e0b02295b986c693fdb379f88e20687d91d430e3869f4881cecfa65c9a2043f1577bbf8f2115ba44457d5c9df8362433f0e0a9d2777f54cc0c7bdea51e70eb", 0x8f}, {&(0x7f0000000940)="62921be71168f525d556a02c9524eea9829dbe3a742d06c4663f3d6f6b76e35920596c0ce1d1a4b0492b7a7c5984dfd67e1093ccee5473df32cc587a53c3e16b006eacbd9aeaf9774e81", 0x4a}], 0x5, 0x73c947b8278a45d4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001740), r1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x84, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xa304185ec41533dd}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000010}, 0x80) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x48, r2, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3c}}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "684d29f19ea5d83e0691adbd5aa2288630580510408335c0d70c890887e57bad018387091e0676fdd092ba73a5eebafcd59fab08897826c453b520352502823f", 0x21}, 0x48, 0xfffffffffffffffb) r4 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000440)={'fscrypt:', @auto=[0x31, 0x64, 0x65, 0x31, 0x32, 0x38, 0x38, 0x32, 0x65, 0x36, 0x61, 0x34, 0x37, 0x62, 0x30, 0x39]}, &(0x7f0000000480)={0x0, "0580bcad989d89aa73ebfe870d80fbcb0800000000000000c9935573e0a95bfe400f6259da179d291e4d1a8f168f15de873aaeece31f4993e18096c6cc51d304", 0x32}, 0x48, r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='keyring\x00', 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "25a8f9e404d4c85e831132ae5de9d8793d334bd1871b3b2bfbc6aec5f80cacefcd85811286e6464c67d3b99c56272bd50f8bf747c7dafeb494cd6650e2964ab7", 0x10}, 0x48, r4) 15:44:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0xf00, 0x0, {0x2a}}, 0x14}}, 0x0) 15:44:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:44:53 executing program 5: r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsmount(r1, 0x0, 0x84) fsmount(r1, 0x0, 0x72) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 15:44:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000004c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {&(0x7f0000000180)="000000000000000007000000040000000000000000000000000000000039b4da32", 0x21, 0x540}, {&(0x7f0000010400)="0300000004", 0x5, 0x800}], 0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="004ef20de15fa0edd9817678b51b270792e2fd743c08c84111a8c1c8859a1abbb1a61f2a6575"]) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='mqueue\x00', 0x304c089, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xd) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x8a042, &(0x7f00000001c0)='\x00') 15:44:53 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x7e, 0x20, 0x1, 0x0, 0xfffffffffffffffb, 0x840, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x271, 0x4, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x0, 0x0, 0x6, 0x7b3d, 0x10001, 0x3ff, 0x0, 0x7, 0x0, 0xb7a}, 0x0, 0x0, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f00000000c0)=""/64) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:45:06 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000004c0)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000dff4655fdff4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000000)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdff4655fdff4655f000000000000040002", 0x1d, 0x1600}], 0x81, &(0x7f0000012900)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 15:45:06 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:45:06 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0, 0x4, 0x10001, 0x9}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x7, 0x2, 0x5, 0x0, 0x80, 0x41000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x7f}, 0x5020, 0x3d7, 0x6, 0x1, 0x8, 0xfffff000, 0x9, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0xc, r3, 0x3) r4 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r5 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) 15:45:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000840)=[&(0x7f0000000140)=']\x00', 0x0, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', 0x0], &(0x7f0000000440), 0x1000) ftruncate(r0, 0x9) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000b80)=""/145, 0x91}, {&(0x7f0000000b00)=""/108, 0x6c}], 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x14, 0x9, 0x0, 0x0, @ipv6=@loopback}]}, 0x28}}, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x8, r1, &(0x7f0000000440)="c1a8968b037ddf2fa6f644c7c30eb760104223dcebc5c3fe25a347e40b09debb856f2dc88f5ede3ad9d1ce3fbd04e436a1525b6726c925585ec7a6a38a3237ecf9edea3e67a8c3a91c49900cb9ba77bad3dd9aafcb9830d562ffb1f7f4", 0x5d, 0xfffffffffffff9bb, 0x0, 0x1, r0}, &(0x7f00000002c0)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24004850) r3 = syz_io_uring_complete(0x0) mknodat$loop(r3, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) r4 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x200, 0x4a) r5 = syz_open_pts(r0, 0x80000) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000180)={0xb2, 0xd34, 0x1, 0x0, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x2, 0x7, 0x8, 0x7, 0x7}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}], 0xffffffffffffffff}, 0x18, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x8}, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000240)=""/12) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 15:45:06 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 15:45:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 2003.495972] loop5: detected capacity change from 0 to 262144 15:45:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) [ 2003.500166] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem 15:45:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x30000, 0x0, {0x2a}}, 0x14}}, 0x0) [ 2003.509532] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 2003.526049] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2003.539007] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 15:45:06 executing program 2: r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x5}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) pread64(r0, &(0x7f00000001c0)=""/215, 0xd7, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2000, @fd=r6, 0xdad, 0x0, 0x0, 0x2, 0x0, {0x3}}, 0x80000001) io_uring_enter(r0, 0x47d5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') syz_io_uring_setup(0x2dce, &(0x7f00000000c0)={0x0, 0xebb5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r9, 0x80, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @empty, 'vlan1\x00'}}}, 0x5af5) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x80010, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x6, 0x9}}, './file1\x00'}) syz_io_uring_submit(r7, r11, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x3, 0x1, {0x0, r12}, 0x5, 0x0, 0x1, {0x0, 0x0, r6}}, 0xf1) 15:45:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x60000, 0x0, {0x2a}}, 0x14}}, 0x0) 15:45:06 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000c7df7a0000000000000000000093db680e2745a788ddf4187dd2ae375d427f0aa4573a1e54be8d37cd2a34c94f1c95acc2665054043646780900632c9c07790ece643dd6de943a9763946504812a94cadf60b7245b000000400000000000000070f22290af2eae5e78d88840ed91da7f93137fff0ac3adb02aab2c8f6e325236fa4ae4c115159d58a237e9d42c77167274010000000e56f7960406f4e4a05a1bba0b4e1df2865f9f17acd0f0aa72e2a3479b833977fc145d43de91eb1c74048e84c5799f3b8c6153716508722a47e193f6595c464f536aa97b0da857556ebdab41601d42fa11d4e8020f90e338a634b23f9aa9f102660d09b344f354c2d004175648c31a5aa5f48ce48950460a264c35", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:45:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) 15:45:06 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000001a00), 0x10442, 0x0) [ 2003.686904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15894 comm=syz-executor.2 15:45:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x84080, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$rtc(&(0x7f0000000200), 0xa96b, 0xa0002) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0xee01, 0xffffffffffffffff}}, './file2\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(r0, r1, 0x0, 0x100000001) [ 2003.713305] loop5: detected capacity change from 0 to 41948160 15:45:06 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:45:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) 15:45:06 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2003.808849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15894 comm=syz-executor.2 15:45:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x80000, 0x0, {0x2a}}, 0x14}}, 0x0) 15:45:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x0) 15:45:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) 15:45:06 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r2 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:45:06 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:45:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) 15:45:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x84080, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$rtc(&(0x7f0000000200), 0xa96b, 0xa0002) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0xee01, 0xffffffffffffffff}}, './file2\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(r0, r1, 0x0, 0x100000001) [ 2004.008182] loop5: detected capacity change from 0 to 41948160 [ 2010.474751] Bluetooth: hci7: command 0x0406 tx timeout 15:45:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0xfffffc01, 0x80000) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000000)=""/163, 0xa3}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f00000001c0)=""/180, 0xb4}, {&(0x7f0000000280)=""/220, 0xdc}], 0x4, 0x4, 0x8001) r2 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x4, 0xc82) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000400)=0x16, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2c, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x2c}}, 0x0) 15:45:19 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:45:19 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x7fffffff, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) epoll_create(0xfd6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x54001381, &(0x7f0000ff6000/0x4000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) 15:45:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x1000000, 0x0, {0x2a}}, 0x14}}, 0x0) 15:45:19 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x400, 0x0) 15:45:19 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:45:19 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:45:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 2016.532905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:45:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0) 15:45:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x2000000, 0x0, {0x2a}}, 0x14}}, 0x0) 15:45:32 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:45:32 executing program 2: ftruncate(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) statx(r0, &(0x7f0000000240)='./file0\x00', 0x800, 0x2, &(0x7f00000005c0)) lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x35f7, 0xffffffffffffffff, &(0x7f0000000280)="1491149fe66b5d7095f91dffd89023eaa6ef0e501ba63599b761651300c946b9139133b909423cc45c82f44c6a55815a49a8b1455952a82b3d97b5fdaff4704bb46248cbb32d83b5b1b0217289053d0a62c464d127e4e60cf7f6bb49527a0cf6121d2b0de255a37e391573aac06fa798d1c882c0573a6b8bdd47d33ea6ab48ad30e329828c5bf06ef51c3b61299ec7ec4b99433bc83f8d1c7b6d05ef76006cee07dd5a4581bb53421a323604f372656a25c45369", 0xb4, 0x7}, &(0x7f0000000380)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xffffffffffffffff, 0x0, 0x0) close(r2) dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c00, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB="b8cbfaa89bc506c9606715001200000000101000"], 0x14}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x85089, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f00000006c0), 0x2, 0x3) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20040000) 15:45:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x3000000, 0x0, {0x2a}}, 0x14}}, 0x0) 15:45:32 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:45:32 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 1) fallocate(r0, 0x0, 0x0, 0x8000) 15:45:32 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:45:32 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x3d, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1, 0x0, 0x4, 0x7fff, 0xfffffffc, 0xffff, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="01005469c3a0fef400010000e518000000", @ANYRES32=r1, @ANYBLOB="00000000000000002e2f7e696c65312f66696c65665ada80"]) chown(&(0x7f00000000c0)='./file1/file0\x00', 0xffffffffffffffff, 0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:45:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0) 15:45:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x9000000, 0x0, {0x2a}}, 0x14}}, 0x0) [ 2030.038492] FAULT_INJECTION: forcing a failure. [ 2030.038492] name failslab, interval 1, probability 0, space 0, times 0 [ 2030.040145] CPU: 0 PID: 16005 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2030.040911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2030.041840] Call Trace: [ 2030.042150] dump_stack+0x107/0x167 [ 2030.042595] should_fail.cold+0x5/0xa [ 2030.043043] should_failslab+0x5/0x20 [ 2030.043475] __kmalloc_track_caller+0x79/0x370 [ 2030.044035] ? strndup_user+0x74/0xe0 [ 2030.044479] memdup_user+0x22/0xd0 [ 2030.044883] strndup_user+0x74/0xe0 [ 2030.045316] __x64_sys_mount+0x133/0x300 [ 2030.045797] ? copy_mnt_ns+0xa00/0xa00 [ 2030.046250] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2030.046860] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2030.047428] do_syscall_64+0x33/0x40 [ 2030.047880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2030.048453] RIP: 0033:0x7f575796fb19 [ 2030.048904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2030.050954] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2030.051792] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2030.052581] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2030.053374] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2030.054226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2030.055045] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2034.474726] Bluetooth: hci2: command 0x0409 tx timeout [ 2036.522735] Bluetooth: hci2: command 0x041b tx timeout [ 2038.571734] Bluetooth: hci2: command 0x040f tx timeout [ 2039.502219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2039.504335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2039.507433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2039.540899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2039.542589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2039.545375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2040.618721] Bluetooth: hci2: command 0x0419 tx timeout [ 2047.338814] Bluetooth: hci5: command 0x0406 tx timeout 15:45:56 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:45:56 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) fcntl$setstatus(r2, 0x4, 0x2400) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:45:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:45:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0xf000000, 0x0, {0x2a}}, 0x14}}, 0x0) 15:45:56 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 2) fallocate(r0, 0x0, 0x0, 0x8000) 15:45:56 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 15:45:56 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:45:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 2053.536073] FAULT_INJECTION: forcing a failure. [ 2053.536073] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.538752] CPU: 0 PID: 16493 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2053.540315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.542118] Call Trace: [ 2053.542690] dump_stack+0x107/0x167 [ 2053.543473] should_fail.cold+0x5/0xa [ 2053.544293] ? create_object.isra.0+0x3a/0xa30 [ 2053.545279] should_failslab+0x5/0x20 [ 2053.546108] kmem_cache_alloc+0x5b/0x310 [ 2053.546989] create_object.isra.0+0x3a/0xa30 [ 2053.547937] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2053.549038] __kmalloc_track_caller+0x177/0x370 [ 2053.550045] ? strndup_user+0x74/0xe0 [ 2053.550868] memdup_user+0x22/0xd0 [ 2053.551632] strndup_user+0x74/0xe0 [ 2053.552414] __x64_sys_mount+0x133/0x300 [ 2053.553287] ? copy_mnt_ns+0xa00/0xa00 [ 2053.554141] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.555272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.556384] do_syscall_64+0x33/0x40 [ 2053.557187] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.558307] RIP: 0033:0x7f575796fb19 [ 2053.559111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2053.563080] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2053.564735] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2053.566273] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2053.567808] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2053.569343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2053.570887] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:45:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0xffffff7f, 0x0, {0x2a}}, 0x14}}, 0x0) 15:45:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x900}, 0x0) 15:45:56 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 3) fallocate(r0, 0x0, 0x0, 0x8000) 15:45:56 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x2, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x6b5f, 0x0, 0x7, 0x0, 0x9481}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14, 0x0, 0x200}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x50002007}) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:45:56 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) 15:45:56 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:45:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:45:56 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 2053.834069] FAULT_INJECTION: forcing a failure. [ 2053.834069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2053.836704] CPU: 1 PID: 16507 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2053.838268] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.840079] Call Trace: [ 2053.840659] dump_stack+0x107/0x167 [ 2053.841493] should_fail.cold+0x5/0xa [ 2053.842346] _copy_from_user+0x2e/0x1b0 [ 2053.843214] memdup_user+0x65/0xd0 [ 2053.843982] strndup_user+0x74/0xe0 [ 2053.844780] __x64_sys_mount+0x133/0x300 [ 2053.845700] ? copy_mnt_ns+0xa00/0xa00 [ 2053.846574] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.847842] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.849230] do_syscall_64+0x33/0x40 [ 2053.850233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2053.851594] RIP: 0033:0x7f575796fb19 [ 2053.852450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2053.856546] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2053.858247] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2053.859824] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2053.861417] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2053.863002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2053.864590] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2058.538748] Bluetooth: hci4: command 0x0409 tx timeout [ 2060.586755] Bluetooth: hci4: command 0x041b tx timeout [ 2062.634832] Bluetooth: hci4: command 0x040f tx timeout [ 2063.534331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2063.537025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2063.546506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2063.568278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2063.570218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2063.572849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2064.682767] Bluetooth: hci4: command 0x0419 tx timeout [ 2072.144125] Bluetooth: hci0: command 0x0406 tx timeout 15:46:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 15:46:20 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) 15:46:20 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x2, {0x2a}}, 0x14}}, 0x0) 15:46:20 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:46:20 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:46:20 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 4) fallocate(r0, 0x0, 0x0, 0x8000) 15:46:20 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 15:46:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x30000}, 0x0) [ 2077.471265] FAULT_INJECTION: forcing a failure. [ 2077.471265] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.473721] CPU: 0 PID: 17004 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2077.475252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2077.477024] Call Trace: [ 2077.477588] dump_stack+0x107/0x167 [ 2077.478374] should_fail.cold+0x5/0xa [ 2077.479198] ? getname_flags.part.0+0x50/0x4f0 [ 2077.480184] should_failslab+0x5/0x20 [ 2077.481015] kmem_cache_alloc+0x5b/0x310 [ 2077.481865] getname_flags.part.0+0x50/0x4f0 [ 2077.482823] user_path_at_empty+0xa1/0x100 [ 2077.483728] __x64_sys_mount+0x1e9/0x300 [ 2077.484597] ? copy_mnt_ns+0xa00/0xa00 [ 2077.485418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2077.486567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2077.487648] do_syscall_64+0x33/0x40 [ 2077.488428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2077.489529] RIP: 0033:0x7f575796fb19 [ 2077.490312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2077.494199] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2077.495794] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2077.497298] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2077.498816] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2077.500305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2077.501796] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:46:20 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:20 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000004", @ANYRES32=r1, @ANYBLOB="0000000000262f66690300000066696c653000"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmctl$SHM_UNLOCK(r2, 0xc) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:46:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x3, {0x2a}}, 0x14}}, 0x0) 15:46:20 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:20 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 5) fallocate(r0, 0x0, 0x0, 0x8000) 15:46:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x60000}, 0x0) 15:46:20 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:20 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:46:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x6, {0x2a}}, 0x14}}, 0x0) 15:46:20 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 2077.844360] FAULT_INJECTION: forcing a failure. [ 2077.844360] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.846847] CPU: 0 PID: 17032 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2077.848308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2077.850055] Call Trace: [ 2077.850623] dump_stack+0x107/0x167 [ 2077.851397] should_fail.cold+0x5/0xa [ 2077.852206] ? create_object.isra.0+0x3a/0xa30 [ 2077.853175] should_failslab+0x5/0x20 [ 2077.853975] kmem_cache_alloc+0x5b/0x310 [ 2077.854853] ? __might_fault+0xd3/0x180 [ 2077.855707] create_object.isra.0+0x3a/0xa30 [ 2077.856642] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2077.857727] kmem_cache_alloc+0x159/0x310 [ 2077.858614] getname_flags.part.0+0x50/0x4f0 [ 2077.859545] user_path_at_empty+0xa1/0x100 [ 2077.860443] __x64_sys_mount+0x1e9/0x300 [ 2077.861292] ? copy_mnt_ns+0xa00/0xa00 [ 2077.862116] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2077.863246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2077.864349] do_syscall_64+0x33/0x40 [ 2077.865137] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2077.866224] RIP: 0033:0x7f575796fb19 [ 2077.867013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2077.870918] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2077.872524] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2077.874014] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2077.875541] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2077.877050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2077.878559] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:46:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 15:46:20 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x8, {0x2a}}, 0x14}}, 0x0) 15:46:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 15:46:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 15:46:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x9, {0x2a}}, 0x14}}, 0x0) 15:46:20 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2082.602726] Bluetooth: hci5: command 0x0409 tx timeout [ 2084.650812] Bluetooth: hci5: command 0x041b tx timeout [ 2086.698742] Bluetooth: hci5: command 0x040f tx timeout [ 2087.272632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2087.274610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2087.277771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2087.304617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2087.306447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2087.308610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2088.747714] Bluetooth: hci5: command 0x0419 tx timeout [ 2096.490741] Bluetooth: hci1: command 0x0406 tx timeout 15:46:42 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 6) fallocate(r0, 0x0, 0x0, 0x8000) 15:46:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 15:46:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0xf, {0x2a}}, 0x14}}, 0x0) 15:46:42 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:46:42 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:42 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 15:46:42 executing program 3: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:42 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9e2, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) [ 2099.928605] FAULT_INJECTION: forcing a failure. 15:46:42 executing program 3: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2099.928605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2099.930253] CPU: 1 PID: 17537 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2099.931401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2099.932381] Call Trace: [ 2099.932697] dump_stack+0x107/0x167 [ 2099.933132] should_fail.cold+0x5/0xa [ 2099.933582] strncpy_from_user+0x34/0x470 [ 2099.934072] getname_flags.part.0+0x95/0x4f0 [ 2099.936067] user_path_at_empty+0xa1/0x100 [ 2099.936708] __x64_sys_mount+0x1e9/0x300 [ 2099.937259] ? copy_mnt_ns+0xa00/0xa00 [ 2099.937827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2099.938547] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2099.939230] do_syscall_64+0x33/0x40 [ 2099.939735] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2099.940427] RIP: 0033:0x7f575796fb19 [ 2099.940890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2099.943363] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2099.944385] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2099.945275] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2099.946157] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2099.947004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2099.947978] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:46:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x300, {0x2a}}, 0x14}}, 0x0) 15:46:54 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 7) fallocate(r0, 0x0, 0x0, 0x8000) 15:46:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000180000009a9352694eb332b8ea8babefda0aa3d66db99f2e90de15c332eb166e4b3f5befbe7aa0ddd1765d", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x1, 0x2}) 15:46:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 15:46:54 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 15:46:54 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:54 executing program 3: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:46:54 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2111.564176] FAULT_INJECTION: forcing a failure. [ 2111.564176] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.565564] CPU: 1 PID: 17567 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2111.566408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.567418] Call Trace: [ 2111.567739] dump_stack+0x107/0x167 [ 2111.568177] should_fail.cold+0x5/0xa [ 2111.568637] ? alloc_fs_context+0x58/0x870 [ 2111.569154] should_failslab+0x5/0x20 [ 2111.569614] kmem_cache_alloc_trace+0x55/0x320 [ 2111.570167] alloc_fs_context+0x58/0x870 [ 2111.570668] path_mount+0xac3/0x2200 [ 2111.571116] ? strncpy_from_user+0x9e/0x470 [ 2111.571635] ? finish_automount+0xa90/0xa90 [ 2111.572156] ? getname_flags.part.0+0x1dd/0x4f0 [ 2111.572718] __x64_sys_mount+0x282/0x300 [ 2111.573203] ? copy_mnt_ns+0xa00/0xa00 [ 2111.573674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.574302] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.574923] do_syscall_64+0x33/0x40 [ 2111.575362] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.575971] RIP: 0033:0x7f575796fb19 [ 2111.576410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.578646] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2111.579559] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2111.580413] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2111.581267] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.582117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.582994] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:46:54 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 15:46:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x600, {0x2a}}, 0x14}}, 0x0) 15:46:54 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff00000000", @ANYRES32=r1, @ANYBLOB="0000000000d29d67dd324ada95f479aa2d140000002e"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:46:54 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x900, {0x2a}}, 0x14}}, 0x0) 15:46:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00WK', @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x2400, 0x5c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x9000) shmctl$SHM_LOCK(r3, 0xb) 15:46:54 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 8) fallocate(r0, 0x0, 0x0, 0x8000) 15:46:54 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:46:54 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2111.900224] FAULT_INJECTION: forcing a failure. [ 2111.900224] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.901917] CPU: 1 PID: 17605 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2111.902741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2111.903731] Call Trace: [ 2111.904055] dump_stack+0x107/0x167 [ 2111.904490] should_fail.cold+0x5/0xa [ 2111.904950] ? create_object.isra.0+0x3a/0xa30 [ 2111.905501] should_failslab+0x5/0x20 [ 2111.905956] kmem_cache_alloc+0x5b/0x310 [ 2111.906436] create_object.isra.0+0x3a/0xa30 [ 2111.906964] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2111.907567] kmem_cache_alloc_trace+0x151/0x320 [ 2111.908128] alloc_fs_context+0x58/0x870 [ 2111.908619] path_mount+0xac3/0x2200 [ 2111.909072] ? strncpy_from_user+0x9e/0x470 [ 2111.909575] ? finish_automount+0xa90/0xa90 [ 2111.910086] ? getname_flags.part.0+0x1dd/0x4f0 [ 2111.910660] __x64_sys_mount+0x282/0x300 [ 2111.911143] ? copy_mnt_ns+0xa00/0xa00 [ 2111.911610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2111.912237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2111.912857] do_syscall_64+0x33/0x40 [ 2111.913303] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2111.913913] RIP: 0033:0x7f575796fb19 [ 2111.914359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2111.916521] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2111.917423] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2111.918266] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2111.919117] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2111.919950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.920804] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:47:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 9) fallocate(r0, 0x0, 0x0, 0x8000) 15:47:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 15:47:08 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:08 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 15:47:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0xf00, {0x2a}}, 0x14}}, 0x0) 15:47:08 executing program 6: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9e2, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) 15:47:08 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/12) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000df36878d9e9891c9deda2d8b", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/67) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r4 = shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$SHM_LOCK(r3, 0xb) 15:47:08 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x30000, {0x2a}}, 0x14}}, 0x0) 15:47:08 executing program 5: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:08 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2125.979462] FAULT_INJECTION: forcing a failure. [ 2125.979462] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.982129] CPU: 0 PID: 17627 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2125.983660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.985467] Call Trace: [ 2125.986051] dump_stack+0x107/0x167 [ 2125.986864] should_fail.cold+0x5/0xa [ 2125.987709] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2125.988862] should_failslab+0x5/0x20 [ 2125.989691] __kmalloc_node+0x76/0x420 [ 2125.990542] ? lock_downgrade+0x6d0/0x6d0 [ 2125.991458] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2125.992577] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 2125.993670] ? trace_hardirqs_on+0x5b/0x180 [ 2125.994617] kmem_cache_alloc_trace+0x169/0x320 [ 2125.995646] alloc_fs_context+0x58/0x870 [ 2125.996548] path_mount+0xac3/0x2200 [ 2125.997370] ? strncpy_from_user+0x9e/0x470 [ 2125.998315] ? finish_automount+0xa90/0xa90 [ 2125.999271] ? getname_flags.part.0+0x1dd/0x4f0 [ 2126.000309] __x64_sys_mount+0x282/0x300 [ 2126.001197] ? copy_mnt_ns+0xa00/0xa00 [ 2126.002066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2126.003257] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2126.004399] do_syscall_64+0x33/0x40 [ 2126.005215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2126.006352] RIP: 0033:0x7f575796fb19 [ 2126.007183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2126.011221] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2126.012885] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2126.014444] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2126.016019] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2126.017588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2126.019192] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:47:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x2) [ 2126.216899] systemd-journald[103]: Failed to create new system journal: No space left on device [ 2126.259594] systemd-journald[103]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. 15:47:21 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 10) fallocate(r0, 0x0, 0x0, 0x8000) 15:47:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:47:21 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:47:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:47:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x60000, {0x2a}}, 0x14}}, 0x0) 15:47:21 executing program 5: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x3) 15:47:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:22 executing program 5: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x80000, {0x2a}}, 0x14}}, 0x0) [ 2139.279491] FAULT_INJECTION: forcing a failure. [ 2139.279491] name failslab, interval 1, probability 0, space 0, times 0 [ 2139.280898] CPU: 1 PID: 17664 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2139.281736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.282741] Call Trace: [ 2139.283074] dump_stack+0x107/0x167 [ 2139.283519] should_fail.cold+0x5/0xa [ 2139.283988] ? create_object.isra.0+0x3a/0xa30 [ 2139.284541] should_failslab+0x5/0x20 [ 2139.285002] kmem_cache_alloc+0x5b/0x310 [ 2139.285496] create_object.isra.0+0x3a/0xa30 [ 2139.286023] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2139.286636] kmem_cache_alloc_trace+0x151/0x320 [ 2139.287218] init_pseudo+0x44/0x180 [ 2139.287659] ? pipe_read+0xfd0/0xfd0 [ 2139.288108] pipefs_init_fs_context+0x19/0xa0 [ 2139.288646] ? pipe_read+0xfd0/0xfd0 [ 2139.289094] alloc_fs_context+0x518/0x870 [ 2139.289600] path_mount+0xac3/0x2200 [ 2139.290052] ? strncpy_from_user+0x9e/0x470 [ 2139.290569] ? finish_automount+0xa90/0xa90 [ 2139.291095] ? getname_flags.part.0+0x1dd/0x4f0 [ 2139.291662] __x64_sys_mount+0x282/0x300 [ 2139.292151] ? copy_mnt_ns+0xa00/0xa00 [ 2139.292624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.293256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.293875] do_syscall_64+0x33/0x40 [ 2139.294322] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2139.294950] RIP: 0033:0x7f575796fb19 [ 2139.295397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2139.297599] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2139.298512] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2139.299375] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2139.300227] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.301085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2139.301940] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:47:22 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:22 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:47:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x6) 15:47:22 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:34 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:47:34 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 15:47:34 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 11) fallocate(r0, 0x0, 0x0, 0x8000) 15:47:34 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x8) 15:47:34 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100fd09c1000000180000001a37afc67c986a251929cc141b741aa6b04f68dca7ee2481bd58c34bb316a6f8a232", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, r3, 0x77f46000) r5 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000140)=""/75) perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x80, 0x9, 0x7f, 0x6, 0x7f, 0x0, 0x8, 0x66412, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x6, @perf_bp={&(0x7f0000000000), 0x2}, 0x8, 0x0, 0x20, 0x8, 0x5, 0x20, 0x7, 0x0, 0x5, 0x0, 0x5}, r1, 0x7, r0, 0x2) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) 15:47:34 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:47:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x1000000, {0x2a}}, 0x14}}, 0x0) 15:47:34 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x2000000, {0x2a}}, 0x14}}, 0x0) 15:47:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x9) [ 2152.225087] FAULT_INJECTION: forcing a failure. [ 2152.225087] name failslab, interval 1, probability 0, space 0, times 0 [ 2152.226520] CPU: 0 PID: 17716 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2152.227364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2152.228351] Call Trace: [ 2152.228677] dump_stack+0x107/0x167 [ 2152.229111] should_fail.cold+0x5/0xa [ 2152.229556] ? init_pseudo+0x44/0x180 [ 2152.230007] should_failslab+0x5/0x20 [ 2152.230438] kmem_cache_alloc_trace+0x55/0x320 [ 2152.230982] init_pseudo+0x44/0x180 [ 2152.231420] ? pipe_read+0xfd0/0xfd0 [ 2152.231862] pipefs_init_fs_context+0x19/0xa0 [ 2152.232389] ? pipe_read+0xfd0/0xfd0 [ 2152.232830] alloc_fs_context+0x518/0x870 [ 2152.233321] path_mount+0xac3/0x2200 [ 2152.233743] ? strncpy_from_user+0x9e/0x470 [ 2152.234253] ? finish_automount+0xa90/0xa90 [ 2152.234737] ? getname_flags.part.0+0x1dd/0x4f0 [ 2152.235299] __x64_sys_mount+0x282/0x300 [ 2152.235779] ? copy_mnt_ns+0xa00/0xa00 [ 2152.236227] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2152.236849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2152.237461] do_syscall_64+0x33/0x40 [ 2152.237907] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2152.238514] RIP: 0033:0x7f575796fb19 [ 2152.238953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2152.241012] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2152.241912] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2152.242754] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2152.243562] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2152.244356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2152.245148] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:47:35 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:35 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 15:47:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x3000000, {0x2a}}, 0x14}}, 0x0) 15:47:35 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="0000060000000007dcdd0f68", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:47:35 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0xf) [ 2157.930779] Bluetooth: hci2: command 0x0406 tx timeout 15:47:49 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00337e5c48040000002f66696c65312f66696c653000"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) r4 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) shmat(r4, &(0x7f0000ff5000/0x8000)=nil, 0x7000) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:47:49 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 15:47:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x300) 15:47:49 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x9000000, {0x2a}}, 0x14}}, 0x0) 15:47:49 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 12) fallocate(r0, 0x0, 0x0, 0x8000) 15:47:49 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:47:49 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2166.691810] FAULT_INJECTION: forcing a failure. [ 2166.691810] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.694350] CPU: 1 PID: 17755 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2166.695837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2166.697570] Call Trace: [ 2166.698172] dump_stack+0x107/0x167 [ 2166.698969] should_fail.cold+0x5/0xa [ 2166.699813] ? create_object.isra.0+0x3a/0xa30 [ 2166.700763] should_failslab+0x5/0x20 [ 2166.701558] kmem_cache_alloc+0x5b/0x310 [ 2166.702422] create_object.isra.0+0x3a/0xa30 [ 2166.703362] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2166.704430] kmem_cache_alloc_trace+0x151/0x320 [ 2166.705423] init_pseudo+0x44/0x180 [ 2166.706181] ? pipe_read+0xfd0/0xfd0 [ 2166.706955] pipefs_init_fs_context+0x19/0xa0 [ 2166.707909] ? pipe_read+0xfd0/0xfd0 [ 2166.708687] alloc_fs_context+0x518/0x870 [ 2166.709562] path_mount+0xac3/0x2200 [ 2166.710355] ? strncpy_from_user+0x9e/0x470 [ 2166.711270] ? finish_automount+0xa90/0xa90 [ 2166.712176] ? getname_flags.part.0+0x1dd/0x4f0 [ 2166.713155] __x64_sys_mount+0x282/0x300 [ 2166.714005] ? copy_mnt_ns+0xa00/0xa00 [ 2166.714840] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2166.715958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2166.717085] do_syscall_64+0x33/0x40 [ 2166.717877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2166.718988] RIP: 0033:0x7f575796fb19 [ 2166.719769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2166.723621] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2166.725207] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2166.726737] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2166.728239] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2166.729727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2166.731207] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:47:49 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:47:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x600) 15:47:49 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) 15:47:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0xf000000, {0x2a}}, 0x14}}, 0x0) 15:47:49 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:47:49 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:47:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0xffffff7f, {0x2a}}, 0x14}}, 0x0) 15:47:49 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 15:47:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x900) 15:47:49 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 13) fallocate(r0, 0x0, 0x0, 0x8000) 15:47:49 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) [ 2167.128323] FAULT_INJECTION: forcing a failure. [ 2167.128323] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.131137] CPU: 1 PID: 17789 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2167.132634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2167.134433] Call Trace: [ 2167.135015] dump_stack+0x107/0x167 [ 2167.135825] should_fail.cold+0x5/0xa [ 2167.136660] ? selinux_sb_alloc_security+0x41/0x220 [ 2167.137751] should_failslab+0x5/0x20 [ 2167.138585] kmem_cache_alloc_trace+0x55/0x320 [ 2167.139598] ? down_write_nested+0xe4/0x160 [ 2167.140547] selinux_sb_alloc_security+0x41/0x220 [ 2167.141603] security_sb_alloc+0x46/0xa0 [ 2167.142492] alloc_super+0x1ed/0xa90 [ 2167.143324] sget_fc+0x110/0x860 [ 2167.144063] ? set_anon_super+0xc0/0xc0 [ 2167.144939] ? pseudo_fs_get_tree+0x20/0x20 [ 2167.145880] get_tree_nodev+0x24/0x1d0 [ 2167.146729] vfs_get_tree+0x8e/0x300 [ 2167.147549] path_mount+0x14ab/0x2200 [ 2167.148383] ? strncpy_from_user+0x9e/0x470 [ 2167.149324] ? finish_automount+0xa90/0xa90 [ 2167.150270] ? getname_flags.part.0+0x1dd/0x4f0 [ 2167.151304] __x64_sys_mount+0x282/0x300 [ 2167.152193] ? copy_mnt_ns+0xa00/0xa00 [ 2167.153051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2167.154201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2167.155338] do_syscall_64+0x33/0x40 [ 2167.156155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2167.157276] RIP: 0033:0x7f575796fb19 [ 2167.158088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2167.162114] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2167.163787] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2167.165344] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2167.166900] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2167.168462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2167.170016] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:48:03 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 14) fallocate(r0, 0x0, 0x0, 0x8000) 15:48:03 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="0100ecb858e728c1581c3400", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:48:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0xf00) 15:48:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 15:48:03 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 15:48:03 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 15:48:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) 15:48:03 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:48:03 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:48:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 15:48:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x30000) [ 2180.519786] FAULT_INJECTION: forcing a failure. [ 2180.519786] name failslab, interval 1, probability 0, space 0, times 0 [ 2180.522705] CPU: 0 PID: 17812 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2180.524315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2180.526240] Call Trace: [ 2180.526851] dump_stack+0x107/0x167 [ 2180.527702] should_fail.cold+0x5/0xa [ 2180.528571] ? create_object.isra.0+0x3a/0xa30 [ 2180.529609] should_failslab+0x5/0x20 15:48:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 1) [ 2180.530482] kmem_cache_alloc+0x5b/0x310 [ 2180.531522] create_object.isra.0+0x3a/0xa30 15:48:03 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 2180.532521] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2180.533720] kmem_cache_alloc_trace+0x151/0x320 [ 2180.534762] ? down_write_nested+0xe4/0x160 [ 2180.535741] selinux_sb_alloc_security+0x41/0x220 [ 2180.536830] security_sb_alloc+0x46/0xa0 [ 2180.537737] alloc_super+0x1ed/0xa90 [ 2180.538586] sget_fc+0x110/0x860 [ 2180.539342] ? set_anon_super+0xc0/0xc0 [ 2180.540258] ? pseudo_fs_get_tree+0x20/0x20 [ 2180.541227] get_tree_nodev+0x24/0x1d0 [ 2180.542107] vfs_get_tree+0x8e/0x300 [ 2180.542942] path_mount+0x14ab/0x2200 [ 2180.543819] ? strncpy_from_user+0x9e/0x470 [ 2180.544786] ? finish_automount+0xa90/0xa90 [ 2180.545766] ? getname_flags.part.0+0x1dd/0x4f0 [ 2180.546815] __x64_sys_mount+0x282/0x300 [ 2180.547739] ? copy_mnt_ns+0xa00/0xa00 [ 2180.548622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2180.549802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2180.550971] do_syscall_64+0x33/0x40 [ 2180.551811] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2180.552963] RIP: 0033:0x7f575796fb19 [ 2180.553794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2180.557899] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2180.559620] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2180.561215] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2180.562819] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2180.564426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2180.566021] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:48:03 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) [ 2180.576975] FAULT_INJECTION: forcing a failure. [ 2180.576975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2180.579758] CPU: 0 PID: 17816 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2180.581306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2180.583166] Call Trace: [ 2180.583968] dump_stack+0x107/0x167 [ 2180.584892] should_fail.cold+0x5/0xa [ 2180.585862] _copy_from_user+0x2e/0x1b0 [ 2180.586865] ioctl_preallocate+0x9f/0x210 [ 2180.587927] ? fiemap_prep+0x220/0x220 [ 2180.588798] ? find_held_lock+0x2c/0x110 [ 2180.589723] do_vfs_ioctl+0xe59/0x10d0 [ 2180.590589] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2180.591767] ? generic_block_fiemap+0x60/0x60 [ 2180.592767] ? lock_downgrade+0x6d0/0x6d0 [ 2180.593695] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2180.594773] ? wait_for_completion_io+0x270/0x270 [ 2180.595869] ? selinux_file_ioctl+0xb6/0x270 [ 2180.596862] __x64_sys_ioctl+0x10c/0x210 [ 2180.597774] do_syscall_64+0x33/0x40 [ 2180.598607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2180.599768] RIP: 0033:0x7f1c84620b19 [ 2180.600602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2180.604711] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2180.606416] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2180.608017] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2180.609612] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2180.611230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2180.612841] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 15:48:03 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x6412, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000a7113debdde13fa76140bcffa3f7f410f44d595dffc1994d643d3da6d075248375fe9199b640c6f1460398c51fb55d6e7d6759072220e38c5e534ca2a5ac1ad74e5a27c51a1a7a76d97f956d6c9655057fc582010000807d4db242c607959eb0d4cdab39ae9de14868f321f17028c4344e26d6acaf2ae035fad31f2924bf7e444273dc46badacf582d6bb9b26dd049d815b499c0c4f7980e5ef79f239193b3bc7085027d1e8d07933b7c5fba1867c22e0eba0322e7093e3fca2ed4018f749a6f2bd1072f2d8f5730f196e473436c4b5da3de16b0a702", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x000\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0032ab00b4d597b1bb80ff4f5c70aacf8fb68863583df09b94f8ec195711223c8c33ccc1d224add2c01e47383824044f32620a3511ce26971a534dd00cabcc796a82534ce326876aa9336f5c5dcb007254621dfbc0606f5ddd45dd938ecc07"], 0x14}}, 0x0) ftruncate(0xffffffffffffffff, 0x7) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 2182.507749] Bluetooth: hci4: command 0x0406 tx timeout [ 2185.258723] Bluetooth: hci0: command 0x0409 tx timeout [ 2187.306732] Bluetooth: hci0: command 0x041b tx timeout [ 2189.354716] Bluetooth: hci0: command 0x040f tx timeout [ 2190.221049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2190.222736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2190.225393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2190.282076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2190.284025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2190.286992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2191.403850] Bluetooth: hci0: command 0x0419 tx timeout 15:48:28 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) r4 = shmget(0x2, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmctl$SHM_LOCK(r3, 0xb) 15:48:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 15:48:28 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 15) fallocate(r0, 0x0, 0x0, 0x8000) 15:48:28 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) 15:48:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x60000) 15:48:28 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:48:28 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 2) 15:48:28 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) [ 2205.528452] FAULT_INJECTION: forcing a failure. [ 2205.528452] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.531190] CPU: 1 PID: 18305 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2205.532671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.534423] Call Trace: [ 2205.534986] dump_stack+0x107/0x167 [ 2205.535765] should_fail.cold+0x5/0xa [ 2205.536576] ? jbd2__journal_start+0x190/0x7e0 [ 2205.537539] should_failslab+0x5/0x20 [ 2205.538349] kmem_cache_alloc+0x5b/0x310 [ 2205.539216] jbd2__journal_start+0x190/0x7e0 [ 2205.540150] __ext4_journal_start_sb+0x214/0x390 [ 2205.541156] ext4_dirty_inode+0xbc/0x130 [ 2205.542013] ? ext4_setattr+0x21b0/0x21b0 [ 2205.542888] __mark_inode_dirty+0x492/0xd30 [ 2205.543814] ? current_time+0xac/0x120 [ 2205.544636] generic_update_time+0x21c/0x370 [ 2205.545531] ? igrab+0xc0/0xc0 [ 2205.546209] file_update_time+0x43a/0x520 [ 2205.547048] ? evict_inodes+0x470/0x470 [ 2205.547912] ? down_write_killable+0x180/0x180 [ 2205.548871] file_modified+0x7d/0xa0 [ 2205.549637] ext4_fallocate+0x3c6/0x3850 [ 2205.550465] ? ioctl_preallocate+0x192/0x210 [ 2205.551405] ? lock_release+0x680/0x680 [ 2205.552254] ? ext4_ext_truncate+0x250/0x250 [ 2205.553173] ? selinux_file_permission+0x92/0x520 [ 2205.554154] ? ext4_ext_truncate+0x250/0x250 [ 2205.555074] vfs_fallocate+0x48f/0xda0 [ 2205.555903] ioctl_preallocate+0x192/0x210 [ 2205.556795] ? fiemap_prep+0x220/0x220 [ 2205.557611] ? find_held_lock+0x2c/0x110 [ 2205.558485] do_vfs_ioctl+0xe59/0x10d0 [ 2205.559277] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2205.560382] ? generic_block_fiemap+0x60/0x60 [ 2205.560563] FAULT_INJECTION: forcing a failure. [ 2205.560563] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.561328] ? lock_downgrade+0x6d0/0x6d0 [ 2205.561370] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.565579] ? wait_for_completion_io+0x270/0x270 [ 2205.566605] ? selinux_file_ioctl+0xb6/0x270 [ 2205.567546] __x64_sys_ioctl+0x10c/0x210 [ 2205.568412] do_syscall_64+0x33/0x40 [ 2205.569203] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2205.570283] RIP: 0033:0x7f1c84620b19 [ 2205.571073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.574969] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2205.576580] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2205.578085] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2205.579606] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.581123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2205.582633] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2205.584165] CPU: 0 PID: 18308 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2205.585611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.587373] Call Trace: [ 2205.587935] dump_stack+0x107/0x167 [ 2205.588713] should_fail.cold+0x5/0xa [ 2205.589533] ? create_object.isra.0+0x3a/0xa30 [ 2205.590494] should_failslab+0x5/0x20 [ 2205.591295] kmem_cache_alloc+0x5b/0x310 [ 2205.592171] create_object.isra.0+0x3a/0xa30 [ 2205.593108] kmemleak_alloc_percpu+0xa0/0x100 [ 2205.594060] pcpu_alloc+0x4e2/0x1240 [ 2205.594866] __percpu_init_rwsem+0x22/0x150 [ 2205.595785] alloc_super+0x232/0xa90 [ 2205.596573] sget_fc+0x110/0x860 [ 2205.597286] ? set_anon_super+0xc0/0xc0 [ 2205.598127] ? pseudo_fs_get_tree+0x20/0x20 [ 2205.599036] get_tree_nodev+0x24/0x1d0 [ 2205.599865] vfs_get_tree+0x8e/0x300 [ 2205.600649] path_mount+0x14ab/0x2200 [ 2205.601451] ? strncpy_from_user+0x9e/0x470 [ 2205.602363] ? finish_automount+0xa90/0xa90 [ 2205.603269] ? getname_flags.part.0+0x1dd/0x4f0 [ 2205.604266] __x64_sys_mount+0x282/0x300 [ 2205.605114] ? copy_mnt_ns+0xa00/0xa00 [ 2205.605932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 15:48:28 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 2205.607035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.608288] do_syscall_64+0x33/0x40 [ 2205.609080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2205.610162] RIP: 0033:0x7f575796fb19 [ 2205.610944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.614834] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2205.616436] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2205.617937] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2205.619442] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.620955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2205.622465] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:48:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x80000) 15:48:28 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) 15:48:28 executing program 2: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:48:28 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = epoll_create(0xffffffff) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001e00)=ANY=[@ANYRES16=r3, @ANYRESDEC=r1, @ANYRES16=r0, @ANYBLOB="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", @ANYRESOCT, @ANYBLOB="0163c473d9ab0ad856270556c86891b93154378b770886adc88ba952f9c7471abd7635c382a48322ca1c489a203653806b91e03585e6", @ANYRESHEX, @ANYRESHEX, @ANYBLOB="1197b794c6cd8717e17552b3128bf67cff00000000e8ef05c67e327c335e1a822c7fd66d4fe2c3580000001064fa8230ececac476ef1dbc74a67edc2e9b4584c5912cbee1ed7ae3e68a58a49da0fbcb85cc3f51fa8ab9409777d830c7ef38efa7564266e01b44edf327b6e2717eba6b80922bc3e803a83c63b3d24c07b0157c9668936bb17756683dbf506a8810ab54b440df2348055433d04bac49a399ff00f541f49020851c0fb6f3ff49da1180ec14205f9e26869ac7b44688f37dc3c041ff9bd5ccdf9d1f9caa4e91740ac1506963c9fc689b87a7ce1b3248d6518becfee89f47afd2d2a91ff39db1feaa72bbd2e240a89c9f0f3d12f076e4c9e70", @ANYRES16=r2]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r5 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) 15:48:28 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 16) fallocate(r0, 0x0, 0x0, 0x8000) 15:48:28 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 3) [ 2205.830175] FAULT_INJECTION: forcing a failure. [ 2205.830175] name failslab, interval 1, probability 0, space 0, times 0 15:48:28 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) [ 2205.832710] CPU: 1 PID: 18321 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2205.834205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.835980] Call Trace: [ 2205.836548] dump_stack+0x107/0x167 [ 2205.837321] should_fail.cold+0x5/0xa [ 2205.838132] ? create_object.isra.0+0x3a/0xa30 [ 2205.839093] should_failslab+0x5/0x20 [ 2205.839906] kmem_cache_alloc+0x5b/0x310 [ 2205.840778] create_object.isra.0+0x3a/0xa30 [ 2205.841710] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2205.842791] kmem_cache_alloc+0x159/0x310 [ 2205.843677] jbd2__journal_start+0x190/0x7e0 [ 2205.844627] __ext4_journal_start_sb+0x214/0x390 [ 2205.845631] ext4_dirty_inode+0xbc/0x130 [ 2205.846483] ? ext4_setattr+0x21b0/0x21b0 [ 2205.847360] __mark_inode_dirty+0x492/0xd30 [ 2205.848279] ? current_time+0xac/0x120 [ 2205.849110] generic_update_time+0x21c/0x370 [ 2205.850035] ? igrab+0xc0/0xc0 [ 2205.850722] file_update_time+0x43a/0x520 [ 2205.851592] ? evict_inodes+0x470/0x470 [ 2205.852448] ? down_write_killable+0x180/0x180 [ 2205.853420] file_modified+0x7d/0xa0 [ 2205.854207] ext4_fallocate+0x3c6/0x3850 [ 2205.855070] ? ioctl_preallocate+0x192/0x210 [ 2205.856014] ? lock_release+0x680/0x680 [ 2205.856862] ? ext4_ext_truncate+0x250/0x250 [ 2205.857794] ? selinux_file_permission+0x92/0x520 [ 2205.858822] ? ext4_ext_truncate+0x250/0x250 [ 2205.859758] vfs_fallocate+0x48f/0xda0 [ 2205.860595] ioctl_preallocate+0x192/0x210 [ 2205.861488] ? fiemap_prep+0x220/0x220 [ 2205.862308] ? find_held_lock+0x2c/0x110 [ 2205.863190] do_vfs_ioctl+0xe59/0x10d0 [ 2205.864025] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2205.865137] ? generic_block_fiemap+0x60/0x60 [ 2205.866085] ? lock_downgrade+0x6d0/0x6d0 [ 2205.866972] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2205.868008] ? wait_for_completion_io+0x270/0x270 [ 2205.869039] ? selinux_file_ioctl+0xb6/0x270 [ 2205.869982] __x64_sys_ioctl+0x10c/0x210 [ 2205.870846] do_syscall_64+0x33/0x40 [ 2205.871635] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2205.872724] RIP: 0033:0x7f1c84620b19 [ 2205.873510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.877407] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2205.879020] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2205.880541] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2205.882050] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.883555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2205.885065] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2205.904609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18325 comm=syz-executor.7 [ 2205.925126] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18328 comm=syz-executor.7 [ 2205.958942] FAULT_INJECTION: forcing a failure. [ 2205.958942] name failslab, interval 1, probability 0, space 0, times 0 [ 2205.961352] CPU: 1 PID: 18330 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2205.962830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2205.964592] Call Trace: [ 2205.965153] dump_stack+0x107/0x167 [ 2205.965935] should_fail.cold+0x5/0xa [ 2205.966744] ? create_object.isra.0+0x3a/0xa30 [ 2205.967712] should_failslab+0x5/0x20 [ 2205.968521] kmem_cache_alloc+0x5b/0x310 [ 2205.969378] ? mark_held_locks+0x9e/0xe0 [ 2205.970236] create_object.isra.0+0x3a/0xa30 [ 2205.971182] kmemleak_alloc_percpu+0xa0/0x100 [ 2205.972142] pcpu_alloc+0x4e2/0x1240 [ 2205.972946] __percpu_init_rwsem+0x22/0x150 [ 2205.973855] alloc_super+0x232/0xa90 [ 2205.974643] sget_fc+0x110/0x860 [ 2205.975362] ? set_anon_super+0xc0/0xc0 [ 2205.976211] ? pseudo_fs_get_tree+0x20/0x20 [ 2205.977116] get_tree_nodev+0x24/0x1d0 [ 2205.977943] vfs_get_tree+0x8e/0x300 [ 2205.978727] path_mount+0x14ab/0x2200 [ 2205.979534] ? strncpy_from_user+0x9e/0x470 [ 2205.980451] ? finish_automount+0xa90/0xa90 [ 2205.981360] ? getname_flags.part.0+0x1dd/0x4f0 [ 2205.982356] __x64_sys_mount+0x282/0x300 [ 2205.983207] ? copy_mnt_ns+0xa00/0xa00 [ 2205.984044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2205.985155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2205.986244] do_syscall_64+0x33/0x40 [ 2205.987029] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2205.988117] RIP: 0033:0x7f575796fb19 [ 2205.988899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2205.992789] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2205.994396] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2205.995915] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2205.997415] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2205.998914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2206.000424] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2210.410729] Bluetooth: hci5: command 0x0409 tx timeout [ 2212.458730] Bluetooth: hci5: command 0x041b tx timeout [ 2214.506807] Bluetooth: hci5: command 0x040f tx timeout [ 2215.181317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2215.183165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2215.186367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2215.240183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2215.241951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2215.244709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2216.554726] Bluetooth: hci5: command 0x0419 tx timeout 15:48:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) 15:48:51 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) 15:48:51 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 17) fallocate(r0, 0x0, 0x0, 0x8000) 15:48:51 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:48:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x1000000) 15:48:51 executing program 2: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:48:51 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 4) 15:48:51 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) fallocate(r0, 0x0, 0x0, 0x0) [ 2228.593663] FAULT_INJECTION: forcing a failure. [ 2228.593663] name failslab, interval 1, probability 0, space 0, times 0 [ 2228.596767] CPU: 0 PID: 18803 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2228.598528] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2228.600674] Call Trace: [ 2228.601349] dump_stack+0x107/0x167 [ 2228.602296] should_fail.cold+0x5/0xa [ 2228.603280] ? jbd2__journal_start+0x190/0x7e0 [ 2228.604472] should_failslab+0x5/0x20 [ 2228.605463] kmem_cache_alloc+0x5b/0x310 [ 2228.606511] jbd2__journal_start+0x190/0x7e0 [ 2228.607658] __ext4_journal_start_sb+0x214/0x390 [ 2228.608896] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2228.610242] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2228.611486] ? down_write_killable+0x180/0x180 [ 2228.612698] ext4_fallocate+0x415/0x3850 [ 2228.613734] ? ioctl_preallocate+0x192/0x210 [ 2228.614868] ? lock_release+0x680/0x680 [ 2228.615890] ? ext4_ext_truncate+0x250/0x250 [ 2228.617036] ? selinux_file_permission+0x92/0x520 [ 2228.618279] ? ext4_ext_truncate+0x250/0x250 [ 2228.619413] vfs_fallocate+0x48f/0xda0 [ 2228.620440] ioctl_preallocate+0x192/0x210 [ 2228.621531] ? fiemap_prep+0x220/0x220 [ 2228.622535] ? find_held_lock+0x2c/0x110 [ 2228.623599] do_vfs_ioctl+0xe59/0x10d0 [ 2228.624638] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2228.625817] ? generic_block_fiemap+0x60/0x60 [ 2228.626838] ? lock_downgrade+0x6d0/0x6d0 [ 2228.627777] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2228.628888] ? wait_for_completion_io+0x270/0x270 [ 2228.629997] ? selinux_file_ioctl+0xb6/0x270 [ 2228.631009] __x64_sys_ioctl+0x10c/0x210 [ 2228.631934] do_syscall_64+0x33/0x40 [ 2228.632792] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2228.633960] RIP: 0033:0x7f1c84620b19 [ 2228.634803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2228.638973] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2228.640713] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2228.642322] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2228.643925] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2228.645550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2228.647156] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 15:48:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x21}}, 0x14}}, 0x0) 15:48:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x2000000) 15:48:51 executing program 2: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 2228.654270] FAULT_INJECTION: forcing a failure. [ 2228.654270] name failslab, interval 1, probability 0, space 0, times 0 [ 2228.656832] CPU: 0 PID: 18813 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2228.658399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2228.660281] Call Trace: [ 2228.660884] dump_stack+0x107/0x167 [ 2228.661700] should_fail.cold+0x5/0xa [ 2228.662587] ? create_object.isra.0+0x3a/0xa30 [ 2228.663624] should_failslab+0x5/0x20 [ 2228.664491] kmem_cache_alloc+0x5b/0x310 [ 2228.665416] create_object.isra.0+0x3a/0xa30 [ 2228.666415] kmemleak_alloc_percpu+0xa0/0x100 [ 2228.667443] pcpu_alloc+0x4e2/0x1240 [ 2228.668332] __percpu_init_rwsem+0x22/0x150 [ 2228.669314] alloc_super+0x232/0xa90 [ 2228.670165] sget_fc+0x110/0x860 [ 2228.670932] ? set_anon_super+0xc0/0xc0 [ 2228.671838] ? pseudo_fs_get_tree+0x20/0x20 [ 2228.672818] get_tree_nodev+0x24/0x1d0 [ 2228.673682] vfs_get_tree+0x8e/0x300 [ 2228.674536] path_mount+0x14ab/0x2200 [ 2228.675406] ? strncpy_from_user+0x9e/0x470 [ 2228.676390] ? finish_automount+0xa90/0xa90 [ 2228.677377] ? getname_flags.part.0+0x1dd/0x4f0 [ 2228.678441] __x64_sys_mount+0x282/0x300 [ 2228.679355] ? copy_mnt_ns+0xa00/0xa00 [ 2228.680250] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2228.681438] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2228.682608] do_syscall_64+0x33/0x40 [ 2228.683455] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2228.684603] RIP: 0033:0x7f575796fb19 [ 2228.685446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2228.689618] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2228.691339] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2228.692964] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2228.694581] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2228.696201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2228.697811] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:48:51 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x4, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:48:51 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 5) [ 2228.751308] FAULT_INJECTION: forcing a failure. [ 2228.751308] name failslab, interval 1, probability 0, space 0, times 0 [ 2228.752846] CPU: 1 PID: 18821 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2228.753653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2228.754611] Call Trace: [ 2228.754928] dump_stack+0x107/0x167 [ 2228.755349] should_fail.cold+0x5/0xa [ 2228.755796] ? create_object.isra.0+0x3a/0xa30 [ 2228.756332] should_failslab+0x5/0x20 [ 2228.756771] kmem_cache_alloc+0x5b/0x310 [ 2228.757241] create_object.isra.0+0x3a/0xa30 [ 2228.757744] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2228.758335] kmem_cache_alloc+0x159/0x310 [ 2228.758816] jbd2__journal_start+0x190/0x7e0 [ 2228.759324] __ext4_journal_start_sb+0x214/0x390 [ 2228.759874] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2228.760490] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2228.761051] ? down_write_killable+0x180/0x180 [ 2228.761584] ext4_fallocate+0x415/0x3850 [ 2228.762058] ? ioctl_preallocate+0x192/0x210 [ 2228.762571] ? lock_release+0x680/0x680 [ 2228.763034] ? ext4_ext_truncate+0x250/0x250 [ 2228.763541] ? selinux_file_permission+0x92/0x520 [ 2228.764106] ? ext4_ext_truncate+0x250/0x250 [ 2228.764614] vfs_fallocate+0x48f/0xda0 [ 2228.765069] ioctl_preallocate+0x192/0x210 [ 2228.765558] ? fiemap_prep+0x220/0x220 [ 2228.766005] ? find_held_lock+0x2c/0x110 [ 2228.766485] do_vfs_ioctl+0xe59/0x10d0 [ 2228.766935] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2228.767539] ? generic_block_fiemap+0x60/0x60 [ 2228.768063] ? lock_downgrade+0x6d0/0x6d0 [ 2228.768543] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2228.769099] ? wait_for_completion_io+0x270/0x270 [ 2228.769660] ? selinux_file_ioctl+0xb6/0x270 [ 2228.770180] __x64_sys_ioctl+0x10c/0x210 [ 2228.770648] do_syscall_64+0x33/0x40 [ 2228.771095] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2228.771697] RIP: 0033:0x7f1c84620b19 [ 2228.772133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2228.774198] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2228.775013] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2228.775789] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2228.776619] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2228.777435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2228.778253] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 15:49:03 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:03 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) r4 = shmget(0x3, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:49:03 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 1) 15:49:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 6) 15:49:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x3000000) 15:49:03 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) fallocate(r0, 0x0, 0x0, 0x0) 15:49:03 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 18) fallocate(r0, 0x0, 0x0, 0x8000) 15:49:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) [ 2240.783704] FAULT_INJECTION: forcing a failure. [ 2240.783704] name failslab, interval 1, probability 0, space 0, times 0 [ 2240.786317] CPU: 1 PID: 18841 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2240.787850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2240.789689] Call Trace: [ 2240.790279] dump_stack+0x107/0x167 [ 2240.791092] should_fail.cold+0x5/0xa [ 2240.791950] ? create_object.isra.0+0x3a/0xa30 [ 2240.792969] should_failslab+0x5/0x20 [ 2240.793818] kmem_cache_alloc+0x5b/0x310 [ 2240.794727] create_object.isra.0+0x3a/0xa30 [ 2240.795702] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2240.796834] kmem_cache_alloc+0x159/0x310 [ 2240.797764] jbd2__journal_start+0x190/0x7e0 [ 2240.798746] __ext4_journal_start_sb+0x214/0x390 [ 2240.799806] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2240.800992] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2240.802070] ? down_write_killable+0x180/0x180 [ 2240.803093] ext4_fallocate+0x415/0x3850 [ 2240.803998] ? ioctl_preallocate+0x192/0x210 [ 2240.804987] ? lock_release+0x680/0x680 [ 2240.805879] ? ext4_ext_truncate+0x250/0x250 [ 2240.806864] ? selinux_file_permission+0x92/0x520 [ 2240.807937] ? ext4_ext_truncate+0x250/0x250 [ 2240.808920] vfs_fallocate+0x48f/0xda0 [ 2240.809797] ioctl_preallocate+0x192/0x210 [ 2240.810737] ? fiemap_prep+0x220/0x220 [ 2240.811596] ? find_held_lock+0x2c/0x110 [ 2240.812526] do_vfs_ioctl+0xe59/0x10d0 [ 2240.813394] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2240.814548] ? generic_block_fiemap+0x60/0x60 [ 2240.815529] ? lock_downgrade+0x6d0/0x6d0 [ 2240.816444] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2240.817502] ? wait_for_completion_io+0x270/0x270 [ 2240.818571] ? selinux_file_ioctl+0xb6/0x270 [ 2240.819554] __x64_sys_ioctl+0x10c/0x210 [ 2240.820454] do_syscall_64+0x33/0x40 [ 2240.821279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2240.822368] FAULT_INJECTION: forcing a failure. [ 2240.822368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2240.822413] RIP: 0033:0x7f1c84620b19 [ 2240.824694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2240.828746] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2240.830423] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2240.831993] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2240.833567] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2240.835118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2240.836677] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2240.838257] CPU: 0 PID: 18839 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2240.839134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2240.840190] Call Trace: [ 2240.840526] dump_stack+0x107/0x167 [ 2240.840989] should_fail.cold+0x5/0xa [ 2240.841479] _copy_from_user+0x2e/0x1b0 [ 2240.841981] ioctl_preallocate+0x9f/0x210 [ 2240.842513] ? fiemap_prep+0x220/0x220 [ 2240.842996] ? find_held_lock+0x2c/0x110 [ 2240.843517] do_vfs_ioctl+0xe59/0x10d0 [ 2240.844003] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2240.844681] ? generic_block_fiemap+0x60/0x60 [ 2240.845248] ? lock_downgrade+0x6d0/0x6d0 [ 2240.845767] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2240.846375] ? wait_for_completion_io+0x270/0x270 [ 2240.846984] ? selinux_file_ioctl+0xb6/0x270 [ 2240.847549] __x64_sys_ioctl+0x10c/0x210 [ 2240.848062] do_syscall_64+0x33/0x40 [ 2240.848539] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2240.849174] RIP: 0033:0x7f96bed8eb19 [ 2240.849639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2240.851909] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2240.852876] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2240.853790] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2240.854695] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2240.855606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2240.856518] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:49:03 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0x81) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="312f66696c6530080000002538aea50d49198c6eebae63fe521116d36edfb0b22fa4ff623fb68a7b4f5c86569a7f7764e0241e9c47aed15ca5c414f3a34f593d9e81c148e8c60b666294590e54972649174372e4d4f066e0fbf6b9756d5cd900"/109]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r4 = shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x3000) 15:49:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 15:49:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x9000000) [ 2240.903432] FAULT_INJECTION: forcing a failure. [ 2240.903432] name failslab, interval 1, probability 0, space 0, times 0 [ 2240.904865] CPU: 0 PID: 18861 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2240.905726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2240.906767] Call Trace: [ 2240.907102] dump_stack+0x107/0x167 [ 2240.907560] should_fail.cold+0x5/0xa [ 2240.908046] ? create_object.isra.0+0x3a/0xa30 [ 2240.908623] should_failslab+0x5/0x20 [ 2240.909104] kmem_cache_alloc+0x5b/0x310 [ 2240.909613] ? mark_held_locks+0x9e/0xe0 [ 2240.910126] create_object.isra.0+0x3a/0xa30 [ 2240.910677] kmemleak_alloc_percpu+0xa0/0x100 [ 2240.911241] pcpu_alloc+0x4e2/0x1240 [ 2240.911714] __percpu_init_rwsem+0x22/0x150 [ 2240.912262] alloc_super+0x232/0xa90 [ 2240.912729] sget_fc+0x110/0x860 [ 2240.913151] ? set_anon_super+0xc0/0xc0 [ 2240.913648] ? pseudo_fs_get_tree+0x20/0x20 [ 2240.914181] get_tree_nodev+0x24/0x1d0 [ 2240.914666] vfs_get_tree+0x8e/0x300 [ 2240.915135] path_mount+0x14ab/0x2200 [ 2240.915606] ? strncpy_from_user+0x9e/0x470 [ 2240.916148] ? finish_automount+0xa90/0xa90 [ 2240.916688] ? getname_flags.part.0+0x1dd/0x4f0 [ 2240.917274] __x64_sys_mount+0x282/0x300 [ 2240.917777] ? copy_mnt_ns+0xa00/0xa00 [ 2240.918264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2240.918915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2240.919561] do_syscall_64+0x33/0x40 [ 2240.920022] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2240.920702] RIP: 0033:0x7f575796fb19 [ 2240.921164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2240.923454] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2240.924408] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2240.925295] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2240.926180] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2240.927067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2240.927944] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:49:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0xf000000) 15:49:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x24}}, 0x14}}, 0x0) 15:49:03 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:49:03 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:03 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 2) [ 2241.067154] FAULT_INJECTION: forcing a failure. [ 2241.067154] name failslab, interval 1, probability 0, space 0, times 0 [ 2241.069742] CPU: 0 PID: 18870 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2241.071257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2241.073086] Call Trace: [ 2241.073667] dump_stack+0x107/0x167 [ 2241.074473] should_fail.cold+0x5/0xa [ 2241.075311] ? jbd2__journal_start+0x190/0x7e0 [ 2241.076320] should_failslab+0x5/0x20 [ 2241.077155] kmem_cache_alloc+0x5b/0x310 [ 2241.078054] jbd2__journal_start+0x190/0x7e0 [ 2241.079020] __ext4_journal_start_sb+0x214/0x390 [ 2241.080069] ext4_dirty_inode+0xbc/0x130 [ 2241.080961] ? ext4_setattr+0x21b0/0x21b0 [ 2241.081869] __mark_inode_dirty+0x492/0xd30 [ 2241.082812] ? current_time+0xac/0x120 [ 2241.083674] generic_update_time+0x21c/0x370 [ 2241.084634] ? igrab+0xc0/0xc0 [ 2241.085343] file_update_time+0x43a/0x520 [ 2241.086256] ? evict_inodes+0x470/0x470 [ 2241.087132] ? down_write_killable+0x180/0x180 [ 2241.088150] file_modified+0x7d/0xa0 [ 2241.088971] ext4_fallocate+0x3c6/0x3850 [ 2241.089871] ? ioctl_preallocate+0x192/0x210 [ 2241.090847] ? lock_release+0x680/0x680 [ 2241.091727] ? ext4_ext_truncate+0x250/0x250 [ 2241.092709] ? selinux_file_permission+0x92/0x520 [ 2241.093778] ? ext4_ext_truncate+0x250/0x250 [ 2241.094745] vfs_fallocate+0x48f/0xda0 [ 2241.095610] ioctl_preallocate+0x192/0x210 [ 2241.096548] ? fiemap_prep+0x220/0x220 [ 2241.097403] ? find_held_lock+0x2c/0x110 [ 2241.098321] do_vfs_ioctl+0xe59/0x10d0 [ 2241.099178] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2241.100335] ? generic_block_fiemap+0x60/0x60 [ 2241.101321] ? lock_downgrade+0x6d0/0x6d0 [ 2241.102230] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2241.103291] ? wait_for_completion_io+0x270/0x270 [ 2241.104372] ? selinux_file_ioctl+0xb6/0x270 [ 2241.105354] __x64_sys_ioctl+0x10c/0x210 [ 2241.106248] do_syscall_64+0x33/0x40 [ 2241.107069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2241.108210] RIP: 0033:0x7f96bed8eb19 [ 2241.109032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2241.113069] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2241.114735] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2241.116310] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2241.117867] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2241.119430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2241.120996] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:49:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 7) 15:49:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x25}}, 0x14}}, 0x0) 15:49:03 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:03 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) fallocate(r0, 0x0, 0x0, 0x0) 15:49:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0xffffff7f) [ 2241.220324] FAULT_INJECTION: forcing a failure. [ 2241.220324] name failslab, interval 1, probability 0, space 0, times 0 [ 2241.223085] CPU: 0 PID: 18878 Comm: syz-executor.3 Not tainted 5.10.248 #1 15:49:03 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 19) fallocate(r0, 0x0, 0x0, 0x8000) [ 2241.224564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2241.226427] Call Trace: [ 2241.226987] dump_stack+0x107/0x167 [ 2241.227768] should_fail.cold+0x5/0xa [ 2241.228599] ? create_object.isra.0+0x3a/0xa30 [ 2241.229558] should_failslab+0x5/0x20 [ 2241.230349] kmem_cache_alloc+0x5b/0x310 [ 2241.231212] create_object.isra.0+0x3a/0xa30 [ 2241.232140] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2241.233227] __kmalloc+0x16e/0x390 [ 2241.233988] ext4_find_extent+0xa77/0xd70 [ 2241.234872] ? __lock_acquire+0x1657/0x5b00 [ 2241.235786] ext4_ext_map_blocks+0x1c8/0x5880 [ 2241.236767] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2241.237879] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2241.238979] ? ext4_ext_release+0x10/0x10 [ 2241.239867] ? lock_release+0x680/0x680 [ 2241.240722] ? ext4_es_lookup_extent+0x485/0xa80 [ 2241.241717] ? lock_downgrade+0x6d0/0x6d0 [ 2241.242613] ? down_read+0x10f/0x430 [ 2241.243394] ? down_write+0x160/0x160 [ 2241.244205] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2241.245206] ext4_map_blocks+0x8e1/0x1910 [ 2241.246089] ? kmem_cache_alloc+0x2a6/0x310 [ 2241.247006] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2241.247958] ? jbd2__journal_start+0xf3/0x7e0 [ 2241.248917] ? __ext4_journal_start_sb+0x214/0x390 [ 2241.249948] ? __ext4_journal_start_sb+0x1db/0x390 [ 2241.251005] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2241.252121] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2241.253152] ? down_write_killable+0x180/0x180 [ 2241.254132] ext4_fallocate+0x415/0x3850 [ 2241.254993] ? ioctl_preallocate+0x192/0x210 [ 2241.255926] ? lock_release+0x680/0x680 [ 2241.256780] ? ext4_ext_truncate+0x250/0x250 [ 2241.257709] ? selinux_file_permission+0x92/0x520 [ 2241.258709] ? ext4_ext_truncate+0x250/0x250 [ 2241.259641] vfs_fallocate+0x48f/0xda0 [ 2241.260486] ioctl_preallocate+0x192/0x210 [ 2241.261383] ? fiemap_prep+0x220/0x220 [ 2241.262188] ? find_held_lock+0x2c/0x110 [ 2241.263038] do_vfs_ioctl+0xe59/0x10d0 [ 2241.263845] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2241.264953] ? generic_block_fiemap+0x60/0x60 [ 2241.265898] ? lock_downgrade+0x6d0/0x6d0 [ 2241.266773] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2241.267787] ? wait_for_completion_io+0x270/0x270 [ 2241.268805] ? selinux_file_ioctl+0xb6/0x270 [ 2241.269745] __x64_sys_ioctl+0x10c/0x210 [ 2241.270610] do_syscall_64+0x33/0x40 [ 2241.271397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2241.272487] RIP: 0033:0x7f1c84620b19 [ 2241.273275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2241.277171] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2241.278789] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2241.280309] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2241.281817] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2241.283321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2241.284844] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2241.374440] FAULT_INJECTION: forcing a failure. [ 2241.374440] name failslab, interval 1, probability 0, space 0, times 0 [ 2241.376996] CPU: 1 PID: 18892 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2241.378465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2241.380447] Call Trace: [ 2241.381015] dump_stack+0x107/0x167 [ 2241.381900] should_fail.cold+0x5/0xa [ 2241.382948] ? create_object.isra.0+0x3a/0xa30 [ 2241.383912] should_failslab+0x5/0x20 [ 2241.384727] kmem_cache_alloc+0x5b/0x310 [ 2241.385586] create_object.isra.0+0x3a/0xa30 [ 2241.386522] kmemleak_alloc_percpu+0xa0/0x100 [ 2241.387477] pcpu_alloc+0x4e2/0x1240 [ 2241.388288] __percpu_init_rwsem+0x22/0x150 [ 2241.389202] alloc_super+0x232/0xa90 [ 2241.389997] sget_fc+0x110/0x860 [ 2241.390716] ? set_anon_super+0xc0/0xc0 [ 2241.391561] ? pseudo_fs_get_tree+0x20/0x20 [ 2241.392477] get_tree_nodev+0x24/0x1d0 [ 2241.393265] vfs_get_tree+0x8e/0x300 [ 2241.394047] path_mount+0x14ab/0x2200 [ 2241.394849] ? strncpy_from_user+0x9e/0x470 [ 2241.395755] ? finish_automount+0xa90/0xa90 [ 2241.396676] ? getname_flags.part.0+0x1dd/0x4f0 [ 2241.397668] __x64_sys_mount+0x282/0x300 [ 2241.398526] ? copy_mnt_ns+0xa00/0xa00 [ 2241.399354] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2241.400476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2241.401570] do_syscall_64+0x33/0x40 [ 2241.402355] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2241.403433] RIP: 0033:0x7f575796fb19 [ 2241.404220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2241.408098] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2241.409708] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2241.411215] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2241.412730] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2241.414232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2241.415738] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:49:16 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 8) 15:49:16 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 20) fallocate(r0, 0x0, 0x0, 0x8000) [ 2253.677364] FAULT_INJECTION: forcing a failure. 15:49:16 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x5, 0x1, 0x8, 0xfa, 0x0, 0x9, 0x80000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x4, 0x4, 0x7fffffff, 0x4, 0x7fff, 0x20, 0x8000, 0x0, 0x97, 0x0, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0xa) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 2253.677364] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.680488] CPU: 0 PID: 18897 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2253.682194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.684322] Call Trace: [ 2253.684990] dump_stack+0x107/0x167 [ 2253.685910] should_fail.cold+0x5/0xa [ 2253.686870] ? __es_insert_extent+0xed1/0x1370 [ 2253.688014] should_failslab+0x5/0x20 [ 2253.688979] kmem_cache_alloc+0x5b/0x310 [ 2253.690007] __es_insert_extent+0xed1/0x1370 [ 2253.691115] ? do_raw_read_unlock+0x70/0x70 [ 2253.692209] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2253.693551] ext4_es_insert_extent+0x45d/0xf10 [ 2253.694723] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2253.695824] ? ext4_es_find_extent_range+0x1cb/0x460 [ 2253.697114] ? lock_downgrade+0x6d0/0x6d0 [ 2253.698172] ? __ext4_handle_dirty_super+0x100/0x100 [ 2253.699444] ? __es_find_extent_range+0x1d3/0x490 [ 2253.700674] ? do_raw_read_unlock+0x3b/0x70 [ 2253.701768] ext4_ext_map_blocks+0x1567/0x5880 [ 2253.702928] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2253.704251] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2253.705592] ? ext4_ext_release+0x10/0x10 [ 2253.706648] ? lock_release+0x680/0x680 [ 2253.707649] ? ext4_es_lookup_extent+0x485/0xa80 [ 2253.708847] ? lock_downgrade+0x6d0/0x6d0 [ 2253.709908] ? down_read+0x10f/0x430 [ 2253.710844] ? down_write+0x160/0x160 [ 2253.711805] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2253.712995] ext4_map_blocks+0x8e1/0x1910 [ 2253.714046] ? kmem_cache_alloc+0x2a6/0x310 [ 2253.715133] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2253.716258] ? jbd2__journal_start+0xf3/0x7e0 [ 2253.717403] ? __ext4_journal_start_sb+0x214/0x390 [ 2253.718635] ? __ext4_journal_start_sb+0x1db/0x390 [ 2253.719872] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2253.721213] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2253.722431] ? down_write_killable+0x180/0x180 [ 2253.723598] ext4_fallocate+0x415/0x3850 [ 2253.724634] ? ioctl_preallocate+0x192/0x210 [ 2253.725749] ? lock_release+0x680/0x680 [ 2253.726755] ? ext4_ext_truncate+0x250/0x250 [ 2253.727860] ? selinux_file_permission+0x92/0x520 [ 2253.729082] ? ext4_ext_truncate+0x250/0x250 [ 2253.730200] vfs_fallocate+0x48f/0xda0 [ 2253.731189] ioctl_preallocate+0x192/0x210 [ 2253.732255] ? fiemap_prep+0x220/0x220 [ 2253.733236] ? find_held_lock+0x2c/0x110 [ 2253.734282] do_vfs_ioctl+0xe59/0x10d0 [ 2253.735258] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2253.736584] ? generic_block_fiemap+0x60/0x60 [ 2253.737567] ? lock_downgrade+0x6d0/0x6d0 [ 2253.738432] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2253.739455] ? wait_for_completion_io+0x270/0x270 [ 2253.740476] ? selinux_file_ioctl+0xb6/0x270 [ 2253.741405] __x64_sys_ioctl+0x10c/0x210 [ 2253.742267] do_syscall_64+0x33/0x40 [ 2253.743045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.744106] RIP: 0033:0x7f1c84620b19 [ 2253.744891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2253.748753] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2253.750348] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2253.751838] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2253.753336] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2253.754826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2253.756327] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 15:49:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x3000000000000) 15:49:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 15:49:16 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:16 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:49:16 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 3) [ 2253.781269] FAULT_INJECTION: forcing a failure. [ 2253.781269] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.784268] CPU: 1 PID: 18911 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2253.785845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.787947] Call Trace: [ 2253.788572] dump_stack+0x107/0x167 [ 2253.789379] should_fail.cold+0x5/0xa [ 2253.790223] ? create_object.isra.0+0x3a/0xa30 [ 2253.791228] should_failslab+0x5/0x20 [ 2253.792067] kmem_cache_alloc+0x5b/0x310 [ 2253.792970] ? __schedule+0x82c/0x1ea0 [ 2253.793834] create_object.isra.0+0x3a/0xa30 [ 2253.794795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2253.795916] kmem_cache_alloc+0x159/0x310 [ 2253.796852] jbd2__journal_start+0x190/0x7e0 [ 2253.797830] __ext4_journal_start_sb+0x214/0x390 [ 2253.798879] ext4_dirty_inode+0xbc/0x130 [ 2253.799779] ? ext4_setattr+0x21b0/0x21b0 [ 2253.800699] __mark_inode_dirty+0x492/0xd30 [ 2253.801643] ? current_time+0xac/0x120 [ 2253.802506] generic_update_time+0x21c/0x370 [ 2253.803463] ? igrab+0xc0/0xc0 [ 2253.804178] file_update_time+0x43a/0x520 [ 2253.805103] ? evict_inodes+0x470/0x470 [ 2253.805977] ? down_write_killable+0x180/0x180 [ 2253.806989] file_modified+0x7d/0xa0 [ 2253.807811] ext4_fallocate+0x3c6/0x3850 [ 2253.808713] ? ioctl_preallocate+0x192/0x210 [ 2253.809686] ? lock_release+0x680/0x680 [ 2253.810567] ? ext4_ext_truncate+0x250/0x250 [ 2253.811536] ? selinux_file_permission+0x92/0x520 [ 2253.812626] ? ext4_ext_truncate+0x250/0x250 [ 2253.813591] vfs_fallocate+0x48f/0xda0 [ 2253.814455] ioctl_preallocate+0x192/0x210 [ 2253.815386] ? fiemap_prep+0x220/0x220 [ 2253.816237] ? find_held_lock+0x2c/0x110 [ 2253.817159] do_vfs_ioctl+0xe59/0x10d0 [ 2253.818019] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2253.819173] ? generic_block_fiemap+0x60/0x60 [ 2253.820150] ? lock_downgrade+0x6d0/0x6d0 [ 2253.821064] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2253.822119] ? wait_for_completion_io+0x270/0x270 [ 2253.823184] ? selinux_file_ioctl+0xb6/0x270 [ 2253.824168] __x64_sys_ioctl+0x10c/0x210 [ 2253.825077] do_syscall_64+0x33/0x40 [ 2253.825896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.827013] RIP: 0033:0x7f96bed8eb19 [ 2253.827828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2253.831839] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2253.833511] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2253.835071] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2253.836637] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2253.838196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2253.839753] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:49:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x0) 15:49:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x6000000000000) 15:49:16 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2253.846970] FAULT_INJECTION: forcing a failure. [ 2253.846970] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.849499] CPU: 0 PID: 18915 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2253.851006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.852823] Call Trace: [ 2253.853395] dump_stack+0x107/0x167 [ 2253.854186] should_fail.cold+0x5/0xa [ 2253.855012] ? create_object.isra.0+0x3a/0xa30 [ 2253.855999] should_failslab+0x5/0x20 [ 2253.856834] kmem_cache_alloc+0x5b/0x310 [ 2253.857720] ? mark_held_locks+0x9e/0xe0 [ 2253.858608] create_object.isra.0+0x3a/0xa30 [ 2253.859567] kmemleak_alloc_percpu+0xa0/0x100 [ 2253.860554] pcpu_alloc+0x4e2/0x1240 [ 2253.861379] __percpu_init_rwsem+0x22/0x150 [ 2253.862322] alloc_super+0x232/0xa90 [ 2253.863137] sget_fc+0x110/0x860 [ 2253.863869] ? set_anon_super+0xc0/0xc0 [ 2253.864745] ? pseudo_fs_get_tree+0x20/0x20 [ 2253.865683] get_tree_nodev+0x24/0x1d0 [ 2253.866530] vfs_get_tree+0x8e/0x300 [ 2253.867337] path_mount+0x14ab/0x2200 [ 2253.868164] ? strncpy_from_user+0x9e/0x470 [ 2253.869107] ? finish_automount+0xa90/0xa90 [ 2253.870044] ? getname_flags.part.0+0x1dd/0x4f0 [ 2253.871063] __x64_sys_mount+0x282/0x300 [ 2253.871942] ? copy_mnt_ns+0xa00/0xa00 [ 2253.872801] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2253.873937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2253.875064] do_syscall_64+0x33/0x40 [ 2253.875875] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2253.876997] RIP: 0033:0x7f575796fb19 [ 2253.877808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2253.881823] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2253.883472] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2253.885032] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2253.886577] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2253.888125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2253.889680] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:49:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x8000000000000) 15:49:16 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:16 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:49:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0) 15:49:16 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x7, 0x62, 0x81, 0x0, 0x96, 0x22014, 0x93ef68e6cae1ef02, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x700000, 0x1, @perf_bp={&(0x7f00000000c0), 0xb}, 0x8328, 0x40, 0x8000, 0x9, 0x4, 0x7ffc, 0x4, 0x0, 0xa, 0x0, 0x3fb}, r1, 0x1, r0, 0x3) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x214400, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000010000e56a1c0c00", @ANYRES32=r4, @ANYBLOB="00000000000000002e021bace6dc196b28526bd2b57ab9d890257ddc912e7b3ce2bdb8260d36034e5decb68c64a9fa6e2b3c3017f4e4"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r5, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r6 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x1000, 0x540000a0, &(0x7f0000ffd000/0x1000)=nil) shmat(r6, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r6, 0xb) 15:49:28 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 4) [ 2265.819372] FAULT_INJECTION: forcing a failure. [ 2265.819372] name failslab, interval 1, probability 0, space 0, times 0 15:49:28 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000186655017fccaa2bf77222000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:49:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x29}}, 0x14}}, 0x0) 15:49:28 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 9) 15:49:28 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 21) fallocate(r0, 0x0, 0x0, 0x8000) 15:49:28 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:49:28 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x100000000000000) [ 2265.821830] CPU: 1 PID: 18948 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2265.823626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.825388] Call Trace: [ 2265.825953] dump_stack+0x107/0x167 [ 2265.826726] should_fail.cold+0x5/0xa [ 2265.827534] ? jbd2__journal_start+0x190/0x7e0 [ 2265.827678] FAULT_INJECTION: forcing a failure. [ 2265.827678] name failslab, interval 1, probability 0, space 0, times 0 [ 2265.828505] should_failslab+0x5/0x20 [ 2265.828525] kmem_cache_alloc+0x5b/0x310 [ 2265.828550] jbd2__journal_start+0x190/0x7e0 [ 2265.828575] __ext4_journal_start_sb+0x214/0x390 [ 2265.828601] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2265.835655] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2265.836686] ? down_write_killable+0x180/0x180 [ 2265.837657] ext4_fallocate+0x415/0x3850 [ 2265.838513] ? ioctl_preallocate+0x192/0x210 [ 2265.839451] ? lock_release+0x680/0x680 [ 2265.840298] ? ext4_ext_truncate+0x250/0x250 [ 2265.841237] ? selinux_file_permission+0x92/0x520 [ 2265.842259] ? ext4_ext_truncate+0x250/0x250 [ 2265.843185] vfs_fallocate+0x48f/0xda0 [ 2265.844016] ioctl_preallocate+0x192/0x210 [ 2265.844921] ? fiemap_prep+0x220/0x220 [ 2265.845752] ? find_held_lock+0x2c/0x110 [ 2265.846626] do_vfs_ioctl+0xe59/0x10d0 [ 2265.847460] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2265.848581] ? generic_block_fiemap+0x60/0x60 [ 2265.849535] ? lock_downgrade+0x6d0/0x6d0 [ 2265.850410] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2265.851436] ? wait_for_completion_io+0x270/0x270 [ 2265.852465] ? selinux_file_ioctl+0xb6/0x270 [ 2265.853406] __x64_sys_ioctl+0x10c/0x210 [ 2265.854262] do_syscall_64+0x33/0x40 [ 2265.855049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.856130] RIP: 0033:0x7f96bed8eb19 [ 2265.856924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.860795] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2265.862402] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2265.863907] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2265.865421] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.866934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.868452] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 [ 2265.869989] CPU: 0 PID: 18954 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2265.871462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.873226] Call Trace: [ 2265.873788] dump_stack+0x107/0x167 [ 2265.874563] should_fail.cold+0x5/0xa [ 2265.875370] ? create_object.isra.0+0x3a/0xa30 [ 2265.876333] should_failslab+0x5/0x20 [ 2265.877144] kmem_cache_alloc+0x5b/0x310 [ 2265.878002] ? lock_chain_count+0x20/0x20 [ 2265.878885] create_object.isra.0+0x3a/0xa30 [ 2265.879819] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2265.880903] __kmalloc+0x16e/0x390 [ 2265.881657] ext4_find_extent+0xa77/0xd70 [ 2265.882540] ext4_ext_map_blocks+0x1c8/0x5880 [ 2265.883491] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2265.884602] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2265.885707] ? ext4_ext_release+0x10/0x10 [ 2265.886581] ? ext4_map_blocks+0x5cd/0x1910 [ 2265.887489] ? lock_release+0x680/0x680 [ 2265.888325] ? ext4_es_lookup_extent+0x485/0xa80 [ 2265.889323] ? find_held_lock+0x2c/0x110 [ 2265.890189] ? down_write+0xe0/0x160 [ 2265.890970] ? down_write_killable+0x180/0x180 [ 2265.891942] ext4_map_blocks+0x63f/0x1910 [ 2265.892827] ? kmem_cache_alloc+0x2a6/0x310 [ 2265.893737] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2265.894684] ? jbd2__journal_start+0xf3/0x7e0 [ 2265.895628] ? __ext4_journal_start_sb+0x214/0x390 [ 2265.896658] ? __ext4_journal_start_sb+0x1db/0x390 [ 2265.897693] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2265.898798] ? file_remove_privs+0x182/0x520 [ 2265.899728] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2265.900746] ? down_write_killable+0x180/0x180 [ 2265.901716] ext4_fallocate+0x415/0x3850 [ 2265.902567] ? ioctl_preallocate+0x192/0x210 [ 2265.903496] ? lock_release+0x680/0x680 [ 2265.904335] ? ext4_ext_truncate+0x250/0x250 [ 2265.905265] ? selinux_file_permission+0x92/0x520 [ 2265.906282] ? ext4_ext_truncate+0x250/0x250 [ 2265.907207] vfs_fallocate+0x48f/0xda0 [ 2265.908032] ioctl_preallocate+0x192/0x210 [ 2265.908927] ? fiemap_prep+0x220/0x220 [ 2265.909743] ? find_held_lock+0x2c/0x110 [ 2265.910617] do_vfs_ioctl+0xe59/0x10d0 [ 2265.911433] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2265.912541] ? generic_block_fiemap+0x60/0x60 [ 2265.913485] ? lock_downgrade+0x6d0/0x6d0 [ 2265.914354] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2265.915369] ? wait_for_completion_io+0x270/0x270 [ 2265.916394] ? selinux_file_ioctl+0xb6/0x270 [ 2265.917338] __x64_sys_ioctl+0x10c/0x210 [ 2265.918196] do_syscall_64+0x33/0x40 [ 2265.918986] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.920062] RIP: 0033:0x7f1c84620b19 [ 2265.920851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.924725] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2265.926329] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2265.927836] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2265.929348] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.930844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.932349] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2265.949192] FAULT_INJECTION: forcing a failure. [ 2265.949192] name failslab, interval 1, probability 0, space 0, times 0 [ 2265.951590] CPU: 1 PID: 18964 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2265.953055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2265.954805] Call Trace: [ 2265.955363] dump_stack+0x107/0x167 [ 2265.956134] should_fail.cold+0x5/0xa [ 2265.956948] ? prealloc_shrinker+0xb0/0x2f0 [ 2265.957860] should_failslab+0x5/0x20 [ 2265.958661] __kmalloc+0x72/0x390 [ 2265.959404] prealloc_shrinker+0xb0/0x2f0 [ 2265.960276] ? __init_rwsem+0x129/0x1b0 [ 2265.961131] alloc_super+0x863/0xa90 [ 2265.961924] sget_fc+0x110/0x860 [ 2265.962637] ? set_anon_super+0xc0/0xc0 [ 2265.963481] ? pseudo_fs_get_tree+0x20/0x20 [ 2265.964399] get_tree_nodev+0x24/0x1d0 [ 2265.965228] vfs_get_tree+0x8e/0x300 [ 2265.966013] path_mount+0x14ab/0x2200 [ 2265.966818] ? strncpy_from_user+0x9e/0x470 [ 2265.967726] ? finish_automount+0xa90/0xa90 [ 2265.968650] ? getname_flags.part.0+0x1dd/0x4f0 [ 2265.969642] __x64_sys_mount+0x282/0x300 [ 2265.970501] ? copy_mnt_ns+0xa00/0xa00 [ 2265.971327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2265.972440] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2265.973540] do_syscall_64+0x33/0x40 [ 2265.974328] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2265.975410] RIP: 0033:0x7f575796fb19 [ 2265.976194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2265.980081] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2265.981671] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2265.983181] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2265.984693] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.986190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2265.987683] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:49:28 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:49:28 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x200000000000000) 15:49:40 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 10) [ 2277.945348] FAULT_INJECTION: forcing a failure. [ 2277.945348] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.946846] CPU: 0 PID: 18976 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2277.947702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2277.948685] Call Trace: [ 2277.949019] dump_stack+0x107/0x167 [ 2277.949473] should_fail.cold+0x5/0xa [ 2277.949968] ? create_object.isra.0+0x3a/0xa30 [ 2277.950533] should_failslab+0x5/0x20 [ 2277.951008] kmem_cache_alloc+0x5b/0x310 [ 2277.951514] create_object.isra.0+0x3a/0xa30 [ 2277.952069] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2277.952683] kmem_cache_alloc+0x159/0x310 [ 2277.953202] jbd2__journal_start+0x190/0x7e0 [ 2277.953753] __ext4_journal_start_sb+0x214/0x390 [ 2277.954348] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2277.955001] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2277.955613] ? down_write_killable+0x180/0x180 [ 2277.956188] ext4_fallocate+0x415/0x3850 [ 2277.956705] ? ioctl_preallocate+0x192/0x210 [ 2277.957255] ? lock_release+0x680/0x680 [ 2277.957752] ? ext4_ext_truncate+0x250/0x250 [ 2277.958302] ? selinux_file_permission+0x92/0x520 [ 2277.958881] ? ext4_ext_truncate+0x250/0x250 [ 2277.959425] vfs_fallocate+0x48f/0xda0 [ 2277.959912] ioctl_preallocate+0x192/0x210 [ 2277.960435] ? fiemap_prep+0x220/0x220 [ 2277.960926] ? find_held_lock+0x2c/0x110 [ 2277.961418] do_vfs_ioctl+0xe59/0x10d0 [ 2277.961907] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2277.962561] ? generic_block_fiemap+0x60/0x60 [ 2277.963113] ? lock_downgrade+0x6d0/0x6d0 15:49:40 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 22) fallocate(r0, 0x0, 0x0, 0x8000) 15:49:40 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) r2 = dup(r1) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x9a, 0xfd, 0x3, 0x2, 0x0, 0x7, 0x1010, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9b7a, 0x0, @perf_config_ext={0x6, 0x7}, 0x40c10, 0x6, 0x10000, 0x0, 0x3ff, 0x8, 0xff5d, 0x0, 0x3, 0x0, 0x6}, 0x0, 0x0, r2, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:49:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:49:40 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 5) 15:49:40 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:40 executing program 6: r0 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2277.963643] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2277.964416] ? wait_for_completion_io+0x270/0x270 [ 2277.965027] ? selinux_file_ioctl+0xb6/0x270 [ 2277.965576] __x64_sys_ioctl+0x10c/0x210 [ 2277.966080] do_syscall_64+0x33/0x40 [ 2277.966539] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2277.967168] RIP: 0033:0x7f96bed8eb19 [ 2277.967624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2277.969851] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2277.970768] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2277.971627] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2277.972488] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2277.973357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2277.974214] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 [ 2277.989216] FAULT_INJECTION: forcing a failure. [ 2277.989216] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.990619] CPU: 0 PID: 18978 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2277.991433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2277.992425] Call Trace: [ 2277.992754] dump_stack+0x107/0x167 [ 2277.993180] should_fail.cold+0x5/0xa [ 2277.993623] ? ext4_find_extent+0xa77/0xd70 [ 2277.994122] should_failslab+0x5/0x20 [ 2277.994563] __kmalloc+0x72/0x390 [ 2277.994971] ext4_find_extent+0xa77/0xd70 [ 2277.995458] ext4_ext_map_blocks+0x1c8/0x5880 [ 2277.995986] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2277.996629] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2277.997244] ? ext4_ext_release+0x10/0x10 [ 2277.997728] ? ext4_map_blocks+0x5cd/0x1910 [ 2277.998232] ? lock_release+0x680/0x680 [ 2277.998696] ? ext4_es_lookup_extent+0x485/0xa80 [ 2277.999244] ? find_held_lock+0x2c/0x110 [ 2277.999723] ? down_write+0xe0/0x160 [ 2278.000154] ? down_write_killable+0x180/0x180 [ 2278.000704] ext4_map_blocks+0x63f/0x1910 [ 2278.001207] ? kmem_cache_alloc+0x2a6/0x310 [ 2278.001713] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2278.002233] ? jbd2__journal_start+0xf3/0x7e0 [ 2278.002759] ? __ext4_journal_start_sb+0x214/0x390 [ 2278.003326] ? __ext4_journal_start_sb+0x1db/0x390 [ 2278.003924] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2278.004540] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2278.005133] ? down_write_killable+0x180/0x180 [ 2278.005684] ext4_fallocate+0x415/0x3850 [ 2278.006172] ? ioctl_preallocate+0x192/0x210 [ 2278.006699] ? lock_release+0x680/0x680 [ 2278.007179] ? ext4_ext_truncate+0x250/0x250 [ 2278.007704] ? selinux_file_permission+0x92/0x520 [ 2278.008284] ? ext4_ext_truncate+0x250/0x250 [ 2278.008821] vfs_fallocate+0x48f/0xda0 [ 2278.009277] ioctl_preallocate+0x192/0x210 [ 2278.009785] ? fiemap_prep+0x220/0x220 [ 2278.010231] ? find_held_lock+0x2c/0x110 [ 2278.010727] do_vfs_ioctl+0xe59/0x10d0 [ 2278.011195] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2278.011821] ? generic_block_fiemap+0x60/0x60 [ 2278.012356] ? lock_downgrade+0x6d0/0x6d0 [ 2278.012844] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2278.013425] ? wait_for_completion_io+0x270/0x270 [ 2278.013991] ? selinux_file_ioctl+0xb6/0x270 [ 2278.014524] __x64_sys_ioctl+0x10c/0x210 [ 2278.015012] do_syscall_64+0x33/0x40 [ 2278.015445] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2278.016059] RIP: 0033:0x7f1c84620b19 [ 2278.016489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.018690] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2278.019596] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2278.020445] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2278.021304] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.022154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2278.022866] FAULT_INJECTION: forcing a failure. [ 2278.022866] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.023000] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2278.026902] CPU: 1 PID: 18991 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2278.028351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.030093] Call Trace: [ 2278.030652] dump_stack+0x107/0x167 [ 2278.031412] should_fail.cold+0x5/0xa [ 2278.032216] ? prealloc_shrinker+0xb0/0x2f0 [ 2278.033121] should_failslab+0x5/0x20 [ 2278.033913] __kmalloc+0x72/0x390 [ 2278.034642] prealloc_shrinker+0xb0/0x2f0 [ 2278.035504] ? __init_rwsem+0x129/0x1b0 [ 2278.036332] alloc_super+0x863/0xa90 [ 2278.037120] sget_fc+0x110/0x860 [ 2278.037836] ? set_anon_super+0xc0/0xc0 [ 2278.038677] ? pseudo_fs_get_tree+0x20/0x20 [ 2278.039578] get_tree_nodev+0x24/0x1d0 [ 2278.040387] vfs_get_tree+0x8e/0x300 [ 2278.041179] path_mount+0x14ab/0x2200 [ 2278.041973] ? strncpy_from_user+0x9e/0x470 [ 2278.042868] ? finish_automount+0xa90/0xa90 [ 2278.043776] ? getname_flags.part.0+0x1dd/0x4f0 [ 2278.044906] __x64_sys_mount+0x282/0x300 [ 2278.045864] ? copy_mnt_ns+0xa00/0xa00 [ 2278.046802] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.048045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2278.049285] do_syscall_64+0x33/0x40 [ 2278.050167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2278.051392] RIP: 0033:0x7f575796fb19 [ 2278.052268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.056666] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2278.058462] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2278.060152] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2278.061846] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.063536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2278.065240] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:49:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x2}}, 0x14}}, 0x0) 15:49:40 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 6) 15:49:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x300000000000000) 15:49:40 executing program 6: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:49:40 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 11) 15:49:40 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 23) fallocate(r0, 0x0, 0x0, 0x8000) 15:49:40 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x1000, 0x540000a6, &(0x7f0000ffc000/0x1000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 2278.158242] FAULT_INJECTION: forcing a failure. [ 2278.158242] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.159552] CPU: 0 PID: 18999 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2278.160331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.161274] Call Trace: [ 2278.161578] dump_stack+0x107/0x167 [ 2278.161989] should_fail.cold+0x5/0xa [ 2278.162421] ? ext4_find_extent+0xa77/0xd70 [ 2278.162911] should_failslab+0x5/0x20 [ 2278.163346] __kmalloc+0x72/0x390 [ 2278.163741] ? is_dynamic_key+0x1e0/0x1e0 [ 2278.164214] ext4_find_extent+0xa77/0xd70 [ 2278.164692] ? __lock_acquire+0x1657/0x5b00 [ 2278.165180] ext4_ext_map_blocks+0x1c8/0x5880 [ 2278.165689] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2278.166278] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2278.166872] ? ext4_ext_release+0x10/0x10 [ 2278.167343] ? lock_release+0x680/0x680 [ 2278.167795] ? ext4_es_lookup_extent+0x485/0xa80 [ 2278.168327] ? lock_downgrade+0x6d0/0x6d0 [ 2278.168813] ? down_read+0x10f/0x430 [ 2278.169230] ? down_write+0x160/0x160 [ 2278.169656] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2278.170187] ext4_map_blocks+0x8e1/0x1910 [ 2278.170664] ? kmem_cache_alloc+0x2a6/0x310 [ 2278.171151] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2278.171658] ? jbd2__journal_start+0xf3/0x7e0 [ 2278.172164] ? __ext4_journal_start_sb+0x214/0x390 [ 2278.172725] ? __ext4_journal_start_sb+0x1db/0x390 [ 2278.173275] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2278.173871] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2278.174421] ? down_write_killable+0x180/0x180 [ 2278.174942] ext4_fallocate+0x415/0x3850 [ 2278.175403] ? ioctl_preallocate+0x192/0x210 [ 2278.175900] ? lock_release+0x680/0x680 [ 2278.176355] ? ext4_ext_truncate+0x250/0x250 [ 2278.176866] ? selinux_file_permission+0x92/0x520 [ 2278.177417] ? ext4_ext_truncate+0x250/0x250 [ 2278.177916] vfs_fallocate+0x48f/0xda0 [ 2278.178357] ioctl_preallocate+0x192/0x210 [ 2278.178834] ? fiemap_prep+0x220/0x220 [ 2278.179268] ? find_held_lock+0x2c/0x110 [ 2278.179735] do_vfs_ioctl+0xe59/0x10d0 [ 2278.180176] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2278.180772] ? generic_block_fiemap+0x60/0x60 [ 2278.181277] ? lock_downgrade+0x6d0/0x6d0 [ 2278.181742] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2278.182287] ? wait_for_completion_io+0x270/0x270 [ 2278.182835] ? selinux_file_ioctl+0xb6/0x270 [ 2278.183334] __x64_sys_ioctl+0x10c/0x210 [ 2278.183793] do_syscall_64+0x33/0x40 [ 2278.184215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2278.184797] RIP: 0033:0x7f96bed8eb19 [ 2278.185216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.187273] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2278.188125] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2278.188933] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2278.189731] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.190528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.191326] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:49:40 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:40 executing program 6: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2278.206858] FAULT_INJECTION: forcing a failure. [ 2278.206858] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.208186] CPU: 0 PID: 19006 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2278.208980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.209907] Call Trace: [ 2278.210213] dump_stack+0x107/0x167 [ 2278.210623] should_fail.cold+0x5/0xa [ 2278.211056] ? create_object.isra.0+0x3a/0xa30 [ 2278.211569] should_failslab+0x5/0x20 [ 2278.211986] kmem_cache_alloc+0x5b/0x310 [ 2278.212440] ? lock_chain_count+0x20/0x20 [ 2278.212914] create_object.isra.0+0x3a/0xa30 [ 2278.213407] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2278.213977] __kmalloc+0x16e/0x390 [ 2278.214367] ext4_find_extent+0xa77/0xd70 [ 2278.214839] ext4_ext_map_blocks+0x1c8/0x5880 [ 2278.215349] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2278.215920] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2278.216511] ? ext4_ext_release+0x10/0x10 [ 2278.216988] ? ext4_map_blocks+0x5cd/0x1910 [ 2278.217475] ? lock_release+0x680/0x680 [ 2278.217923] ? ext4_es_lookup_extent+0x485/0xa80 [ 2278.218458] ? find_held_lock+0x2c/0x110 [ 2278.218907] ? down_write+0xe0/0x160 [ 2278.219325] ? down_write_killable+0x180/0x180 [ 2278.219828] ext4_map_blocks+0x63f/0x1910 [ 2278.220296] ? kmem_cache_alloc+0x2a6/0x310 [ 2278.220773] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2278.221278] ? jbd2__journal_start+0xf3/0x7e0 [ 2278.221783] ? __ext4_journal_start_sb+0x214/0x390 [ 2278.222331] ? __ext4_journal_start_sb+0x1db/0x390 [ 2278.222865] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2278.223459] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2278.224002] ? down_write_killable+0x180/0x180 [ 2278.224523] ext4_fallocate+0x415/0x3850 [ 2278.224985] ? ioctl_preallocate+0x192/0x210 [ 2278.225482] ? lock_release+0x680/0x680 [ 2278.225931] ? ext4_ext_truncate+0x250/0x250 [ 2278.226426] ? selinux_file_permission+0x92/0x520 [ 2278.226968] ? ext4_ext_truncate+0x250/0x250 [ 2278.227460] vfs_fallocate+0x48f/0xda0 [ 2278.227888] ioctl_preallocate+0x192/0x210 [ 2278.228363] ? fiemap_prep+0x220/0x220 [ 2278.228792] ? find_held_lock+0x2c/0x110 [ 2278.229259] do_vfs_ioctl+0xe59/0x10d0 [ 2278.229695] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2278.230283] ? generic_block_fiemap+0x60/0x60 [ 2278.230786] ? lock_downgrade+0x6d0/0x6d0 [ 2278.231251] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2278.231792] ? wait_for_completion_io+0x270/0x270 [ 2278.232339] ? selinux_file_ioctl+0xb6/0x270 [ 2278.232843] __x64_sys_ioctl+0x10c/0x210 [ 2278.233286] do_syscall_64+0x33/0x40 [ 2278.233705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2278.234284] RIP: 0033:0x7f1c84620b19 [ 2278.234691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.236762] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2278.237617] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2278.238386] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2278.239186] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.239960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2278.240767] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 15:49:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x3}}, 0x14}}, 0x0) 15:49:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x900000000000000) 15:49:41 executing program 6: r0 = creat(0x0, 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2278.317529] FAULT_INJECTION: forcing a failure. [ 2278.317529] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.318864] CPU: 0 PID: 19019 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2278.319640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.320566] Call Trace: [ 2278.320877] dump_stack+0x107/0x167 [ 2278.321286] should_fail.cold+0x5/0xa [ 2278.321719] ? prealloc_shrinker+0xb0/0x2f0 [ 2278.322206] should_failslab+0x5/0x20 [ 2278.322641] __kmalloc+0x72/0x390 [ 2278.323038] prealloc_shrinker+0xb0/0x2f0 [ 2278.323507] ? __init_rwsem+0x129/0x1b0 [ 2278.323952] alloc_super+0x863/0xa90 [ 2278.324357] sget_fc+0x110/0x860 [ 2278.324751] ? set_anon_super+0xc0/0xc0 [ 2278.325187] ? pseudo_fs_get_tree+0x20/0x20 [ 2278.325673] get_tree_nodev+0x24/0x1d0 [ 2278.326094] vfs_get_tree+0x8e/0x300 [ 2278.326517] path_mount+0x14ab/0x2200 [ 2278.326948] ? strncpy_from_user+0x9e/0x470 [ 2278.327432] ? finish_automount+0xa90/0xa90 [ 2278.327921] ? getname_flags.part.0+0x1dd/0x4f0 [ 2278.328455] __x64_sys_mount+0x282/0x300 [ 2278.328920] ? copy_mnt_ns+0xa00/0xa00 [ 2278.329347] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2278.329938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2278.330498] do_syscall_64+0x33/0x40 [ 2278.330919] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2278.331475] RIP: 0033:0x7f575796fb19 [ 2278.331893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.333879] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2278.334741] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2278.335510] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2278.336273] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.337043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2278.337806] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:49:41 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:49:41 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:41 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001000000180000a8fa28625f7300", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmat(r3, &(0x7f0000fed000/0x13000)=nil, 0x1000) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) shmctl$SHM_LOCK(r3, 0xb) 15:49:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0xf00000000000000) 15:49:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x9}}, 0x14}}, 0x0) 15:49:41 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 7) 15:49:41 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:49:41 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 2278.560663] FAULT_INJECTION: forcing a failure. [ 2278.560663] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.562050] CPU: 0 PID: 19045 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2278.562827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2278.563709] Call Trace: [ 2278.564004] dump_stack+0x107/0x167 [ 2278.564398] should_fail.cold+0x5/0xa [ 2278.564821] ? create_object.isra.0+0x3a/0xa30 [ 2278.565313] should_failslab+0x5/0x20 [ 2278.565724] kmem_cache_alloc+0x5b/0x310 [ 2278.566162] create_object.isra.0+0x3a/0xa30 [ 2278.566634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2278.567186] __kmalloc+0x16e/0x390 [ 2278.567591] ext4_find_extent+0xa77/0xd70 [ 2278.568044] ? __lock_acquire+0x1657/0x5b00 [ 2278.568510] ext4_ext_map_blocks+0x1c8/0x5880 [ 2278.569027] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2278.569591] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2278.570157] ? ext4_ext_release+0x10/0x10 [ 2278.570607] ? lock_release+0x680/0x680 [ 2278.571035] ? ext4_es_lookup_extent+0x485/0xa80 [ 2278.571568] ? lock_downgrade+0x6d0/0x6d0 [ 2278.572022] ? down_read+0x10f/0x430 [ 2278.572421] ? down_write+0x160/0x160 [ 2278.572857] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2278.573365] ext4_map_blocks+0x8e1/0x1910 [ 2278.573814] ? kmem_cache_alloc+0x2a6/0x310 [ 2278.574278] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2278.574790] ? jbd2__journal_start+0xf3/0x7e0 [ 2278.575278] ? __ext4_journal_start_sb+0x214/0x390 [ 2278.575802] ? __ext4_journal_start_sb+0x1db/0x390 [ 2278.576355] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2278.576929] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2278.577447] ? down_write_killable+0x180/0x180 [ 2278.577969] ext4_fallocate+0x415/0x3850 [ 2278.578409] ? ioctl_preallocate+0x192/0x210 [ 2278.578906] ? lock_release+0x680/0x680 [ 2278.579338] ? ext4_ext_truncate+0x250/0x250 [ 2278.579810] ? selinux_file_permission+0x92/0x520 [ 2278.580327] ? ext4_ext_truncate+0x250/0x250 [ 2278.580835] vfs_fallocate+0x48f/0xda0 [ 2278.581258] ioctl_preallocate+0x192/0x210 [ 2278.581711] ? fiemap_prep+0x220/0x220 [ 2278.582125] ? finish_task_switch+0x126/0x5d0 [ 2278.582613] do_vfs_ioctl+0xe59/0x10d0 [ 2278.583029] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2278.583620] ? generic_block_fiemap+0x60/0x60 [ 2278.584101] ? lock_downgrade+0x6d0/0x6d0 [ 2278.584569] ? __schedule+0x82c/0x1ea0 [ 2278.585004] ? selinux_file_ioctl+0xb6/0x270 [ 2278.585504] __x64_sys_ioctl+0x10c/0x210 [ 2278.585945] do_syscall_64+0x33/0x40 [ 2278.586342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2278.586889] RIP: 0033:0x7f96bed8eb19 [ 2278.587284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2278.589350] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2278.590167] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2278.590927] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2278.591685] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.592444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2278.593214] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:49:54 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 24) fallocate(r0, 0x0, 0x0, 0x8000) 15:49:54 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:49:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0xffffff7f00000000) 15:49:54 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 12) 15:49:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0xf}}, 0x14}}, 0x0) 15:49:54 executing program 7: perf_event_open(&(0x7f0000000440)={0x6, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x9, 0x9443, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000200), 0xd}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xdf2e}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10e, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) r3 = accept$inet6(r2, &(0x7f00000000c0), &(0x7f00000001c0)=0x1c) dup3(r3, r2, 0x80000) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:49:54 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 8) [ 2291.923728] FAULT_INJECTION: forcing a failure. [ 2291.923728] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.926199] CPU: 0 PID: 19059 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2291.927678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2291.929443] Call Trace: [ 2291.930009] dump_stack+0x107/0x167 [ 2291.930808] should_fail.cold+0x5/0xa [ 2291.931633] ? ext4_mb_new_blocks+0x698/0x45c0 [ 2291.932606] should_failslab+0x5/0x20 [ 2291.933427] kmem_cache_alloc+0x5b/0x310 [ 2291.934315] ext4_mb_new_blocks+0x698/0x45c0 [ 2291.935252] ? trace_hardirqs_on+0x5b/0x180 [ 2291.935409] FAULT_INJECTION: forcing a failure. [ 2291.935409] name failslab, interval 1, probability 0, space 0, times 0 [ 2291.936189] ? kasan_unpoison_shadow+0x33/0x50 [ 2291.936209] ? ext4_cache_extents+0x68/0x2d0 [ 2291.936238] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2291.941950] ? ext4_discard_preallocations+0xd80/0xd80 [ 2291.943059] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2291.944050] ? ext4_inode_to_goal_block+0x320/0x430 [ 2291.945112] ext4_ext_map_blocks+0x1a55/0x5880 [ 2291.946114] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2291.947246] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2291.948360] ? ext4_ext_release+0x10/0x10 [ 2291.949260] ? ext4_map_blocks+0x5cd/0x1910 [ 2291.950183] ? lock_release+0x680/0x680 [ 2291.951035] ? ext4_es_lookup_extent+0x485/0xa80 [ 2291.952044] ? find_held_lock+0x2c/0x110 [ 2291.952936] ? down_write_killable+0x180/0x180 [ 2291.953928] ext4_map_blocks+0x63f/0x1910 [ 2291.954818] ? kmem_cache_alloc+0x2a6/0x310 [ 2291.955737] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2291.956691] ? jbd2__journal_start+0xf3/0x7e0 [ 2291.957658] ? __ext4_journal_start_sb+0x214/0x390 [ 2291.958696] ? __ext4_journal_start_sb+0x1db/0x390 [ 2291.959733] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2291.960868] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2291.961907] ? down_write_killable+0x180/0x180 [ 2291.962904] ext4_fallocate+0x415/0x3850 [ 2291.963781] ? ioctl_preallocate+0x192/0x210 [ 2291.964727] ? lock_release+0x680/0x680 [ 2291.965591] ? ext4_ext_truncate+0x250/0x250 [ 2291.966533] ? selinux_file_permission+0x92/0x520 [ 2291.967572] ? ext4_ext_truncate+0x250/0x250 [ 2291.968514] vfs_fallocate+0x48f/0xda0 [ 2291.969368] ioctl_preallocate+0x192/0x210 [ 2291.970267] ? fiemap_prep+0x220/0x220 [ 2291.971092] ? find_held_lock+0x2c/0x110 [ 2291.971974] do_vfs_ioctl+0xe59/0x10d0 [ 2291.972808] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2291.973935] ? generic_block_fiemap+0x60/0x60 [ 2291.974903] ? lock_downgrade+0x6d0/0x6d0 [ 2291.975798] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2291.976840] ? wait_for_completion_io+0x270/0x270 [ 2291.977887] ? selinux_file_ioctl+0xb6/0x270 [ 2291.978842] __x64_sys_ioctl+0x10c/0x210 [ 2291.979722] do_syscall_64+0x33/0x40 [ 2291.980519] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2291.981635] RIP: 0033:0x7f1c84620b19 [ 2291.982429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2291.986419] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2291.988053] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2291.989579] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2291.991062] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2291.992587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2291.994121] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2291.995710] CPU: 1 PID: 19062 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2291.997213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2291.998970] Call Trace: [ 2291.999534] dump_stack+0x107/0x167 [ 2292.000297] should_fail.cold+0x5/0xa [ 2292.001108] ? __es_insert_extent+0xed1/0x1370 [ 2292.002066] should_failslab+0x5/0x20 [ 2292.002885] kmem_cache_alloc+0x5b/0x310 [ 2292.003757] __es_insert_extent+0xed1/0x1370 [ 2292.004681] ? do_raw_read_unlock+0x70/0x70 [ 2292.005593] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2292.006712] ext4_es_insert_extent+0x45d/0xf10 [ 2292.007692] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2292.008607] ? ext4_es_find_extent_range+0x1cb/0x460 [ 2292.009665] ? lock_downgrade+0x6d0/0x6d0 [ 2292.010535] ? __ext4_handle_dirty_super+0x100/0x100 [ 2292.011614] ? __es_find_extent_range+0x1d3/0x490 [ 2292.012637] ? do_raw_read_unlock+0x3b/0x70 [ 2292.013568] ext4_ext_map_blocks+0x1567/0x5880 [ 2292.014542] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2292.015657] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2292.016778] ? ext4_ext_release+0x10/0x10 [ 2292.017669] ? lock_release+0x680/0x680 [ 2292.018513] ? ext4_es_lookup_extent+0x485/0xa80 [ 2292.019515] ? lock_downgrade+0x6d0/0x6d0 [ 2292.020398] ? down_read+0x10f/0x430 [ 2292.021188] ? down_write+0x160/0x160 [ 2292.021994] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2292.022995] ext4_map_blocks+0x8e1/0x1910 [ 2292.023873] ? kmem_cache_alloc+0x2a6/0x310 [ 2292.024803] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2292.025751] ? jbd2__journal_start+0xf3/0x7e0 [ 2292.026704] ? __ext4_journal_start_sb+0x214/0x390 [ 2292.027735] ? __ext4_journal_start_sb+0x1db/0x390 [ 2292.028778] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2292.029865] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2292.030857] ? down_write_killable+0x180/0x180 [ 2292.031813] ext4_fallocate+0x415/0x3850 [ 2292.032643] ? ioctl_preallocate+0x192/0x210 [ 2292.033556] ? lock_release+0x680/0x680 [ 2292.034375] ? ext4_ext_truncate+0x250/0x250 [ 2292.035292] ? selinux_file_permission+0x92/0x520 [ 2292.036281] ? ext4_ext_truncate+0x250/0x250 [ 2292.037191] vfs_fallocate+0x48f/0xda0 [ 2292.037996] ioctl_preallocate+0x192/0x210 [ 2292.038856] ? fiemap_prep+0x220/0x220 [ 2292.039645] ? find_held_lock+0x2c/0x110 [ 2292.040501] do_vfs_ioctl+0xe59/0x10d0 [ 2292.041314] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2292.042425] ? generic_block_fiemap+0x60/0x60 [ 2292.043369] ? lock_downgrade+0x6d0/0x6d0 [ 2292.044246] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2292.045273] ? wait_for_completion_io+0x270/0x270 [ 2292.046271] ? selinux_file_ioctl+0xb6/0x270 [ 2292.047214] __x64_sys_ioctl+0x10c/0x210 [ 2292.048067] do_syscall_64+0x33/0x40 [ 2292.048860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2292.049892] RIP: 0033:0x7f96bed8eb19 [ 2292.050692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2292.054533] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2292.056132] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2292.057596] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2292.059102] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2292.060585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2292.062105] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:49:54 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:49:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2292.086982] FAULT_INJECTION: forcing a failure. [ 2292.086982] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.089931] CPU: 0 PID: 19068 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2292.091414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2292.093181] Call Trace: [ 2292.093736] dump_stack+0x107/0x167 [ 2292.094526] should_fail.cold+0x5/0xa [ 2292.095331] ? create_object.isra.0+0x3a/0xa30 [ 2292.096304] should_failslab+0x5/0x20 [ 2292.097116] kmem_cache_alloc+0x5b/0x310 [ 2292.097980] create_object.isra.0+0x3a/0xa30 [ 2292.098898] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2292.099973] __kmalloc+0x16e/0x390 [ 2292.100742] __list_lru_init+0xcd/0x890 [ 2292.101611] alloc_super+0x8b8/0xa90 [ 2292.102413] sget_fc+0x110/0x860 [ 2292.103140] ? set_anon_super+0xc0/0xc0 [ 2292.103978] ? pseudo_fs_get_tree+0x20/0x20 [ 2292.104901] get_tree_nodev+0x24/0x1d0 [ 2292.105734] vfs_get_tree+0x8e/0x300 [ 2292.106529] path_mount+0x14ab/0x2200 [ 2292.107346] ? strncpy_from_user+0x9e/0x470 [ 2292.108269] ? finish_automount+0xa90/0xa90 [ 2292.109202] ? getname_flags.part.0+0x1dd/0x4f0 [ 2292.110197] __x64_sys_mount+0x282/0x300 [ 2292.111059] ? copy_mnt_ns+0xa00/0xa00 [ 2292.111885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2292.113008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2292.114103] do_syscall_64+0x33/0x40 [ 2292.114891] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2292.115985] RIP: 0033:0x7f575796fb19 [ 2292.116779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2292.120689] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2292.122311] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2292.123814] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2292.125324] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2292.126821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2292.128331] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:49:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 15:49:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0xffffffff00000000) 15:49:55 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x10000001da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00312ffc4493c8b6950f00"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_LOCK(r3, 0xb) 15:49:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 13) 15:49:55 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 9) [ 2292.318017] FAULT_INJECTION: forcing a failure. [ 2292.318017] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.320435] CPU: 0 PID: 19087 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2292.321899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2292.323656] Call Trace: [ 2292.324224] dump_stack+0x107/0x167 [ 2292.325007] should_fail.cold+0x5/0xa [ 2292.325832] ? create_object.isra.0+0x3a/0xa30 [ 2292.326810] should_failslab+0x5/0x20 [ 2292.327621] kmem_cache_alloc+0x5b/0x310 [ 2292.328525] create_object.isra.0+0x3a/0xa30 [ 2292.329578] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2292.330658] kmem_cache_alloc+0x159/0x310 [ 2292.331555] ext4_mb_new_blocks+0x698/0x45c0 [ 2292.332502] ? trace_hardirqs_on+0x5b/0x180 [ 2292.333435] ? kasan_unpoison_shadow+0x33/0x50 [ 2292.334416] ? ext4_cache_extents+0x68/0x2d0 [ 2292.335351] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2292.336436] ? ext4_discard_preallocations+0xd80/0xd80 [ 2292.337566] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2292.338572] ? ext4_inode_to_goal_block+0x320/0x430 [ 2292.339641] ext4_ext_map_blocks+0x1a55/0x5880 [ 2292.340620] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2292.341737] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2292.342871] ? ext4_ext_release+0x10/0x10 [ 2292.343756] ? ext4_map_blocks+0x5cd/0x1910 [ 2292.344654] ? lock_release+0x680/0x680 [ 2292.345513] ? ext4_es_lookup_extent+0x485/0xa80 [ 2292.346539] ? find_held_lock+0x2c/0x110 [ 2292.347433] ? down_write_killable+0x180/0x180 [ 2292.348410] ext4_map_blocks+0x63f/0x1910 [ 2292.349297] ? kmem_cache_alloc+0x2a6/0x310 [ 2292.350218] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2292.351168] ? jbd2__journal_start+0xf3/0x7e0 [ 2292.352123] ? __ext4_journal_start_sb+0x214/0x390 [ 2292.353162] ? __ext4_journal_start_sb+0x1db/0x390 [ 2292.354178] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2292.355309] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2292.356312] ? down_write_killable+0x180/0x180 [ 2292.357268] ext4_fallocate+0x415/0x3850 [ 2292.358102] ? ioctl_preallocate+0x192/0x210 [ 2292.359045] ? lock_release+0x680/0x680 [ 2292.359887] ? ext4_ext_truncate+0x250/0x250 [ 2292.360824] ? selinux_file_permission+0x92/0x520 [ 2292.361853] ? ext4_ext_truncate+0x250/0x250 [ 2292.362803] vfs_fallocate+0x48f/0xda0 [ 2292.363654] ioctl_preallocate+0x192/0x210 [ 2292.364548] ? fiemap_prep+0x220/0x220 [ 2292.365354] ? find_held_lock+0x2c/0x110 [ 2292.366205] do_vfs_ioctl+0xe59/0x10d0 [ 2292.366998] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2292.368095] ? generic_block_fiemap+0x60/0x60 [ 2292.369049] ? lock_downgrade+0x6d0/0x6d0 [ 2292.369936] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2292.370974] ? wait_for_completion_io+0x270/0x270 [ 2292.372029] ? selinux_file_ioctl+0xb6/0x270 [ 2292.372980] __x64_sys_ioctl+0x10c/0x210 [ 2292.373845] do_syscall_64+0x33/0x40 [ 2292.374640] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2292.375747] RIP: 0033:0x7f1c84620b19 [ 2292.376539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2292.380434] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2292.382050] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2292.383533] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2292.385022] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2292.386550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2292.388083] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 15:49:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x0, 0x2}}, 0x14}}, 0x0) 15:49:55 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2292.438579] FAULT_INJECTION: forcing a failure. [ 2292.438579] name failslab, interval 1, probability 0, space 0, times 0 [ 2292.441320] CPU: 0 PID: 19093 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2292.442781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2292.444611] Call Trace: [ 2292.445188] dump_stack+0x107/0x167 [ 2292.445964] should_fail.cold+0x5/0xa [ 2292.446770] ? create_object.isra.0+0x3a/0xa30 [ 2292.447740] should_failslab+0x5/0x20 [ 2292.448539] kmem_cache_alloc+0x5b/0x310 [ 2292.449428] create_object.isra.0+0x3a/0xa30 [ 2292.450368] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2292.451445] kmem_cache_alloc+0x159/0x310 [ 2292.452322] __es_insert_extent+0xed1/0x1370 [ 2292.453253] ? do_raw_read_unlock+0x70/0x70 [ 2292.454179] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2292.455289] ext4_es_insert_extent+0x45d/0xf10 [ 2292.456268] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2292.457189] ? ext4_es_find_extent_range+0x1cb/0x460 [ 2292.458268] ? lock_downgrade+0x6d0/0x6d0 [ 2292.459141] ? __ext4_handle_dirty_super+0x100/0x100 [ 2292.460204] ? __es_find_extent_range+0x1d3/0x490 [ 2292.461217] ? do_raw_read_unlock+0x3b/0x70 [ 2292.462135] ext4_ext_map_blocks+0x1567/0x5880 [ 2292.463103] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2292.464201] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2292.465329] ? ext4_ext_release+0x10/0x10 [ 2292.466228] ? lock_release+0x680/0x680 [ 2292.467065] ? ext4_es_lookup_extent+0x485/0xa80 [ 2292.468066] ? lock_downgrade+0x6d0/0x6d0 [ 2292.468962] ? down_read+0x10f/0x430 [ 2292.469754] ? down_write+0x160/0x160 [ 2292.470566] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2292.471567] ext4_map_blocks+0x8e1/0x1910 [ 2292.472448] ? kmem_cache_alloc+0x2a6/0x310 [ 2292.473371] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2292.474318] ? jbd2__journal_start+0xf3/0x7e0 [ 2292.475282] ? __ext4_journal_start_sb+0x214/0x390 [ 2292.476320] ? __ext4_journal_start_sb+0x1db/0x390 [ 2292.477361] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2292.478465] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2292.479485] ? down_write_killable+0x180/0x180 [ 2292.480447] ext4_fallocate+0x415/0x3850 [ 2292.481302] ? ioctl_preallocate+0x192/0x210 [ 2292.482235] ? lock_release+0x680/0x680 [ 2292.483076] ? ext4_ext_truncate+0x250/0x250 [ 2292.483987] ? selinux_file_permission+0x92/0x520 [ 2292.485006] ? ext4_ext_truncate+0x250/0x250 [ 2292.485933] vfs_fallocate+0x48f/0xda0 [ 2292.486762] ioctl_preallocate+0x192/0x210 [ 2292.487648] ? fiemap_prep+0x220/0x220 [ 2292.488461] ? find_held_lock+0x2c/0x110 [ 2292.489345] do_vfs_ioctl+0xe59/0x10d0 [ 2292.490156] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2292.491272] ? generic_block_fiemap+0x60/0x60 [ 2292.492211] ? lock_downgrade+0x6d0/0x6d0 [ 2292.493093] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2292.494107] ? wait_for_completion_io+0x270/0x270 [ 2292.495129] ? selinux_file_ioctl+0xb6/0x270 [ 2292.496068] __x64_sys_ioctl+0x10c/0x210 [ 2292.496930] do_syscall_64+0x33/0x40 [ 2292.497709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2292.498799] RIP: 0033:0x7f96bed8eb19 [ 2292.499588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2292.503471] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2292.505100] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2292.506613] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2292.508115] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2292.509649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2292.511149] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:50:07 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 25) fallocate(r0, 0x0, 0x0, 0x8000) 15:50:07 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 10) 15:50:07 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="01800000011b6e7de4f9498b", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:50:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7c0b2b9fdf58c77d}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2040050}, 0xc875) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="f9ffffff", @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2a4, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe4f2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6e, @loopback, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xef49}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xffffff01, @private2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb9}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xba000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x86}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff4f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x488bbc86}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xabff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x924a}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ba38099}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa57}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3e7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6ef7}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x2000c844}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) 15:50:07 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup(r0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2305.139414] FAULT_INJECTION: forcing a failure. [ 2305.139414] name failslab, interval 1, probability 0, space 0, times 0 [ 2305.141911] CPU: 1 PID: 19104 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2305.143402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2305.145200] Call Trace: [ 2305.145776] dump_stack+0x107/0x167 [ 2305.146574] should_fail.cold+0x5/0xa [ 2305.147406] ? ext4_find_extent+0xa77/0xd70 [ 2305.148346] should_failslab+0x5/0x20 [ 2305.149181] __kmalloc+0x72/0x390 [ 2305.149941] ext4_find_extent+0xa77/0xd70 [ 2305.150853] ext4_ext_map_blocks+0x1c8/0x5880 [ 2305.151841] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2305.152999] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2305.154137] ? ext4_ext_release+0x10/0x10 [ 2305.155034] ? ext4_map_blocks+0x5cd/0x1910 [ 2305.155971] ? lock_release+0x680/0x680 [ 2305.156836] ? ext4_es_lookup_extent+0x485/0xa80 [ 2305.157860] ? find_held_lock+0x2c/0x110 [ 2305.158751] ? down_write+0xe0/0x160 [ 2305.159552] ? down_write_killable+0x180/0x180 [ 2305.160557] ext4_map_blocks+0x63f/0x1910 [ 2305.161467] ? kmem_cache_alloc+0x2a6/0x310 [ 2305.162398] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2305.163369] ? jbd2__journal_start+0xf3/0x7e0 [ 2305.164342] ? __ext4_journal_start_sb+0x214/0x390 [ 2305.165423] ? __ext4_journal_start_sb+0x1db/0x390 [ 2305.166486] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2305.167627] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2305.168665] ? down_write_killable+0x180/0x180 [ 2305.169670] ext4_fallocate+0x415/0x3850 [ 2305.170547] ? ioctl_preallocate+0x192/0x210 [ 2305.171499] ? lock_release+0x680/0x680 [ 2305.172360] ? ext4_ext_truncate+0x250/0x250 [ 2305.173313] ? selinux_file_permission+0x92/0x520 [ 2305.174348] ? ext4_ext_truncate+0x250/0x250 [ 2305.175291] vfs_fallocate+0x48f/0xda0 [ 2305.176131] ioctl_preallocate+0x192/0x210 [ 2305.177043] ? fiemap_prep+0x220/0x220 [ 2305.177876] ? find_held_lock+0x2c/0x110 [ 2305.178760] do_vfs_ioctl+0xe59/0x10d0 [ 2305.179598] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2305.180716] ? generic_block_fiemap+0x60/0x60 [ 2305.181681] ? lock_downgrade+0x6d0/0x6d0 [ 2305.182565] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2305.183602] ? wait_for_completion_io+0x270/0x270 [ 2305.184641] ? selinux_file_ioctl+0xb6/0x270 [ 2305.185604] __x64_sys_ioctl+0x10c/0x210 [ 2305.186477] do_syscall_64+0x33/0x40 [ 2305.187276] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2305.188371] RIP: 0033:0x7f96bed8eb19 [ 2305.189173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2305.193103] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2305.193468] FAULT_INJECTION: forcing a failure. [ 2305.193468] name failslab, interval 1, probability 0, space 0, times 0 [ 2305.194712] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2305.194724] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2305.194736] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2305.194747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2305.194763] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 [ 2305.203598] CPU: 0 PID: 19114 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2305.204446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2305.205460] Call Trace: [ 2305.205782] dump_stack+0x107/0x167 [ 2305.206231] should_fail.cold+0x5/0xa [ 2305.206696] ? __list_lru_init+0xcd/0x890 [ 2305.207208] should_failslab+0x5/0x20 [ 2305.207674] __kmalloc+0x72/0x390 [ 2305.208100] __list_lru_init+0xcd/0x890 [ 2305.208594] alloc_super+0x8b8/0xa90 [ 2305.209062] sget_fc+0x110/0x860 [ 2305.209475] ? set_anon_super+0xc0/0xc0 [ 2305.209965] ? pseudo_fs_get_tree+0x20/0x20 [ 2305.210486] get_tree_nodev+0x24/0x1d0 [ 2305.210964] vfs_get_tree+0x8e/0x300 [ 2305.211417] path_mount+0x14ab/0x2200 [ 2305.211884] ? strncpy_from_user+0x9e/0x470 [ 2305.212411] ? finish_automount+0xa90/0xa90 [ 2305.212949] ? getname_flags.part.0+0x1dd/0x4f0 [ 2305.213520] __x64_sys_mount+0x282/0x300 [ 2305.214010] ? copy_mnt_ns+0xa00/0xa00 [ 2305.214499] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2305.215137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2305.215770] do_syscall_64+0x33/0x40 [ 2305.216226] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2305.216854] RIP: 0033:0x7f575796fb19 [ 2305.217314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2305.219539] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2305.220463] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2305.221335] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2305.222198] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2305.223061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2305.224094] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2305.229437] FAULT_INJECTION: forcing a failure. [ 2305.229437] name failslab, interval 1, probability 0, space 0, times 0 15:50:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x0, 0x3}}, 0x14}}, 0x0) 15:50:07 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 14) 15:50:07 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:50:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) [ 2305.232405] CPU: 1 PID: 19117 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2305.234174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2305.236118] Call Trace: [ 2305.236743] dump_stack+0x107/0x167 [ 2305.237620] should_fail.cold+0x5/0xa [ 2305.238527] ? __es_insert_extent+0xed1/0x1370 [ 2305.239608] should_failslab+0x5/0x20 [ 2305.240510] kmem_cache_alloc+0x5b/0x310 [ 2305.241486] __es_insert_extent+0xed1/0x1370 [ 2305.242545] ext4_es_insert_extent+0x45d/0xf10 [ 2305.243629] ? ext4_es_is_delayed+0x38/0x50 [ 2305.244645] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2305.245675] ? do_raw_read_unlock+0x3b/0x70 15:50:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x0, 0x6}}, 0x14}}, 0x0) [ 2305.246694] ? _raw_read_unlock+0x1a/0x30 [ 2305.247801] ? ext4_es_scan_range+0x116/0x240 [ 2305.248863] ? ext4_es_find_extent_range+0x460/0x460 [ 2305.250073] ? down_write_killable+0x180/0x180 [ 2305.251164] ext4_map_blocks+0x80b/0x1910 [ 2305.252148] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2305.253214] ? jbd2__journal_start+0xf3/0x7e0 [ 2305.254273] ? __ext4_journal_start_sb+0x214/0x390 [ 2305.255423] ? __ext4_journal_start_sb+0x1db/0x390 [ 2305.256583] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2305.257817] ? file_remove_privs+0x182/0x520 [ 2305.258885] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2305.260107] ? down_write_killable+0x180/0x180 [ 2305.261206] ext4_fallocate+0x415/0x3850 [ 2305.262160] ? ioctl_preallocate+0x192/0x210 [ 2305.263199] ? lock_release+0x680/0x680 15:50:08 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 11) [ 2305.264142] ? ext4_ext_truncate+0x250/0x250 [ 2305.265294] ? selinux_file_permission+0x92/0x520 [ 2305.266431] ? ext4_ext_truncate+0x250/0x250 [ 2305.267463] vfs_fallocate+0x48f/0xda0 [ 2305.268381] ioctl_preallocate+0x192/0x210 [ 2305.269380] ? fiemap_prep+0x220/0x220 [ 2305.270282] ? find_held_lock+0x2c/0x110 [ 2305.271246] do_vfs_ioctl+0xe59/0x10d0 [ 2305.272158] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2305.273392] ? generic_block_fiemap+0x60/0x60 [ 2305.274440] ? lock_downgrade+0x6d0/0x6d0 [ 2305.275411] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2305.276542] ? wait_for_completion_io+0x270/0x270 [ 2305.277679] ? selinux_file_ioctl+0xb6/0x270 [ 2305.278718] __x64_sys_ioctl+0x10c/0x210 [ 2305.279678] do_syscall_64+0x33/0x40 [ 2305.280545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2305.281778] RIP: 0033:0x7f1c84620b19 [ 2305.282651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2305.286921] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2305.288670] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2305.290321] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2305.291960] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2305.293633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2305.295285] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2305.316751] FAULT_INJECTION: forcing a failure. [ 2305.316751] name failslab, interval 1, probability 0, space 0, times 0 [ 2305.318324] CPU: 0 PID: 19126 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2305.319232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2305.320196] Call Trace: [ 2305.320507] dump_stack+0x107/0x167 [ 2305.320941] should_fail.cold+0x5/0xa [ 2305.321384] ? create_object.isra.0+0x3a/0xa30 [ 2305.321911] should_failslab+0x5/0x20 [ 2305.322350] kmem_cache_alloc+0x5b/0x310 [ 2305.322819] ? lock_chain_count+0x20/0x20 [ 2305.323303] create_object.isra.0+0x3a/0xa30 [ 2305.323815] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2305.324406] __kmalloc+0x16e/0x390 [ 2305.324822] ext4_find_extent+0xa77/0xd70 [ 2305.325315] ext4_ext_map_blocks+0x1c8/0x5880 [ 2305.325846] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2305.326457] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2305.327068] ? ext4_ext_release+0x10/0x10 [ 2305.327557] ? ext4_map_blocks+0x5cd/0x1910 [ 2305.328059] ? lock_release+0x680/0x680 [ 2305.328520] ? ext4_es_lookup_extent+0x485/0xa80 [ 2305.329073] ? find_held_lock+0x2c/0x110 [ 2305.329547] ? down_write+0xe0/0x160 [ 2305.329975] ? down_write_killable+0x180/0x180 [ 2305.330517] ext4_map_blocks+0x63f/0x1910 [ 2305.331001] ? kmem_cache_alloc+0x2a6/0x310 [ 2305.331499] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2305.332017] ? jbd2__journal_start+0xf3/0x7e0 [ 2305.332534] ? __ext4_journal_start_sb+0x214/0x390 [ 2305.333105] ? __ext4_journal_start_sb+0x1db/0x390 [ 2305.333678] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2305.334293] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2305.334848] ? down_write_killable+0x180/0x180 [ 2305.335376] ext4_fallocate+0x415/0x3850 [ 2305.335843] ? ioctl_preallocate+0x192/0x210 [ 2305.336352] ? lock_release+0x680/0x680 [ 2305.336812] ? ext4_ext_truncate+0x250/0x250 [ 2305.337321] ? selinux_file_permission+0x92/0x520 [ 2305.337878] ? ext4_ext_truncate+0x250/0x250 [ 2305.338382] vfs_fallocate+0x48f/0xda0 [ 2305.338835] ioctl_preallocate+0x192/0x210 [ 2305.339322] ? fiemap_prep+0x220/0x220 [ 2305.339767] ? find_held_lock+0x2c/0x110 [ 2305.340250] do_vfs_ioctl+0xe59/0x10d0 [ 2305.340694] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2305.341305] ? generic_block_fiemap+0x60/0x60 [ 2305.341818] ? lock_downgrade+0x6d0/0x6d0 [ 2305.342293] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2305.342847] ? wait_for_completion_io+0x270/0x270 [ 2305.343413] ? selinux_file_ioctl+0xb6/0x270 [ 2305.343927] __x64_sys_ioctl+0x10c/0x210 [ 2305.344396] do_syscall_64+0x33/0x40 [ 2305.344824] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2305.345417] RIP: 0033:0x7f96bed8eb19 [ 2305.345844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2305.347954] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2305.348830] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2305.349653] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2305.350464] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2305.351271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2305.352084] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:50:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x0, 0x8}}, 0x14}}, 0x0) 15:50:08 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) r4 = shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r4, 0xc) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:50:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="14007000", @ANYRES16=r4, @ANYBLOB="016aae0000000000953b971951ac7b131501fb473607c777c201b246fa010000007d1108e6d9332df9c393afeda66b6c349957866f63b429cffeb350c1b0b990af92df14fe17f79aa21d7381b0babb80da8aa38c5c6e03a54bd5e2a42ce0d371a2b40fa8db882c892dab00f48394ded5016cba25b275e9d951426d92162e5910db"], 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="000229bd7000553e22be9d47bed70000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40004084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000e2000000000030000000000002003433", @ANYRES32=0x0, @ANYBLOB="00003500080000000000330020000000000001007770616e33000000"], 0x68}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffd}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x30, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r8, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2e61}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4014}, 0x20004041) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2305.386711] Bluetooth: hci0: command 0x0406 tx timeout 15:50:08 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 12) [ 2305.458856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19132 comm=syz-executor.4 [ 2305.472140] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19132 comm=syz-executor.4 15:50:08 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 2305.519530] FAULT_INJECTION: forcing a failure. [ 2305.519530] name failslab, interval 1, probability 0, space 0, times 0 [ 2305.520954] CPU: 0 PID: 19141 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2305.521768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2305.522724] Call Trace: [ 2305.523034] dump_stack+0x107/0x167 [ 2305.523454] should_fail.cold+0x5/0xa [ 2305.523892] ? ext4_mb_new_blocks+0x698/0x45c0 [ 2305.524419] should_failslab+0x5/0x20 [ 2305.524857] kmem_cache_alloc+0x5b/0x310 [ 2305.525334] ext4_mb_new_blocks+0x698/0x45c0 [ 2305.525859] ? trace_hardirqs_on+0x5b/0x180 [ 2305.526354] ? kasan_unpoison_shadow+0x33/0x50 [ 2305.526878] ? ext4_cache_extents+0x68/0x2d0 [ 2305.527378] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2305.527958] ? ext4_discard_preallocations+0xd80/0xd80 [ 2305.528560] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2305.529106] ? ext4_inode_to_goal_block+0x320/0x430 [ 2305.529685] ext4_ext_map_blocks+0x1a55/0x5880 [ 2305.530215] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2305.530819] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2305.531422] ? ext4_ext_release+0x10/0x10 [ 2305.531900] ? ext4_map_blocks+0x5cd/0x1910 [ 2305.532399] ? lock_release+0x680/0x680 [ 2305.532856] ? ext4_es_lookup_extent+0x485/0xa80 [ 2305.533408] ? find_held_lock+0x2c/0x110 [ 2305.533883] ? down_write_killable+0x180/0x180 [ 2305.534413] ext4_map_blocks+0x63f/0x1910 [ 2305.534889] ? kmem_cache_alloc+0x2a6/0x310 [ 2305.535386] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2305.535903] ? jbd2__journal_start+0xf3/0x7e0 [ 2305.536428] ? __ext4_journal_start_sb+0x214/0x390 [ 2305.536995] ? __ext4_journal_start_sb+0x1db/0x390 [ 2305.537561] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2305.538165] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2305.538724] ? down_write_killable+0x180/0x180 [ 2305.539253] ext4_fallocate+0x415/0x3850 [ 2305.539726] ? ioctl_preallocate+0x192/0x210 [ 2305.540232] ? lock_release+0x680/0x680 [ 2305.540689] ? ext4_ext_truncate+0x250/0x250 [ 2305.541200] ? selinux_file_permission+0x92/0x520 [ 2305.541757] ? ext4_ext_truncate+0x250/0x250 [ 2305.542261] vfs_fallocate+0x48f/0xda0 [ 2305.542710] ioctl_preallocate+0x192/0x210 [ 2305.543194] ? fiemap_prep+0x220/0x220 [ 2305.543640] ? find_held_lock+0x2c/0x110 [ 2305.544114] do_vfs_ioctl+0xe59/0x10d0 [ 2305.544560] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2305.545166] ? generic_block_fiemap+0x60/0x60 [ 2305.545676] ? lock_downgrade+0x6d0/0x6d0 [ 2305.546149] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2305.546700] ? wait_for_completion_io+0x270/0x270 [ 2305.547255] ? selinux_file_ioctl+0xb6/0x270 [ 2305.547761] __x64_sys_ioctl+0x10c/0x210 [ 2305.548228] do_syscall_64+0x33/0x40 [ 2305.548655] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2305.549245] RIP: 0033:0x7f96bed8eb19 [ 2305.549669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2305.551784] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2305.552647] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2305.553463] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2305.554280] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2305.555093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2305.555909] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:50:21 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 26) fallocate(r0, 0x0, 0x0, 0x8000) 15:50:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x0, 0x9}}, 0x14}}, 0x0) 15:50:21 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:50:21 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="ea55ef1d8a40400098000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:50:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14e60000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}}, 0x0) 15:50:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2318.377538] FAULT_INJECTION: forcing a failure. [ 2318.377538] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.378859] CPU: 1 PID: 19155 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2318.379638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.380570] Call Trace: [ 2318.380873] dump_stack+0x107/0x167 [ 2318.381292] should_fail.cold+0x5/0xa [ 2318.381727] ? create_object.isra.0+0x3a/0xa30 [ 2318.382241] should_failslab+0x5/0x20 [ 2318.382674] kmem_cache_alloc+0x5b/0x310 [ 2318.383137] create_object.isra.0+0x3a/0xa30 [ 2318.383631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2318.384212] kmem_cache_alloc+0x159/0x310 [ 2318.384687] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2318.385220] ? trace_hardirqs_on+0x5b/0x180 [ 2318.385707] ? kasan_unpoison_shadow+0x33/0x50 [ 2318.386227] ? ext4_cache_extents+0x68/0x2d0 [ 2318.386726] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2318.387301] ? ext4_discard_preallocations+0xd80/0xd80 [ 2318.387893] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2318.388426] ? ext4_inode_to_goal_block+0x320/0x430 [ 2318.388997] ext4_ext_map_blocks+0x1a55/0x5880 [ 2318.389532] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2318.390125] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2318.390723] ? ext4_ext_release+0x10/0x10 [ 2318.391195] ? ext4_map_blocks+0x5cd/0x1910 [ 2318.391689] ? lock_release+0x680/0x680 [ 2318.392143] ? ext4_es_lookup_extent+0x485/0xa80 [ 2318.392682] ? find_held_lock+0x2c/0x110 [ 2318.393161] ? down_write_killable+0x180/0x180 [ 2318.393687] ext4_map_blocks+0x63f/0x1910 [ 2318.394163] ? kmem_cache_alloc+0x2a6/0x310 [ 2318.394657] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2318.395166] ? jbd2__journal_start+0xf3/0x7e0 [ 2318.395676] ? __ext4_journal_start_sb+0x214/0x390 [ 2318.396230] ? __ext4_journal_start_sb+0x1db/0x390 [ 2318.396774] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2318.397376] ? file_remove_privs+0x182/0x520 [ 2318.397879] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2318.398431] ? down_write_killable+0x180/0x180 [ 2318.398958] ext4_fallocate+0x415/0x3850 [ 2318.399417] ? ioctl_preallocate+0x192/0x210 [ 2318.399921] ? lock_release+0x680/0x680 [ 2318.400373] ? ext4_ext_truncate+0x250/0x250 [ 2318.400880] ? selinux_file_permission+0x92/0x520 [ 2318.401432] ? ext4_ext_truncate+0x250/0x250 [ 2318.401935] vfs_fallocate+0x48f/0xda0 [ 2318.402379] ioctl_preallocate+0x192/0x210 [ 2318.402861] ? fiemap_prep+0x220/0x220 [ 2318.403300] ? find_held_lock+0x2c/0x110 [ 2318.403776] do_vfs_ioctl+0xe59/0x10d0 [ 2318.404220] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2318.404816] ? generic_block_fiemap+0x60/0x60 [ 2318.405365] ? lock_downgrade+0x6d0/0x6d0 [ 2318.405836] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2318.406383] ? wait_for_completion_io+0x270/0x270 [ 2318.406942] ? selinux_file_ioctl+0xb6/0x270 [ 2318.407445] __x64_sys_ioctl+0x10c/0x210 [ 2318.407910] do_syscall_64+0x33/0x40 [ 2318.408331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2318.408914] RIP: 0033:0x7f96bed8eb19 [ 2318.409346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.411426] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2318.412287] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2318.413099] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2318.413910] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.414714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2318.415518] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:50:21 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 13) 15:50:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 15) [ 2318.445186] FAULT_INJECTION: forcing a failure. [ 2318.445186] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.446501] CPU: 1 PID: 19166 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2318.447308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.448257] Call Trace: [ 2318.448558] dump_stack+0x107/0x167 [ 2318.448976] should_fail.cold+0x5/0xa [ 2318.449418] ? create_object.isra.0+0x3a/0xa30 [ 2318.449939] should_failslab+0x5/0x20 [ 2318.450372] kmem_cache_alloc+0x5b/0x310 [ 2318.450841] create_object.isra.0+0x3a/0xa30 [ 2318.451338] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2318.451926] kmem_cache_alloc+0x159/0x310 [ 2318.452401] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2318.452918] ? trace_hardirqs_on+0x5b/0x180 [ 2318.453419] ? kasan_unpoison_shadow+0x33/0x50 [ 2318.453935] ? ext4_cache_extents+0x68/0x2d0 [ 2318.454435] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2318.455017] ? ext4_discard_preallocations+0xd80/0xd80 [ 2318.455616] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2318.456156] ? ext4_inode_to_goal_block+0x320/0x430 [ 2318.456746] ext4_ext_map_blocks+0x1a55/0x5880 [ 2318.457286] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2318.457884] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2318.458489] ? ext4_ext_release+0x10/0x10 [ 2318.458968] ? ext4_map_blocks+0x5cd/0x1910 [ 2318.459457] ? lock_release+0x680/0x680 [ 2318.459910] ? ext4_es_lookup_extent+0x485/0xa80 [ 2318.460450] ? find_held_lock+0x2c/0x110 [ 2318.460926] ? down_write_killable+0x180/0x180 [ 2318.461460] ext4_map_blocks+0x63f/0x1910 [ 2318.461938] ? kmem_cache_alloc+0x2a6/0x310 [ 2318.462429] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2318.462943] ? jbd2__journal_start+0xf3/0x7e0 [ 2318.463457] ? __ext4_journal_start_sb+0x214/0x390 [ 2318.464017] ? __ext4_journal_start_sb+0x1db/0x390 [ 2318.464575] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2318.465187] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2318.465741] ? down_write_killable+0x180/0x180 [ 2318.466268] ext4_fallocate+0x415/0x3850 [ 2318.466863] ? ioctl_preallocate+0x192/0x210 [ 2318.467459] ? lock_release+0x680/0x680 [ 2318.467941] ? ext4_ext_truncate+0x250/0x250 [ 2318.468527] ? selinux_file_permission+0x92/0x520 [ 2318.469242] ? ext4_ext_truncate+0x250/0x250 [ 2318.469797] vfs_fallocate+0x48f/0xda0 [ 2318.470313] ioctl_preallocate+0x192/0x210 [ 2318.470899] ? fiemap_prep+0x220/0x220 [ 2318.471473] ? find_held_lock+0x2c/0x110 [ 2318.472046] do_vfs_ioctl+0xe59/0x10d0 [ 2318.472607] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2318.473333] ? generic_block_fiemap+0x60/0x60 [ 2318.473952] ? lock_downgrade+0x6d0/0x6d0 [ 2318.474537] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2318.475283] ? wait_for_completion_io+0x270/0x270 [ 2318.475920] ? selinux_file_ioctl+0xb6/0x270 [ 2318.476564] __x64_sys_ioctl+0x10c/0x210 [ 2318.477181] do_syscall_64+0x33/0x40 [ 2318.477703] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2318.478424] RIP: 0033:0x7f1c84620b19 [ 2318.478886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.481450] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2318.482549] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2318.483531] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2318.484556] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.485548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2318.486577] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2318.489460] FAULT_INJECTION: forcing a failure. [ 2318.489460] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.491020] CPU: 1 PID: 19167 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2318.492004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.493179] Call Trace: [ 2318.493558] dump_stack+0x107/0x167 [ 2318.494062] should_fail.cold+0x5/0xa [ 2318.494516] ? create_object.isra.0+0x3a/0xa30 [ 2318.495186] should_failslab+0x5/0x20 [ 2318.495616] kmem_cache_alloc+0x5b/0x310 [ 2318.496193] create_object.isra.0+0x3a/0xa30 [ 2318.496758] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2318.497466] __kmalloc+0x16e/0x390 [ 2318.497933] __list_lru_init+0xcd/0x890 [ 2318.498470] alloc_super+0x8b8/0xa90 [ 2318.498958] sget_fc+0x110/0x860 [ 2318.499408] ? set_anon_super+0xc0/0xc0 [ 2318.500012] ? pseudo_fs_get_tree+0x20/0x20 [ 2318.500589] get_tree_nodev+0x24/0x1d0 [ 2318.501162] vfs_get_tree+0x8e/0x300 [ 2318.501678] path_mount+0x14ab/0x2200 [ 2318.502195] ? strncpy_from_user+0x9e/0x470 [ 2318.502782] ? finish_automount+0xa90/0xa90 [ 2318.503379] ? getname_flags.part.0+0x1dd/0x4f0 [ 2318.504032] __x64_sys_mount+0x282/0x300 [ 2318.504616] ? copy_mnt_ns+0xa00/0xa00 [ 2318.505077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.505871] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2318.506567] do_syscall_64+0x33/0x40 [ 2318.507028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2318.507692] RIP: 0033:0x7f575796fb19 [ 2318.508117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.510199] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2318.511056] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2318.511864] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2318.512670] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.513486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2318.514288] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:50:21 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:50:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x0, 0xf}}, 0x14}}, 0x0) 15:50:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x20000080) 15:50:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:50:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2a}, 0x14}}, 0x0) 15:50:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x0, 0x300}}, 0x14}}, 0x0) 15:50:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:50:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 16) [ 2318.688898] FAULT_INJECTION: forcing a failure. [ 2318.688898] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.690496] CPU: 0 PID: 19188 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2318.691455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.692609] Call Trace: [ 2318.692968] dump_stack+0x107/0x167 [ 2318.693484] should_fail.cold+0x5/0xa [ 2318.694020] ? __es_insert_extent+0xed1/0x1370 [ 2318.694667] should_failslab+0x5/0x20 [ 2318.695192] kmem_cache_alloc+0x5b/0x310 [ 2318.695754] __es_insert_extent+0xed1/0x1370 [ 2318.696378] ext4_es_insert_extent+0x45d/0xf10 [ 2318.697015] ? ext4_es_is_delayed+0x38/0x50 [ 2318.697624] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2318.698190] ? do_raw_read_unlock+0x3b/0x70 [ 2318.698786] ? _raw_read_unlock+0x1a/0x30 [ 2318.699358] ? ext4_es_scan_range+0x116/0x240 [ 2318.699969] ? ext4_es_find_extent_range+0x460/0x460 [ 2318.700665] ? down_write_killable+0x180/0x180 [ 2318.701305] ext4_map_blocks+0x80b/0x1910 [ 2318.701876] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2318.702490] ? jbd2__journal_start+0xf3/0x7e0 [ 2318.703104] ? __ext4_journal_start_sb+0x214/0x390 [ 2318.703789] ? __ext4_journal_start_sb+0x1db/0x390 [ 2318.704462] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2318.705165] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2318.705841] ? down_write_killable+0x180/0x180 [ 2318.706481] ext4_fallocate+0x415/0x3850 [ 2318.707045] ? ioctl_preallocate+0x192/0x210 [ 2318.707656] ? lock_release+0x680/0x680 [ 2318.708202] ? ext4_ext_truncate+0x250/0x250 [ 2318.708820] ? selinux_file_permission+0x92/0x520 [ 2318.709464] ? ext4_ext_truncate+0x250/0x250 [ 2318.710080] vfs_fallocate+0x48f/0xda0 [ 2318.710624] ioctl_preallocate+0x192/0x210 [ 2318.711209] ? fiemap_prep+0x220/0x220 [ 2318.711741] ? find_held_lock+0x2c/0x110 [ 2318.712309] do_vfs_ioctl+0xe59/0x10d0 [ 2318.712837] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2318.713531] ? generic_block_fiemap+0x60/0x60 [ 2318.714148] ? lock_downgrade+0x6d0/0x6d0 [ 2318.714689] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2318.715348] ? wait_for_completion_io+0x270/0x270 [ 2318.715984] ? selinux_file_ioctl+0xb6/0x270 [ 2318.716707] __x64_sys_ioctl+0x10c/0x210 [ 2318.717435] do_syscall_64+0x33/0x40 [ 2318.718081] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2318.718976] RIP: 0033:0x7f1c84620b19 [ 2318.719627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.722572] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2318.723750] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2318.724772] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2318.725775] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.726777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2318.727828] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2323.242782] Bluetooth: hci3: command 0x0409 tx timeout [ 2325.290781] Bluetooth: hci3: command 0x041b tx timeout [ 2327.338781] Bluetooth: hci3: command 0x040f tx timeout [ 2327.953937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2327.956446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2327.959762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2327.985254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2327.987303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2327.995039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2329.387709] Bluetooth: hci3: command 0x0419 tx timeout [ 2334.058708] Bluetooth: hci5: command 0x0406 tx timeout 15:50:42 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 27) fallocate(r0, 0x0, 0x0, 0x8000) 15:50:42 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 14) 15:50:42 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ff9000/0x3000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:50:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)="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", 0x72, 0x0, &(0x7f00000000c0)="33ae964a5907b089c94baf29cd297681d8f989f172ed6f995c0f6d5e0800fc87f04aed5376bad60216871d12dc4d247d378e15c13ff6e7233734616d9e0383f21bdbaff4336152dd4f9b1bde7bdd179baad95bafa48b634173da88c74dca4bc76f72f281e67ce9bf7b3bddc70104bae2ab4d"}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) [ 2339.487366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19661 comm=syz-executor.4 [ 2339.495142] FAULT_INJECTION: forcing a failure. [ 2339.495142] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.496542] CPU: 0 PID: 19664 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2339.497393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2339.498345] Call Trace: [ 2339.498654] dump_stack+0x107/0x167 [ 2339.499076] should_fail.cold+0x5/0xa [ 2339.499518] ? create_object.isra.0+0x3a/0xa30 [ 2339.500048] should_failslab+0x5/0x20 [ 2339.500487] kmem_cache_alloc+0x5b/0x310 [ 2339.500963] create_object.isra.0+0x3a/0xa30 [ 2339.501474] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2339.502062] kmem_cache_alloc+0x159/0x310 [ 2339.502545] __es_insert_extent+0xed1/0x1370 [ 2339.503060] ext4_es_insert_extent+0x45d/0xf10 [ 2339.503583] ? ext4_es_is_delayed+0x38/0x50 [ 2339.504108] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2339.504602] ? do_raw_read_unlock+0x3b/0x70 [ 2339.505125] ? _raw_read_unlock+0x1a/0x30 [ 2339.505605] ? ext4_es_scan_range+0x116/0x240 [ 2339.506114] ? ext4_es_find_extent_range+0x460/0x460 [ 2339.506694] ? down_write_killable+0x180/0x180 [ 2339.507256] ext4_map_blocks+0x80b/0x1910 [ 2339.507738] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2339.508249] ? jbd2__journal_start+0xf3/0x7e0 [ 2339.508763] ? __ext4_journal_start_sb+0x214/0x390 [ 2339.509324] ? __ext4_journal_start_sb+0x1db/0x390 [ 2339.509917] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2339.510524] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2339.511073] ? down_write_killable+0x180/0x180 [ 2339.511599] ext4_fallocate+0x415/0x3850 [ 2339.512061] ? ioctl_preallocate+0x192/0x210 [ 2339.512597] ? lock_release+0x680/0x680 [ 2339.513054] ? ext4_ext_truncate+0x250/0x250 [ 2339.513595] ? selinux_file_permission+0x92/0x520 [ 2339.514147] ? ext4_ext_truncate+0x250/0x250 [ 2339.514647] vfs_fallocate+0x48f/0xda0 [ 2339.515096] ioctl_preallocate+0x192/0x210 [ 2339.515576] ? fiemap_prep+0x220/0x220 [ 2339.516017] ? find_held_lock+0x2c/0x110 [ 2339.516491] do_vfs_ioctl+0xe59/0x10d0 [ 2339.516932] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2339.517533] ? generic_block_fiemap+0x60/0x60 [ 2339.518042] ? lock_downgrade+0x6d0/0x6d0 [ 2339.518542] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2339.519095] ? wait_for_completion_io+0x270/0x270 [ 2339.519680] ? selinux_file_ioctl+0xb6/0x270 [ 2339.520189] __x64_sys_ioctl+0x10c/0x210 [ 2339.520683] do_syscall_64+0x33/0x40 [ 2339.521105] FAULT_INJECTION: forcing a failure. [ 2339.521105] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.523829] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2339.525151] RIP: 0033:0x7f1c84620b19 [ 2339.526045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2339.530047] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2339.531693] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2339.533252] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2339.534794] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2339.536341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2339.537891] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2339.539471] CPU: 1 PID: 19666 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2339.541231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2339.543325] Call Trace: [ 2339.543991] dump_stack+0x107/0x167 [ 2339.544908] should_fail.cold+0x5/0xa [ 2339.545880] ? ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2339.547039] should_failslab+0x5/0x20 [ 2339.547992] kmem_cache_alloc+0x5b/0x310 [ 2339.549017] ext4_mb_new_blocks+0x1fd8/0x45c0 sendmsg$nl_generic(r0, &(0x7f00000027c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002780)={&(0x7f0000001500)={0x1268, 0x26, 0x2, 0x70bd25, 0x25dfdbfe, {0xb}, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}}, @nested={0x37, 0x62, 0x0, 0x1, [@generic="7a4ebbb37bbd2d7aec64cac52bf9e6991a4df8d77e4670", @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x53, 0x0, 0x0, @fd=r1}]}, @typed={0xc, 0x73, 0x0, 0x0, @u64}, @nested={0x116d, 0x1a, 0x0, 0x1, [@typed={0x5, 0xf, 0x0, 0x0, @str='\x00'}, @generic="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", @generic="3637a2f0858c1fa48ca6e4f5f6ae7cf93d43aa9a850db38ebbd3f2b9d79ef30a71471b4e0c9031ef4358900a602d8f09fc1dbdd65b5bbba85731eb3557aeeb121105809dd05ba704031a7641bb6c6efe23dd5d8dc8f3186dd5a52fb324514a657263e3f12a03e784d7c49050ffe9a15511a1f9a5a622bc48b245e368ca2e8a0478b8d023775d125e04f45fe5e176c7693e1b3fd0d97064eb7573cf03caa29ca1ea03f7435e8ab2698ad1cd36f76bd0d6a98b97edbbae223fcdb4844c7098dd1dccd7b7af3ad7986103b78273facd821c9850a2eec1b40f102966086f35c8ddd08a76c308da760b0e791ebd12c2b9a91fc4848ec3445d", @generic="dbc4d8524f43a9202f9b0d32d13f32580307508d3dab36f1a5ae9848a02e78377b4bc27e62670cbcd76825f150c5b254a5c9ce54439d1dc463a45ca54cc889f9e17e98ad48a158979e8bbc30a814af21e31a32d99af95eefab2c00c6298d568d1b033a813e393f4f09805e"]}, @generic="4d548520c509eae06218a66956145a503b8903a283b3a6e7ffe729b8d2fd9fe957518c922f408041b0b87a46b3357b2eba4f0c59167dc8c452eed61c600b624770414548a7b823b58102aca2d11b8c1fbdceec8a7974cf8812c41d6b57573b76caaa10fc1d2a473bcab581db3952c3297cc815244872cd0f6f1276ecd24c5140a96b4bb4ba0f5684b3"]}, 0x1268}, 0x1, 0x0, 0x0, 0x800}, 0x4000801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r8) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xa4, r9, 0x30c, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:audit_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) tee(r5, r10, 0xc6a2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x1}, 0x14}}, 0x0) 15:50:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x0, 0x600}}, 0x14}}, 0x0) 15:50:42 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2339.550172] ? trace_hardirqs_on+0x5b/0x180 [ 2339.551528] ? kasan_unpoison_shadow+0x33/0x50 [ 2339.552555] ? ext4_cache_extents+0x68/0x2d0 15:50:42 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 17) 15:50:42 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 2339.553564] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2339.554777] ? ext4_discard_preallocations+0xd80/0xd80 [ 2339.556000] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2339.557031] ? ext4_inode_to_goal_block+0x320/0x430 [ 2339.558349] ext4_ext_map_blocks+0x1a55/0x5880 [ 2339.559497] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2339.560817] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2339.562053] ? ext4_ext_release+0x10/0x10 [ 2339.562926] ? ext4_map_blocks+0x5cd/0x1910 [ 2339.563810] ? lock_release+0x680/0x680 [ 2339.564642] ? ext4_es_lookup_extent+0x485/0xa80 [ 2339.565620] ? find_held_lock+0x2c/0x110 [ 2339.566462] ? down_write_killable+0x180/0x180 [ 2339.567437] ext4_map_blocks+0x63f/0x1910 [ 2339.568297] ? kmem_cache_alloc+0x2a6/0x310 [ 2339.569209] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2339.570133] ? jbd2__journal_start+0xf3/0x7e0 [ 2339.571050] ? __ext4_journal_start_sb+0x214/0x390 [ 2339.572043] ? __ext4_journal_start_sb+0x1db/0x390 [ 2339.573050] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 15:50:42 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2339.574139] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2339.575535] ? down_write_killable+0x180/0x180 [ 2339.576335] ext4_fallocate+0x415/0x3850 [ 2339.577128] ? ioctl_preallocate+0x192/0x210 [ 2339.577824] ? lock_release+0x680/0x680 [ 2339.578416] ? ext4_ext_truncate+0x250/0x250 [ 2339.579071] ? selinux_file_permission+0x92/0x520 [ 2339.579787] ? ext4_ext_truncate+0x250/0x250 [ 2339.580430] vfs_fallocate+0x48f/0xda0 [ 2339.581014] ioctl_preallocate+0x192/0x210 [ 2339.581641] ? fiemap_prep+0x220/0x220 [ 2339.582211] ? find_held_lock+0x2c/0x110 [ 2339.582838] do_vfs_ioctl+0xe59/0x10d0 [ 2339.583406] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2339.584176] ? generic_block_fiemap+0x60/0x60 [ 2339.584836] ? lock_downgrade+0x6d0/0x6d0 [ 2339.585448] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2339.586159] ? wait_for_completion_io+0x270/0x270 [ 2339.586875] ? selinux_file_ioctl+0xb6/0x270 [ 2339.587525] __x64_sys_ioctl+0x10c/0x210 [ 2339.588114] do_syscall_64+0x33/0x40 [ 2339.588667] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2339.589414] RIP: 0033:0x7f96bed8eb19 [ 2339.589962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2339.592609] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2339.593720] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2339.594759] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2339.595804] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2339.596839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2339.597882] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 [ 2339.612511] FAULT_INJECTION: forcing a failure. [ 2339.612511] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.614148] CPU: 1 PID: 19674 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2339.615146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2339.616345] Call Trace: [ 2339.616729] dump_stack+0x107/0x167 [ 2339.617269] should_fail.cold+0x5/0xa [ 2339.617827] ? kvmalloc_node+0x119/0x170 [ 2339.618407] should_failslab+0x5/0x20 [ 2339.618958] __kmalloc_node+0x76/0x420 [ 2339.619520] ? lockdep_init_map_type+0x2c7/0x780 [ 2339.620213] kvmalloc_node+0x119/0x170 [ 2339.620779] __list_lru_init+0x511/0x890 [ 2339.621388] alloc_super+0x8b8/0xa90 [ 2339.621934] sget_fc+0x110/0x860 [ 2339.622430] ? set_anon_super+0xc0/0xc0 [ 2339.623009] ? pseudo_fs_get_tree+0x20/0x20 [ 2339.623637] get_tree_nodev+0x24/0x1d0 [ 2339.624210] vfs_get_tree+0x8e/0x300 [ 2339.624746] path_mount+0x14ab/0x2200 [ 2339.625302] ? strncpy_from_user+0x9e/0x470 [ 2339.625921] ? finish_automount+0xa90/0xa90 [ 2339.626543] ? getname_flags.part.0+0x1dd/0x4f0 [ 2339.627226] __x64_sys_mount+0x282/0x300 [ 2339.627809] ? copy_mnt_ns+0xa00/0xa00 [ 2339.628369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2339.629121] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2339.629874] do_syscall_64+0x33/0x40 [ 2339.630417] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2339.631158] RIP: 0033:0x7f575796fb19 [ 2339.631700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2339.634365] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2339.635465] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2339.636504] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2339.637763] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2339.639494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2339.641254] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:50:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="00feff00", @ANYRES16=r1, @ANYBLOB="0400040000000000000030000000"], 0x14}}, 0x0) 15:50:42 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:50:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x0, 0x900}}, 0x14}}, 0x0) 15:50:42 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r3, 0xc) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:50:42 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 15) 15:50:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) 15:50:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a, 0x0, 0xf00}}, 0x14}}, 0x0) [ 2339.919482] FAULT_INJECTION: forcing a failure. [ 2339.919482] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.922018] CPU: 0 PID: 19690 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2339.923481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2339.925234] Call Trace: [ 2339.925806] dump_stack+0x107/0x167 [ 2339.926585] should_fail.cold+0x5/0xa [ 2339.927386] ? create_object.isra.0+0x3a/0xa30 [ 2339.928348] should_failslab+0x5/0x20 [ 2339.929156] kmem_cache_alloc+0x5b/0x310 [ 2339.930019] ? lock_chain_count+0x20/0x20 [ 2339.930892] create_object.isra.0+0x3a/0xa30 [ 2339.931829] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2339.932910] __kmalloc+0x16e/0x390 [ 2339.933677] ext4_find_extent+0xa77/0xd70 [ 2339.934559] ext4_ext_map_blocks+0x1c8/0x5880 [ 2339.935519] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2339.936627] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2339.937742] ? ext4_ext_release+0x10/0x10 [ 2339.938624] ? ext4_map_blocks+0x5cd/0x1910 [ 2339.939534] ? lock_release+0x680/0x680 [ 2339.940376] ? ext4_es_lookup_extent+0x485/0xa80 [ 2339.941380] ? lock_downgrade+0x6d0/0x6d0 [ 2339.942268] ? down_write+0xe0/0x160 [ 2339.943053] ? down_write_killable+0x180/0x180 [ 2339.944037] ext4_map_blocks+0x63f/0x1910 [ 2339.944914] ? kmem_cache_alloc+0x2a6/0x310 [ 2339.945823] ? do_raw_read_unlock+0x70/0x70 [ 2339.946729] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2339.947679] ? jbd2__journal_start+0xf3/0x7e0 [ 2339.948629] ? __ext4_journal_start_sb+0x214/0x390 [ 2339.949662] ? __ext4_journal_start_sb+0x1db/0x390 [ 2339.950701] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2339.951814] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2339.952837] ? down_write_killable+0x180/0x180 [ 2339.954081] ext4_fallocate+0x415/0x3850 [ 2339.955198] ? ioctl_preallocate+0x192/0x210 [ 2339.956264] ? lock_release+0x680/0x680 [ 2339.957146] ? ext4_ext_truncate+0x250/0x250 [ 2339.958112] ? selinux_file_permission+0x92/0x520 [ 2339.959207] ? ext4_ext_truncate+0x250/0x250 [ 2339.960152] vfs_fallocate+0x48f/0xda0 [ 2339.960981] ioctl_preallocate+0x192/0x210 [ 2339.961879] ? fiemap_prep+0x220/0x220 [ 2339.962698] ? find_held_lock+0x2c/0x110 [ 2339.963577] do_vfs_ioctl+0xe59/0x10d0 [ 2339.964403] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2339.965512] ? generic_block_fiemap+0x60/0x60 [ 2339.966455] ? lock_downgrade+0x6d0/0x6d0 [ 2339.967327] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2339.968340] ? wait_for_completion_io+0x270/0x270 [ 2339.969372] ? selinux_file_ioctl+0xb6/0x270 [ 2339.970313] __x64_sys_ioctl+0x10c/0x210 [ 2339.971170] do_syscall_64+0x33/0x40 [ 2339.971963] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2339.973046] RIP: 0033:0x7f96bed8eb19 [ 2339.973838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2339.977814] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2339.979494] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2339.981031] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2339.982596] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2339.984095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2339.985599] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:50:56 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 28) fallocate(r0, 0x0, 0x0, 0x8000) 15:50:56 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 16) 15:50:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1, 0x20000}, 0x14}}, 0x0) 15:50:56 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:50:56 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 18) 15:50:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0xf}}, 0x0) 15:50:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:50:56 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="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"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:50:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0xc0}}, 0x0) [ 2353.649033] FAULT_INJECTION: forcing a failure. [ 2353.649033] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.650408] CPU: 1 PID: 19709 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2353.651198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2353.652145] Call Trace: [ 2353.652453] dump_stack+0x107/0x167 [ 2353.652871] should_fail.cold+0x5/0xa [ 2353.653306] ? jbd2__journal_start+0x190/0x7e0 [ 2353.653836] should_failslab+0x5/0x20 [ 2353.654274] kmem_cache_alloc+0x5b/0x310 [ 2353.654740] jbd2__journal_start+0x190/0x7e0 [ 2353.655245] __ext4_journal_start_sb+0x214/0x390 [ 2353.655793] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2353.656395] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2353.656948] ? down_write_killable+0x180/0x180 [ 2353.657489] ext4_fallocate+0x415/0x3850 [ 2353.657957] ? ioctl_preallocate+0x192/0x210 [ 2353.658458] ? lock_release+0x680/0x680 [ 2353.658911] ? ext4_ext_truncate+0x250/0x250 [ 2353.659414] ? selinux_file_permission+0x92/0x520 [ 2353.659966] ? ext4_ext_truncate+0x250/0x250 [ 2353.660469] vfs_fallocate+0x48f/0xda0 [ 2353.660920] ioctl_preallocate+0x192/0x210 [ 2353.661410] ? fiemap_prep+0x220/0x220 [ 2353.661857] ? find_held_lock+0x2c/0x110 [ 2353.662331] do_vfs_ioctl+0xe59/0x10d0 [ 2353.662774] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2353.663372] ? generic_block_fiemap+0x60/0x60 [ 2353.663883] ? lock_downgrade+0x6d0/0x6d0 [ 2353.664354] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2353.664902] ? wait_for_completion_io+0x270/0x270 [ 2353.665464] ? selinux_file_ioctl+0xb6/0x270 [ 2353.665971] __x64_sys_ioctl+0x10c/0x210 [ 2353.666435] do_syscall_64+0x33/0x40 [ 2353.666862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2353.667448] RIP: 0033:0x7f1c84620b19 [ 2353.667872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2353.669967] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2353.670832] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2353.671645] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2353.672454] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2353.673262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2353.674084] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2353.678576] FAULT_INJECTION: forcing a failure. [ 2353.678576] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.679884] CPU: 1 PID: 19718 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2353.680678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2353.681631] Call Trace: [ 2353.681934] dump_stack+0x107/0x167 [ 2353.682360] should_fail.cold+0x5/0xa [ 2353.682794] ? __es_insert_extent+0xed1/0x1370 [ 2353.683312] should_failslab+0x5/0x20 [ 2353.683745] kmem_cache_alloc+0x5b/0x310 [ 2353.684215] __es_insert_extent+0xed1/0x1370 [ 2353.684734] ext4_es_insert_extent+0x45d/0xf10 [ 2353.685261] ? ext4_es_is_delayed+0x38/0x50 [ 2353.685763] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2353.686254] ? do_raw_read_unlock+0x3b/0x70 [ 2353.686750] ? _raw_read_unlock+0x1a/0x30 [ 2353.687225] ? ext4_es_scan_range+0x116/0x240 [ 2353.687738] ? ext4_es_find_extent_range+0x460/0x460 [ 2353.688322] ? down_write_killable+0x180/0x180 [ 2353.688851] ext4_map_blocks+0x80b/0x1910 [ 2353.689335] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2353.689868] ? jbd2__journal_start+0xf3/0x7e0 [ 2353.690381] ? __ext4_journal_start_sb+0x214/0x390 [ 2353.690935] ? __ext4_journal_start_sb+0x1db/0x390 [ 2353.691492] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2353.692091] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2353.692645] ? down_write_killable+0x180/0x180 [ 2353.693167] ext4_fallocate+0x415/0x3850 [ 2353.693639] ? ioctl_preallocate+0x192/0x210 [ 2353.694140] ? lock_release+0x680/0x680 [ 2353.694594] ? ext4_ext_truncate+0x250/0x250 [ 2353.695093] ? selinux_file_permission+0x92/0x520 [ 2353.695644] ? ext4_ext_truncate+0x250/0x250 [ 2353.696144] vfs_fallocate+0x48f/0xda0 [ 2353.696592] ioctl_preallocate+0x192/0x210 [ 2353.697072] ? fiemap_prep+0x220/0x220 [ 2353.697522] ? find_held_lock+0x2c/0x110 [ 2353.697998] do_vfs_ioctl+0xe59/0x10d0 [ 2353.698440] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2353.699036] ? generic_block_fiemap+0x60/0x60 [ 2353.699546] ? lock_downgrade+0x6d0/0x6d0 [ 2353.700014] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2353.700567] ? wait_for_completion_io+0x270/0x270 [ 2353.701124] ? selinux_file_ioctl+0xb6/0x270 [ 2353.701644] __x64_sys_ioctl+0x10c/0x210 [ 2353.702105] do_syscall_64+0x33/0x40 [ 2353.702534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2353.703118] RIP: 0033:0x7f96bed8eb19 [ 2353.703541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2353.705629] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2353.706496] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2353.707306] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2353.708118] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2353.708927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2353.709753] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 [ 2353.721104] FAULT_INJECTION: forcing a failure. [ 2353.721104] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.723547] CPU: 0 PID: 19720 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2353.724995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2353.726780] Call Trace: [ 2353.727354] dump_stack+0x107/0x167 [ 2353.728135] should_fail.cold+0x5/0xa [ 2353.728961] ? create_object.isra.0+0x3a/0xa30 [ 2353.729951] should_failslab+0x5/0x20 [ 2353.730769] kmem_cache_alloc+0x5b/0x310 [ 2353.731651] create_object.isra.0+0x3a/0xa30 [ 2353.732600] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2353.733707] kmem_cache_alloc_trace+0x151/0x320 [ 2353.734719] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2353.735776] __list_lru_init+0x44d/0x890 [ 2353.736656] alloc_super+0x8b8/0xa90 [ 2353.737470] sget_fc+0x110/0x860 [ 2353.738195] ? set_anon_super+0xc0/0xc0 [ 2353.739058] ? pseudo_fs_get_tree+0x20/0x20 [ 2353.739986] get_tree_nodev+0x24/0x1d0 [ 2353.740819] vfs_get_tree+0x8e/0x300 [ 2353.741619] path_mount+0x14ab/0x2200 [ 2353.742421] ? strncpy_from_user+0x9e/0x470 [ 2353.743345] ? finish_automount+0xa90/0xa90 [ 2353.744269] ? getname_flags.part.0+0x1dd/0x4f0 [ 2353.745275] __x64_sys_mount+0x282/0x300 [ 2353.746149] ? copy_mnt_ns+0xa00/0xa00 [ 2353.746995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 15:50:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xaa}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24000001) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008080}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, r1, 0x200}, 0x14}}, 0x84) [ 2353.748118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2353.749389] do_syscall_64+0x33/0x40 [ 2353.750178] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2353.751248] RIP: 0033:0x7f575796fb19 [ 2353.752024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2353.755858] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2353.757451] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2353.758933] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2353.760420] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2353.761909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2353.763393] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:50:56 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 19) 15:50:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) 15:50:56 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:50:56 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 17) 15:50:56 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) 15:50:56 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2353.884896] FAULT_INJECTION: forcing a failure. [ 2353.884896] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.887362] CPU: 0 PID: 19737 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2353.888937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2353.890713] Call Trace: [ 2353.891281] dump_stack+0x107/0x167 [ 2353.892061] should_fail.cold+0x5/0xa [ 2353.892881] ? create_object.isra.0+0x3a/0xa30 [ 2353.893862] should_failslab+0x5/0x20 [ 2353.894680] kmem_cache_alloc+0x5b/0x310 [ 2353.895554] create_object.isra.0+0x3a/0xa30 [ 2353.896492] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2353.897604] kmem_cache_alloc+0x159/0x310 [ 2353.898508] __es_insert_extent+0xed1/0x1370 [ 2353.899473] ext4_es_insert_extent+0x45d/0xf10 [ 2353.900457] ? ext4_es_is_delayed+0x38/0x50 [ 2353.901394] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2353.902321] ? do_raw_read_unlock+0x3b/0x70 [ 2353.903249] ? _raw_read_unlock+0x1a/0x30 [ 2353.904139] ? ext4_es_scan_range+0x116/0x240 [ 2353.905098] ? ext4_es_find_extent_range+0x460/0x460 [ 2353.906194] ? down_write_killable+0x180/0x180 [ 2353.907194] ext4_map_blocks+0x80b/0x1910 [ 2353.908094] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2353.909058] ? jbd2__journal_start+0xf3/0x7e0 [ 2353.910040] ? __ext4_journal_start_sb+0x214/0x390 [ 2353.911087] ? __ext4_journal_start_sb+0x1db/0x390 [ 2353.912151] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2353.913296] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2353.914351] ? down_write_killable+0x180/0x180 [ 2353.915341] ext4_fallocate+0x415/0x3850 [ 2353.916217] ? ioctl_preallocate+0x192/0x210 [ 2353.917167] ? lock_release+0x680/0x680 [ 2353.918031] ? ext4_ext_truncate+0x250/0x250 [ 2353.918980] ? selinux_file_permission+0x92/0x520 [ 2353.920023] ? ext4_ext_truncate+0x250/0x250 [ 2353.920975] vfs_fallocate+0x48f/0xda0 [ 2353.921833] ioctl_preallocate+0x192/0x210 [ 2353.922740] ? fiemap_prep+0x220/0x220 [ 2353.923572] ? find_held_lock+0x2c/0x110 [ 2353.924467] do_vfs_ioctl+0xe59/0x10d0 [ 2353.925305] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2353.926432] ? generic_block_fiemap+0x60/0x60 [ 2353.927403] ? lock_downgrade+0x6d0/0x6d0 [ 2353.928296] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2353.929337] ? wait_for_completion_io+0x270/0x270 [ 2353.930388] ? selinux_file_ioctl+0xb6/0x270 [ 2353.931345] __x64_sys_ioctl+0x10c/0x210 [ 2353.932229] do_syscall_64+0x33/0x40 [ 2353.933032] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2353.934133] RIP: 0033:0x7f96bed8eb19 [ 2353.934938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2353.938884] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2353.940521] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2353.942074] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2353.943610] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2353.945153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2353.946699] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 [ 2353.960747] FAULT_INJECTION: forcing a failure. [ 2353.960747] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.962142] CPU: 1 PID: 19736 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2353.962949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2353.963895] Call Trace: [ 2353.964207] dump_stack+0x107/0x167 [ 2353.964623] should_fail.cold+0x5/0xa [ 2353.965068] ? create_object.isra.0+0x3a/0xa30 [ 2353.965608] should_failslab+0x5/0x20 [ 2353.966040] kmem_cache_alloc+0x5b/0x310 [ 2353.966506] ? lock_chain_count+0x20/0x20 [ 2353.966989] create_object.isra.0+0x3a/0xa30 [ 2353.967492] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2353.968072] __kmalloc+0x16e/0x390 [ 2353.968481] ext4_find_extent+0xa77/0xd70 [ 2353.968969] ext4_ext_map_blocks+0x1c8/0x5880 [ 2353.969492] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2353.970091] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2353.970691] ? ext4_ext_release+0x10/0x10 [ 2353.971168] ? ext4_map_blocks+0x5cd/0x1910 [ 2353.971665] ? lock_release+0x680/0x680 [ 2353.972125] ? ext4_es_lookup_extent+0x485/0xa80 [ 2353.972660] ? lock_downgrade+0x6d0/0x6d0 [ 2353.973140] ? down_write+0xe0/0x160 [ 2353.973578] ? down_write_killable+0x180/0x180 [ 2353.974113] ext4_map_blocks+0x63f/0x1910 [ 2353.974597] ? kmem_cache_alloc+0x2a6/0x310 [ 2353.975092] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2353.975600] ? jbd2__journal_start+0xf3/0x7e0 [ 2353.976110] ? __ext4_journal_start_sb+0x214/0x390 [ 2353.976666] ? __ext4_journal_start_sb+0x1db/0x390 [ 2353.977232] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2353.977845] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2353.978395] ? down_write_killable+0x180/0x180 [ 2353.978920] ext4_fallocate+0x415/0x3850 [ 2353.979379] ? ioctl_preallocate+0x192/0x210 [ 2353.979876] ? lock_release+0x680/0x680 [ 2353.980330] ? ext4_ext_truncate+0x250/0x250 [ 2353.980836] ? selinux_file_permission+0x92/0x520 [ 2353.981393] ? ext4_ext_truncate+0x250/0x250 [ 2353.981922] vfs_fallocate+0x48f/0xda0 [ 2353.982380] ioctl_preallocate+0x192/0x210 [ 2353.982860] ? fiemap_prep+0x220/0x220 [ 2353.983305] ? find_held_lock+0x2c/0x110 [ 2353.983783] do_vfs_ioctl+0xe59/0x10d0 [ 2353.984231] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2353.984836] ? generic_block_fiemap+0x60/0x60 [ 2353.985346] ? lock_downgrade+0x6d0/0x6d0 [ 2353.985830] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2353.986374] ? wait_for_completion_io+0x270/0x270 [ 2353.986927] ? selinux_file_ioctl+0xb6/0x270 [ 2353.987452] __x64_sys_ioctl+0x10c/0x210 [ 2353.987924] do_syscall_64+0x33/0x40 [ 2353.988353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2353.988935] RIP: 0033:0x7f1c84620b19 [ 2353.989361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2353.991443] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2353.992309] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2353.993259] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2353.994210] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2353.995058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2353.995894] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 15:51:07 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 29) fallocate(r0, 0x0, 0x0, 0x8000) 15:51:07 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 18) 15:51:07 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:51:07 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:51:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4000001) 15:51:07 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 20) 15:51:07 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) 15:51:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0xec0}}, 0x0) [ 2365.183375] FAULT_INJECTION: forcing a failure. [ 2365.183375] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.184848] CPU: 1 PID: 19766 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2365.185704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2365.186713] Call Trace: [ 2365.187045] dump_stack+0x107/0x167 [ 2365.187492] should_fail.cold+0x5/0xa [ 2365.187958] ? ext4_find_extent+0xa77/0xd70 [ 2365.188484] should_failslab+0x5/0x20 [ 2365.188948] __kmalloc+0x72/0x390 [ 2365.189373] ext4_find_extent+0xa77/0xd70 [ 2365.189894] ext4_ext_map_blocks+0x1c8/0x5880 [ 2365.190446] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2365.191087] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2365.191731] ? ext4_ext_release+0x10/0x10 [ 2365.192236] ? ext4_map_blocks+0x5cd/0x1910 [ 2365.192765] ? lock_release+0x680/0x680 [ 2365.193249] ? ext4_es_lookup_extent+0x485/0xa80 [ 2365.193831] ? lock_downgrade+0x6d0/0x6d0 [ 2365.194344] ? down_write+0xe0/0x160 [ 2365.194796] ? down_write_killable+0x180/0x180 [ 2365.195380] ext4_map_blocks+0x63f/0x1910 [ 2365.195888] ? kmem_cache_alloc+0x2a6/0x310 [ 2365.196413] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2365.196958] ? jbd2__journal_start+0xf3/0x7e0 [ 2365.197510] ? __ext4_journal_start_sb+0x214/0x390 [ 2365.198104] ? __ext4_journal_start_sb+0x1db/0x390 [ 2365.198699] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2365.199336] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2365.199931] ? down_write_killable+0x180/0x180 [ 2365.200491] ext4_fallocate+0x415/0x3850 [ 2365.200984] ? ioctl_preallocate+0x192/0x210 [ 2365.201530] ? lock_release+0x680/0x680 [ 2365.202018] ? ext4_ext_truncate+0x250/0x250 [ 2365.202553] ? selinux_file_permission+0x92/0x520 [ 2365.203156] ? ext4_ext_truncate+0x250/0x250 [ 2365.203692] vfs_fallocate+0x48f/0xda0 [ 2365.204171] ioctl_preallocate+0x192/0x210 [ 2365.204688] ? fiemap_prep+0x220/0x220 [ 2365.205160] ? find_held_lock+0x2c/0x110 [ 2365.205671] do_vfs_ioctl+0xe59/0x10d0 [ 2365.206140] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2365.206772] ? generic_block_fiemap+0x60/0x60 [ 2365.207312] ? lock_downgrade+0x6d0/0x6d0 [ 2365.207810] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2365.208389] ? wait_for_completion_io+0x270/0x270 [ 2365.208974] ? selinux_file_ioctl+0xb6/0x270 [ 2365.209518] __x64_sys_ioctl+0x10c/0x210 [ 2365.210011] do_syscall_64+0x33/0x40 [ 2365.210459] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2365.211075] RIP: 0033:0x7f1c84620b19 [ 2365.211523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2365.213731] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2365.214649] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2365.215505] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2365.216367] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.217222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.218082] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2365.227546] FAULT_INJECTION: forcing a failure. [ 2365.227546] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.230352] CPU: 0 PID: 19771 Comm: syz-executor.5 Not tainted 5.10.248 #1 [ 2365.232020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2365.234030] Call Trace: [ 2365.234678] dump_stack+0x107/0x167 [ 2365.235570] should_fail.cold+0x5/0xa [ 2365.236493] ? jbd2__journal_start+0x190/0x7e0 [ 2365.237599] should_failslab+0x5/0x20 [ 2365.238523] kmem_cache_alloc+0x5b/0x310 [ 2365.239509] jbd2__journal_start+0x190/0x7e0 [ 2365.240581] __ext4_journal_start_sb+0x214/0x390 [ 2365.241742] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2365.243013] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2365.244178] ? down_write_killable+0x180/0x180 [ 2365.245300] ext4_fallocate+0x415/0x3850 [ 2365.246287] ? ioctl_preallocate+0x192/0x210 [ 2365.247362] ? lock_release+0x680/0x680 [ 2365.248334] ? ext4_ext_truncate+0x250/0x250 [ 2365.249380] ? selinux_file_permission+0x92/0x520 [ 2365.250532] ? ext4_ext_truncate+0x250/0x250 [ 2365.251578] vfs_fallocate+0x48f/0xda0 [ 2365.252502] ioctl_preallocate+0x192/0x210 [ 2365.253520] ? fiemap_prep+0x220/0x220 [ 2365.254454] ? find_held_lock+0x2c/0x110 [ 2365.255434] do_vfs_ioctl+0xe59/0x10d0 [ 2365.256369] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2365.257642] ? generic_block_fiemap+0x60/0x60 [ 2365.258696] ? lock_downgrade+0x6d0/0x6d0 [ 2365.259688] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2365.260845] ? wait_for_completion_io+0x270/0x270 [ 2365.262018] ? selinux_file_ioctl+0xb6/0x270 [ 2365.263091] __x64_sys_ioctl+0x10c/0x210 [ 2365.264077] do_syscall_64+0x33/0x40 [ 2365.264980] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2365.266192] RIP: 0033:0x7f96bed8eb19 [ 2365.267063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2365.271423] RSP: 002b:00007f96bc304188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2365.273204] RAX: ffffffffffffffda RBX: 00007f96beea1f60 RCX: 00007f96bed8eb19 [ 2365.274901] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2365.276578] RBP: 00007f96bc3041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.278273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.279985] R13: 00007ffc22fad46f R14: 00007f96bc304300 R15: 0000000000022000 15:51:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x33fe0}}, 0x0) 15:51:08 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) [ 2365.302040] FAULT_INJECTION: forcing a failure. [ 2365.302040] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.304846] CPU: 0 PID: 19778 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2365.306537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2365.308439] Call Trace: [ 2365.309047] dump_stack+0x107/0x167 [ 2365.309898] should_fail.cold+0x5/0xa [ 2365.310777] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2365.311948] should_failslab+0x5/0x20 [ 2365.312822] kmem_cache_alloc_trace+0x55/0x320 [ 2365.313877] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2365.315042] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2365.316176] __list_lru_init+0x44d/0x890 [ 2365.317112] alloc_super+0x8b8/0xa90 [ 2365.317972] sget_fc+0x110/0x860 [ 2365.318746] ? set_anon_super+0xc0/0xc0 [ 2365.319655] ? pseudo_fs_get_tree+0x20/0x20 [ 2365.320633] get_tree_nodev+0x24/0x1d0 [ 2365.321535] vfs_get_tree+0x8e/0x300 [ 2365.322383] path_mount+0x14ab/0x2200 [ 2365.323261] ? strncpy_from_user+0x9e/0x470 [ 2365.324249] ? finish_automount+0xa90/0xa90 [ 2365.325237] ? getname_flags.part.0+0x1dd/0x4f0 [ 2365.326321] __x64_sys_mount+0x282/0x300 [ 2365.327253] ? copy_mnt_ns+0xa00/0xa00 [ 2365.328139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2365.329327] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2365.330511] do_syscall_64+0x33/0x40 [ 2365.331353] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2365.332514] RIP: 0033:0x7f575796fb19 [ 2365.333353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2365.337541] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2365.339255] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2365.340867] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2365.342485] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.344078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.345688] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:51:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x20000414}}, 0x0) 15:51:08 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 21) 15:51:08 executing program 4: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01004000000000000000300000005ba981f91ba5735f3a42857216af5871b9c753f3f4706b2808dc81d793d0da88c6cab56c00721bb7555a564be1fbb565e3e63a8f306289bcb59f795a935074b45011253a109b3440b1b21d520643e94a321f6a140b6b1530beb319b7aec0b06737b95f883ebe20402da1aa00ed90cb1c57ef810e14caf7797751c8ba34fe5cd6d92ca99b9585936be2e1e99f996720ad80bfc75da968806df4166b53b85c070b32819a1886f5ab76a452235d14772f391d154d9a9d409b6958c08f3ee1c478196278e0ee5ea5803594c3a3062431cabd7005607c8846545494d1959c8b77e96490f1"], 0x14}}, 0x0) [ 2365.404812] FAULT_INJECTION: forcing a failure. [ 2365.404812] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.407371] CPU: 0 PID: 19786 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2365.408871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2365.410680] Call Trace: [ 2365.411256] dump_stack+0x107/0x167 [ 2365.412050] should_fail.cold+0x5/0xa [ 2365.412877] ? create_object.isra.0+0x3a/0xa30 [ 2365.413868] should_failslab+0x5/0x20 [ 2365.414685] kmem_cache_alloc+0x5b/0x310 [ 2365.415568] create_object.isra.0+0x3a/0xa30 [ 2365.416514] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2365.417618] __kmalloc+0x16e/0x390 [ 2365.418389] ext4_find_extent+0xa77/0xd70 [ 2365.419290] ext4_ext_map_blocks+0x1c8/0x5880 [ 2365.420277] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2365.421408] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2365.422549] ? ext4_ext_release+0x10/0x10 [ 2365.423445] ? ext4_map_blocks+0x5cd/0x1910 [ 2365.424380] ? lock_release+0x680/0x680 [ 2365.425235] ? ext4_es_lookup_extent+0x485/0xa80 [ 2365.426258] ? lock_downgrade+0x6d0/0x6d0 [ 2365.427160] ? down_write+0xe0/0x160 [ 2365.427954] ? down_write_killable+0x180/0x180 [ 2365.428941] ext4_map_blocks+0x63f/0x1910 [ 2365.429842] ? kmem_cache_alloc+0x2a6/0x310 [ 2365.430764] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2365.431720] ? jbd2__journal_start+0xf3/0x7e0 [ 2365.432683] ? __ext4_journal_start_sb+0x214/0x390 [ 2365.433729] ? __ext4_journal_start_sb+0x1db/0x390 [ 2365.434777] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2365.435900] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2365.436932] ? down_write_killable+0x180/0x180 [ 2365.437923] ext4_fallocate+0x415/0x3850 [ 2365.438785] ? ioctl_preallocate+0x192/0x210 [ 2365.439726] ? lock_release+0x680/0x680 [ 2365.440569] ? ext4_ext_truncate+0x250/0x250 [ 2365.441512] ? selinux_file_permission+0x92/0x520 [ 2365.442536] ? ext4_ext_truncate+0x250/0x250 [ 2365.443465] vfs_fallocate+0x48f/0xda0 [ 2365.444297] ioctl_preallocate+0x192/0x210 [ 2365.445194] ? fiemap_prep+0x220/0x220 [ 2365.446029] ? find_held_lock+0x2c/0x110 [ 2365.446905] do_vfs_ioctl+0xe59/0x10d0 [ 2365.447726] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2365.448831] ? generic_block_fiemap+0x60/0x60 [ 2365.449784] ? lock_downgrade+0x6d0/0x6d0 [ 2365.450657] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2365.451678] ? wait_for_completion_io+0x270/0x270 [ 2365.452707] ? selinux_file_ioctl+0xb6/0x270 [ 2365.453647] __x64_sys_ioctl+0x10c/0x210 [ 2365.454501] do_syscall_64+0x33/0x40 [ 2365.455282] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2365.456351] RIP: 0033:0x7f1c84620b19 [ 2365.457131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2365.460984] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2365.462579] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2365.464073] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2365.465591] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.467287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.469001] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 15:51:08 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 19) 15:51:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x7ffff000}}, 0x0) [ 2370.090746] Bluetooth: hci5: command 0x0409 tx timeout [ 2372.138730] Bluetooth: hci5: command 0x041b tx timeout [ 2374.186746] Bluetooth: hci5: command 0x040f tx timeout [ 2375.087160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2375.089617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2375.095905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2375.118089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2375.120060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2375.122595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2376.234720] Bluetooth: hci5: command 0x0419 tx timeout 15:51:32 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 30) fallocate(r0, 0x0, 0x0, 0x8000) 15:51:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0xfffffdef}}, 0x0) 15:51:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf2531000000050034007f00000008000200", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="0a0001007770616e330000000500360001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000140)={0x0, 0x2a, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r8, 0x1}, 0x14}}, 0x801) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x100000001}]}, 0x20}}, 0x4081) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000180)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040080}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 15:51:32 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:51:32 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 22) 15:51:32 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) 15:51:32 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:51:32 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2390.085066] FAULT_INJECTION: forcing a failure. [ 2390.085066] name failslab, interval 1, probability 0, space 0, times 0 [ 2390.087722] CPU: 1 PID: 20276 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2390.089296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2390.091160] Call Trace: [ 2390.091762] dump_stack+0x107/0x167 [ 2390.092589] should_fail.cold+0x5/0xa [ 2390.093465] ? ext4_mb_new_blocks+0x698/0x45c0 [ 2390.094510] should_failslab+0x5/0x20 [ 2390.095369] kmem_cache_alloc+0x5b/0x310 [ 2390.096281] ext4_mb_new_blocks+0x698/0x45c0 [ 2390.097292] ? trace_hardirqs_on+0x5b/0x180 [ 2390.098282] ? ext4_cache_extents+0x148/0x2d0 [ 2390.099300] ? ext4_discard_preallocations+0xd80/0xd80 [ 2390.100460] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2390.101561] ext4_ext_map_blocks+0x1a55/0x5880 [ 2390.102622] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2390.103831] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2390.105036] ? ext4_ext_release+0x10/0x10 [ 2390.105999] ? ext4_map_blocks+0x5cd/0x1910 [ 2390.106994] ? lock_release+0x680/0x680 [ 2390.107913] ? ext4_es_lookup_extent+0x485/0xa80 [ 2390.109000] ? lock_downgrade+0x6d0/0x6d0 [ 2390.109969] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2390.111179] ? down_write_killable+0x180/0x180 [ 2390.112243] ext4_map_blocks+0x63f/0x1910 [ 2390.113195] ? kmem_cache_alloc+0x2a6/0x310 [ 2390.114202] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2390.115229] ? jbd2__journal_start+0xf3/0x7e0 [ 2390.116266] ? __ext4_journal_start_sb+0x214/0x390 [ 2390.117384] ? __ext4_journal_start_sb+0x1db/0x390 [ 2390.118524] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2390.119735] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2390.120844] ? down_write_killable+0x180/0x180 [ 2390.121909] ext4_fallocate+0x415/0x3850 [ 2390.122846] ? ioctl_preallocate+0x192/0x210 [ 2390.123864] ? lock_release+0x680/0x680 [ 2390.124781] ? ext4_ext_truncate+0x250/0x250 [ 2390.125799] ? selinux_file_permission+0x92/0x520 [ 2390.126910] ? ext4_ext_truncate+0x250/0x250 [ 2390.127921] vfs_fallocate+0x48f/0xda0 [ 2390.128823] ioctl_preallocate+0x192/0x210 [ 2390.129795] ? fiemap_prep+0x220/0x220 [ 2390.130689] ? find_held_lock+0x2c/0x110 [ 2390.131640] do_vfs_ioctl+0xe59/0x10d0 [ 2390.132532] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2390.133721] ? generic_block_fiemap+0x60/0x60 [ 2390.134993] ? lock_downgrade+0x6d0/0x6d0 [ 2390.136107] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2390.137438] ? wait_for_completion_io+0x270/0x270 [ 2390.138732] ? selinux_file_ioctl+0xb6/0x270 [ 2390.139810] __x64_sys_ioctl+0x10c/0x210 [ 2390.140747] do_syscall_64+0x33/0x40 [ 2390.141607] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2390.142780] RIP: 0033:0x7f1c84620b19 [ 2390.143633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2390.147774] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2390.149524] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2390.151150] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2390.152781] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2390.154414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2390.156044] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2390.167864] FAULT_INJECTION: forcing a failure. [ 2390.167864] name failslab, interval 1, probability 0, space 0, times 0 [ 2390.170437] CPU: 1 PID: 20279 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2390.172025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2390.173949] Call Trace: [ 2390.174558] dump_stack+0x107/0x167 [ 2390.175402] should_fail.cold+0x5/0xa [ 2390.176286] ? create_object.isra.0+0x3a/0xa30 [ 2390.177335] should_failslab+0x5/0x20 [ 2390.178225] kmem_cache_alloc+0x5b/0x310 [ 2390.179163] create_object.isra.0+0x3a/0xa30 [ 2390.180169] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2390.181334] kmem_cache_alloc_trace+0x151/0x320 [ 2390.182414] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2390.183540] __list_lru_init+0x44d/0x890 [ 2390.184486] alloc_super+0x8b8/0xa90 [ 2390.185347] sget_fc+0x110/0x860 [ 2390.186137] ? set_anon_super+0xc0/0xc0 [ 2390.187061] ? pseudo_fs_get_tree+0x20/0x20 [ 2390.188046] get_tree_nodev+0x24/0x1d0 [ 2390.189154] vfs_get_tree+0x8e/0x300 [ 2390.190170] path_mount+0x14ab/0x2200 [ 2390.191266] ? strncpy_from_user+0x9e/0x470 [ 2390.192262] ? finish_automount+0xa90/0xa90 [ 2390.193428] ? getname_flags.part.0+0x1dd/0x4f0 [ 2390.194706] __x64_sys_mount+0x282/0x300 [ 2390.195836] ? copy_mnt_ns+0xa00/0xa00 [ 2390.196928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2390.198301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2390.199699] do_syscall_64+0x33/0x40 [ 2390.200785] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2390.202163] RIP: 0033:0x7f575796fb19 [ 2390.203198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2390.208208] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2390.210128] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2390.212062] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2390.214005] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2390.215978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2390.217891] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:51:33 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:51:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x8}, 0x0) 15:51:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 23) 15:51:46 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x6, 0x0, 0x4, 0x7fff, 0x1ff, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000000000000ff1d4f2e87bb511ed62c8469960ad2ba4563fcc43ce43c21231d99d5fa35ecfca6aea21f0f11738c2362ca818664dd8f45663d32315a76d33158bed6dcb1469977a6bca0e61e9354244635a38460ec80aab7ee078a3819acc55a84e908712cacbcdb555c4cbc9dcb0d29102cc5bec6939c93661a8ba29bf0829f00435b3a47d4e0dce5c80e52b4cce70cf85f6e1e921acc949f5e1e4fe6ccb02fbc3df6ebf780f06d0f0208f377608397a50d75bb1db978931ee46711cc364cbda4523c5d9ff7b83b80ad0ad49662e18b4b36908b0a33cfaf2c0fee2799ed707de35681", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 \x00']) shmctl$IPC_RMID(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x80000012}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ffe000/0x1000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) 15:51:46 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 31) fallocate(r0, 0x0, 0x0, 0x8000) 15:51:46 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:51:46 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:51:46 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:51:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000000022e0b0b0fc22f3f6a00000000030000000"], 0x14}}, 0x0) [ 2403.491917] FAULT_INJECTION: forcing a failure. [ 2403.491917] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.494524] CPU: 0 PID: 20308 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2403.496080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2403.497966] Call Trace: [ 2403.498561] dump_stack+0x107/0x167 [ 2403.499407] should_fail.cold+0x5/0xa [ 2403.500265] ? create_object.isra.0+0x3a/0xa30 [ 2403.501291] should_failslab+0x5/0x20 [ 2403.502168] kmem_cache_alloc+0x5b/0x310 [ 2403.503094] create_object.isra.0+0x3a/0xa30 [ 2403.504084] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2403.505227] kmem_cache_alloc+0x159/0x310 [ 2403.506178] ext4_mb_new_blocks+0x698/0x45c0 [ 2403.507189] ? trace_hardirqs_on+0x5b/0x180 [ 2403.508178] ? ext4_cache_extents+0x148/0x2d0 [ 2403.509188] ? ext4_discard_preallocations+0xd80/0xd80 [ 2403.510386] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2403.511469] ext4_ext_map_blocks+0x1a55/0x5880 [ 2403.512519] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2403.513704] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2403.514901] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2403.515905] ? trace_hardirqs_on+0x5b/0x180 [ 2403.516873] ? finish_task_switch+0x1a4/0x5d0 [ 2403.517902] ? ext4_ext_release+0x10/0x10 [ 2403.518854] ? ext4_map_blocks+0x5cd/0x1910 [ 2403.519839] ? lock_release+0x680/0x680 [ 2403.520746] ? io_schedule_timeout+0x140/0x140 [ 2403.521802] ? down_write_killable+0x180/0x180 [ 2403.522843] ext4_map_blocks+0x63f/0x1910 [ 2403.523791] ? kmem_cache_alloc+0x2a6/0x310 [ 2403.524772] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2403.525790] ? jbd2__journal_start+0xf3/0x7e0 [ 2403.526817] ? __ext4_journal_start_sb+0x214/0x390 [ 2403.527926] ? __ext4_journal_start_sb+0x1db/0x390 [ 2403.529047] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2403.530258] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2403.531354] ? down_write_killable+0x180/0x180 [ 2403.532404] ext4_fallocate+0x415/0x3850 [ 2403.533331] ? ioctl_preallocate+0x192/0x210 [ 2403.534342] ? lock_release+0x680/0x680 [ 2403.535248] ? ext4_ext_truncate+0x250/0x250 [ 2403.536246] ? selinux_file_permission+0x92/0x520 [ 2403.537343] ? ext4_ext_truncate+0x250/0x250 [ 2403.538347] vfs_fallocate+0x48f/0xda0 [ 2403.539239] ioctl_preallocate+0x192/0x210 [ 2403.540201] ? fiemap_prep+0x220/0x220 [ 2403.541008] FAULT_INJECTION: forcing a failure. [ 2403.541008] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.541082] ? find_held_lock+0x2c/0x110 [ 2403.541127] do_vfs_ioctl+0xe59/0x10d0 [ 2403.545179] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2403.546379] ? generic_block_fiemap+0x60/0x60 [ 2403.547397] ? lock_downgrade+0x6d0/0x6d0 [ 2403.548333] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2403.549428] ? wait_for_completion_io+0x270/0x270 [ 2403.550546] ? selinux_file_ioctl+0xb6/0x270 [ 2403.551554] __x64_sys_ioctl+0x10c/0x210 [ 2403.552475] do_syscall_64+0x33/0x40 [ 2403.553320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2403.554487] RIP: 0033:0x7f1c84620b19 [ 2403.555330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2403.559500] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2403.561215] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2403.562837] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2403.564450] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2403.566074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2403.567686] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2403.569334] CPU: 1 PID: 20316 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2403.570784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2403.572493] Call Trace: [ 2403.573046] dump_stack+0x107/0x167 [ 2403.573805] should_fail.cold+0x5/0xa [ 2403.574591] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2403.575625] should_failslab+0x5/0x20 [ 2403.576402] kmem_cache_alloc_trace+0x55/0x320 [ 2403.577332] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2403.578372] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2403.579374] __list_lru_init+0x44d/0x890 [ 2403.580205] alloc_super+0x8b8/0xa90 [ 2403.580971] sget_fc+0x110/0x860 [ 2403.581657] ? set_anon_super+0xc0/0xc0 15:51:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="96f83e636b6bbce09a7b147d9a7b1400459a0a30d7f2f3a2a1ebd770250b59494823b6bd1942ea674aeb9cc661d161f6cd4a32fc5d6b459c45b55d1105ef50c7b288344ec46c0f03d5529e6b4b1fe0cb390c56f58493240bdeac02f9423f1acefeb26abd4d444db5514092585fd81ea7", @ANYRES16=r1, @ANYBLOB="0100000000edffffffff2f0a001f"], 0x14}}, 0x0) 15:51:46 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4b47, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2403.582482] ? pseudo_fs_get_tree+0x20/0x20 [ 2403.583620] get_tree_nodev+0x24/0x1d0 [ 2403.584414] vfs_get_tree+0x8e/0x300 [ 2403.585177] path_mount+0x14ab/0x2200 [ 2403.585969] ? strncpy_from_user+0x9e/0x470 [ 2403.586856] ? finish_automount+0xa90/0xa90 [ 2403.587738] ? getname_flags.part.0+0x1dd/0x4f0 [ 2403.588694] __x64_sys_mount+0x282/0x300 [ 2403.589524] ? copy_mnt_ns+0xa00/0xa00 [ 2403.590357] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2403.591429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2403.592494] do_syscall_64+0x33/0x40 [ 2403.593266] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2403.594315] RIP: 0033:0x7f575796fb19 [ 2403.595082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2403.598818] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2403.600369] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2403.601812] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2403.603263] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2403.604708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2403.606162] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:51:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x18}, 0x0) 15:51:46 executing program 7: perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x3, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x0, 0xfffffffffffffffe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmctl$SHM_LOCK(r3, 0xb) 15:51:46 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4b49, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:51:59 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:51:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x10) 15:51:59 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 32) fallocate(r0, 0x0, 0x0, 0x8000) 15:51:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x2a}, 0x0) 15:51:59 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x541b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:51:59 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:51:59 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 24) 15:51:59 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) [ 2417.040395] FAULT_INJECTION: forcing a failure. [ 2417.040395] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.042930] CPU: 0 PID: 20354 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2417.044429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.046220] Call Trace: [ 2417.046788] dump_stack+0x107/0x167 [ 2417.047592] should_fail.cold+0x5/0xa [ 2417.048420] ? ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2417.049423] should_failslab+0x5/0x20 [ 2417.050266] kmem_cache_alloc+0x5b/0x310 [ 2417.051163] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2417.052137] ? trace_hardirqs_on+0x5b/0x180 [ 2417.053071] ? ext4_cache_extents+0x148/0x2d0 [ 2417.054060] ? ext4_discard_preallocations+0xd80/0xd80 [ 2417.055205] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2417.056235] ext4_ext_map_blocks+0x1a55/0x5880 [ 2417.057237] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2417.058379] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2417.059526] ? ext4_ext_release+0x10/0x10 [ 2417.060421] ? ext4_map_blocks+0x5cd/0x1910 [ 2417.061355] ? lock_release+0x680/0x680 [ 2417.062231] ? ext4_es_lookup_extent+0x485/0xa80 [ 2417.063270] ? lock_downgrade+0x6d0/0x6d0 [ 2417.064178] ? down_write_killable+0x180/0x180 [ 2417.065171] ext4_map_blocks+0x63f/0x1910 [ 2417.066123] ? kmem_cache_alloc+0x2a6/0x310 [ 2417.067080] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2417.068041] ? jbd2__journal_start+0xf3/0x7e0 [ 2417.069013] ? __ext4_journal_start_sb+0x214/0x390 [ 2417.070069] ? __ext4_journal_start_sb+0x1db/0x390 [ 2417.071140] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2417.072436] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2417.073672] ? down_write_killable+0x180/0x180 [ 2417.074756] ext4_fallocate+0x415/0x3850 [ 2417.075642] ? ioctl_preallocate+0x192/0x210 [ 2417.076594] ? lock_release+0x680/0x680 [ 2417.077471] ? ext4_ext_truncate+0x250/0x250 [ 2417.078438] ? selinux_file_permission+0x92/0x520 [ 2417.079483] ? ext4_ext_truncate+0x250/0x250 [ 2417.080432] vfs_fallocate+0x48f/0xda0 [ 2417.081284] ioctl_preallocate+0x192/0x210 [ 2417.082211] ? fiemap_prep+0x220/0x220 [ 2417.083044] ? find_held_lock+0x2c/0x110 [ 2417.083934] do_vfs_ioctl+0xe59/0x10d0 [ 2417.084752] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2417.085900] ? generic_block_fiemap+0x60/0x60 [ 2417.086877] ? lock_downgrade+0x6d0/0x6d0 [ 2417.087755] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2417.088790] ? wait_for_completion_io+0x270/0x270 [ 2417.089863] ? selinux_file_ioctl+0xb6/0x270 [ 2417.090829] __x64_sys_ioctl+0x10c/0x210 [ 2417.091700] do_syscall_64+0x33/0x40 [ 2417.092501] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2417.093630] RIP: 0033:0x7f1c84620b19 [ 2417.094461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.098417] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2417.100056] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2417.101593] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2417.103158] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2417.104675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2417.105725] FAULT_INJECTION: forcing a failure. [ 2417.105725] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.106242] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2417.110289] CPU: 1 PID: 20360 Comm: syz-executor.0 Not tainted 5.10.248 #1 15:51:59 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5421, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2417.111754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.113752] Call Trace: [ 2417.114331] dump_stack+0x107/0x167 [ 2417.115102] should_fail.cold+0x5/0xa [ 2417.115902] ? create_object.isra.0+0x3a/0xa30 [ 2417.116867] should_failslab+0x5/0x20 [ 2417.117677] kmem_cache_alloc+0x5b/0x310 [ 2417.118535] ? mark_held_locks+0x9e/0xe0 [ 2417.119398] create_object.isra.0+0x3a/0xa30 [ 2417.120327] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2417.121404] kmem_cache_alloc_trace+0x151/0x320 [ 2417.122400] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2417.123443] __list_lru_init+0x44d/0x890 [ 2417.124305] alloc_super+0x8b8/0xa90 [ 2417.125093] sget_fc+0x110/0x860 [ 2417.125805] ? set_anon_super+0xc0/0xc0 [ 2417.126658] ? pseudo_fs_get_tree+0x20/0x20 [ 2417.127567] get_tree_nodev+0x24/0x1d0 [ 2417.128390] vfs_get_tree+0x8e/0x300 [ 2417.129178] path_mount+0x14ab/0x2200 [ 2417.129985] ? strncpy_from_user+0x9e/0x470 [ 2417.130899] ? finish_automount+0xa90/0xa90 [ 2417.131806] ? getname_flags.part.0+0x1dd/0x4f0 [ 2417.132793] __x64_sys_mount+0x282/0x300 [ 2417.133645] ? copy_mnt_ns+0xa00/0xa00 [ 2417.134482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2417.135587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2417.136678] do_syscall_64+0x33/0x40 [ 2417.137465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2417.138553] RIP: 0033:0x7f575796fb19 [ 2417.139335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.143226] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2417.144838] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2417.146359] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2417.147856] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2417.149360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2417.150872] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:51:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x2}, 0x0) 15:51:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='\a\x00\x00\b', @ANYRES16, @ANYBLOB="0002fcffffff0000000030000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) 15:51:59 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x100, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) dup2(r0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:52:00 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 25) 15:52:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc050}, 0x40000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0x1}, 0x14}}, 0x0) 15:52:00 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5450, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:52:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x3}, 0x0) 15:52:00 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 33) fallocate(r0, 0x0, 0x0, 0x8000) 15:52:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x2a}, 0x0) [ 2417.497464] FAULT_INJECTION: forcing a failure. [ 2417.497464] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.499972] CPU: 0 PID: 20387 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2417.501449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.503228] Call Trace: [ 2417.503789] dump_stack+0x107/0x167 [ 2417.504569] should_fail.cold+0x5/0xa [ 2417.505419] ? create_object.isra.0+0x3a/0xa30 [ 2417.506409] should_failslab+0x5/0x20 [ 2417.507229] kmem_cache_alloc+0x5b/0x310 [ 2417.508113] create_object.isra.0+0x3a/0xa30 [ 2417.509052] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2417.510170] kmem_cache_alloc+0x159/0x310 [ 2417.511062] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2417.512032] ? trace_hardirqs_on+0x5b/0x180 [ 2417.512963] ? ext4_cache_extents+0x148/0x2d0 [ 2417.513946] ? ext4_discard_preallocations+0xd80/0xd80 [ 2417.515080] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2417.516103] ext4_ext_map_blocks+0x1a55/0x5880 [ 2417.517099] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2417.518247] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2417.519371] ? ext4_ext_release+0x10/0x10 [ 2417.520269] ? ext4_map_blocks+0x5cd/0x1910 [ 2417.521190] ? lock_release+0x680/0x680 [ 2417.522067] ? ext4_es_lookup_extent+0x485/0xa80 [ 2417.523078] ? lock_downgrade+0x6d0/0x6d0 [ 2417.523993] ? down_write_killable+0x180/0x180 [ 2417.524989] ext4_map_blocks+0x63f/0x1910 [ 2417.525890] ? kmem_cache_alloc+0x2a6/0x310 [ 2417.526846] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2417.527800] ? jbd2__journal_start+0xf3/0x7e0 [ 2417.528759] ? __ext4_journal_start_sb+0x214/0x390 [ 2417.529798] ? __ext4_journal_start_sb+0x1db/0x390 [ 2417.530900] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2417.532038] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2417.533075] ? down_write_killable+0x180/0x180 [ 2417.534075] ext4_fallocate+0x415/0x3850 [ 2417.534957] ? ioctl_preallocate+0x192/0x210 [ 2417.535902] ? lock_release+0x680/0x680 [ 2417.536765] ? ext4_ext_truncate+0x250/0x250 [ 2417.537706] ? selinux_file_permission+0x92/0x520 [ 2417.538747] ? ext4_ext_truncate+0x250/0x250 [ 2417.539712] vfs_fallocate+0x48f/0xda0 [ 2417.540573] ioctl_preallocate+0x192/0x210 [ 2417.541564] ? fiemap_prep+0x220/0x220 [ 2417.542417] ? find_held_lock+0x2c/0x110 [ 2417.543315] do_vfs_ioctl+0xe59/0x10d0 [ 2417.544171] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2417.545289] ? generic_block_fiemap+0x60/0x60 [ 2417.546277] ? lock_downgrade+0x6d0/0x6d0 [ 2417.547171] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2417.548219] ? wait_for_completion_io+0x270/0x270 [ 2417.549257] ? selinux_file_ioctl+0xb6/0x270 [ 2417.550232] __x64_sys_ioctl+0x10c/0x210 [ 2417.551111] do_syscall_64+0x33/0x40 [ 2417.551924] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2417.553037] RIP: 0033:0x7f1c84620b19 [ 2417.553835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.557789] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2417.559428] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2417.560967] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2417.562509] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2417.564058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2417.565591] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2417.646154] FAULT_INJECTION: forcing a failure. [ 2417.646154] name failslab, interval 1, probability 0, space 0, times 0 [ 2417.648796] CPU: 0 PID: 20394 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2417.650381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.652158] Call Trace: [ 2417.652721] dump_stack+0x107/0x167 [ 2417.653524] should_fail.cold+0x5/0xa [ 2417.654378] ? create_object.isra.0+0x3a/0xa30 [ 2417.655379] should_failslab+0x5/0x20 [ 2417.656197] kmem_cache_alloc+0x5b/0x310 [ 2417.657052] ? mark_held_locks+0x9e/0xe0 [ 2417.657908] create_object.isra.0+0x3a/0xa30 [ 2417.658852] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2417.659921] kmem_cache_alloc_trace+0x151/0x320 [ 2417.660904] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2417.661931] __list_lru_init+0x44d/0x890 [ 2417.662796] alloc_super+0x8b8/0xa90 [ 2417.663581] sget_fc+0x110/0x860 [ 2417.664289] ? set_anon_super+0xc0/0xc0 [ 2417.665128] ? pseudo_fs_get_tree+0x20/0x20 [ 2417.666037] get_tree_nodev+0x24/0x1d0 [ 2417.666859] vfs_get_tree+0x8e/0x300 [ 2417.667645] path_mount+0x14ab/0x2200 [ 2417.668447] ? strncpy_from_user+0x9e/0x470 [ 2417.669356] ? finish_automount+0xa90/0xa90 [ 2417.670278] ? getname_flags.part.0+0x1dd/0x4f0 [ 2417.671256] __x64_sys_mount+0x282/0x300 [ 2417.672106] ? copy_mnt_ns+0xa00/0xa00 [ 2417.672943] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2417.674064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2417.675144] do_syscall_64+0x33/0x40 [ 2417.675927] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2417.677004] RIP: 0033:0x7f575796fb19 [ 2417.677776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.681643] RSP: 002b:00007f5754ee5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2417.683258] RAX: ffffffffffffffda RBX: 00007f5757a82f60 RCX: 00007f575796fb19 [ 2417.684757] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2417.686320] RBP: 00007f5754ee51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2417.688149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2417.689663] R13: 00007ffc26ef80cf R14: 00007f5754ee5300 R15: 0000000000022000 15:52:13 executing program 2: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:52:13 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 34) fallocate(r0, 0x0, 0x0, 0x8000) 15:52:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x4800) 15:52:13 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5451, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:52:13 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 26) 15:52:13 executing program 7: r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r5 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1/file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f00000001c0)={0xc0000001}) shmctl$SHM_LOCK(r5, 0xb) 15:52:13 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:52:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x6}, 0x0) [ 2431.126121] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=20419 comm=syz-executor.4 [ 2431.135401] FAULT_INJECTION: forcing a failure. [ 2431.135401] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.136018] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=20419 comm=syz-executor.4 [ 2431.137856] CPU: 1 PID: 20418 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2431.137881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2431.144219] Call Trace: [ 2431.144793] dump_stack+0x107/0x167 [ 2431.145567] should_fail.cold+0x5/0xa [ 2431.146372] ? jbd2__journal_start+0x190/0x7e0 [ 2431.147329] should_failslab+0x5/0x20 [ 2431.148135] kmem_cache_alloc+0x5b/0x310 [ 2431.148993] jbd2__journal_start+0x190/0x7e0 [ 2431.149587] FAULT_INJECTION: forcing a failure. [ 2431.149587] name failslab, interval 1, probability 0, space 0, times 0 [ 2431.149923] __ext4_journal_start_sb+0x214/0x390 [ 2431.149951] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2431.154372] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2431.155381] ? down_write_killable+0x180/0x180 [ 2431.156352] ext4_fallocate+0x415/0x3850 [ 2431.157203] ? ioctl_preallocate+0x192/0x210 [ 2431.158173] ? lock_release+0x680/0x680 [ 2431.159045] ? ext4_ext_truncate+0x250/0x250 [ 2431.159969] ? selinux_file_permission+0x92/0x520 [ 2431.160987] ? ext4_ext_truncate+0x250/0x250 [ 2431.161923] vfs_fallocate+0x48f/0xda0 [ 2431.162763] ioctl_preallocate+0x192/0x210 [ 2431.163691] ? fiemap_prep+0x220/0x220 [ 2431.164518] ? find_held_lock+0x2c/0x110 [ 2431.165388] do_vfs_ioctl+0xe59/0x10d0 [ 2431.166221] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2431.167316] ? generic_block_fiemap+0x60/0x60 [ 2431.168248] ? lock_downgrade+0x6d0/0x6d0 [ 2431.169117] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2431.170138] ? wait_for_completion_io+0x270/0x270 [ 2431.171194] ? selinux_file_ioctl+0xb6/0x270 [ 2431.172124] __x64_sys_ioctl+0x10c/0x210 [ 2431.172974] do_syscall_64+0x33/0x40 [ 2431.173752] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2431.174832] RIP: 0033:0x7f1c84620b19 [ 2431.175614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.179429] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2431.181005] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2431.182503] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2431.183991] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.185462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2431.186944] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2431.188460] CPU: 0 PID: 20420 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2431.189953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2431.191699] Call Trace: [ 2431.192268] dump_stack+0x107/0x167 [ 2431.193053] should_fail.cold+0x5/0xa [ 2431.193871] ? create_object.isra.0+0x3a/0xa30 [ 2431.194839] should_failslab+0x5/0x20 [ 2431.195665] kmem_cache_alloc+0x5b/0x310 [ 2431.196536] ? mark_held_locks+0x9e/0xe0 [ 2431.197392] create_object.isra.0+0x3a/0xa30 [ 2431.198320] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2431.199389] kmem_cache_alloc_trace+0x151/0x320 [ 2431.200375] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2431.201414] __list_lru_init+0x44d/0x890 [ 2431.202283] alloc_super+0x8b8/0xa90 [ 2431.203078] sget_fc+0x110/0x860 [ 2431.203789] ? set_anon_super+0xc0/0xc0 [ 2431.204628] ? pseudo_fs_get_tree+0x20/0x20 [ 2431.205535] get_tree_nodev+0x24/0x1d0 [ 2431.206362] vfs_get_tree+0x8e/0x300 [ 2431.207140] path_mount+0x14ab/0x2200 [ 2431.207940] ? strncpy_from_user+0x9e/0x470 [ 2431.208823] ? finish_automount+0xa90/0xa90 [ 2431.209733] ? getname_flags.part.0+0x1dd/0x4f0 [ 2431.210733] __x64_sys_mount+0x282/0x300 [ 2431.211580] ? copy_mnt_ns+0xa00/0xa00 [ 2431.212402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2431.213519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.214613] do_syscall_64+0x33/0x40 [ 2431.215377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2431.216464] RIP: 0033:0x7f575796fb19 [ 2431.217246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2431.221002] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2431.222548] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2431.224011] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2431.225484] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.226960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2431.228425] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:52:13 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5452, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:52:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x8}, 0x0) [ 2431.252831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=20423 comm=syz-executor.4 15:52:14 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) 15:52:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008044}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x469f2dc04382d4c6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c0}, 0x4080) [ 2444.651736] Bluetooth: hci3: command 0x0406 tx timeout 15:52:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x9}, 0x0) 15:52:28 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 1) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:52:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40040) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r1, 0x1, 0xfffffffd, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xd4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x2c}}, 0x4881) 15:52:28 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 2445.849364] FAULT_INJECTION: forcing a failure. [ 2445.849364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2445.851525] CPU: 0 PID: 20449 Comm: syz-executor.6 Not tainted 5.10.248 #1 [ 2445.852672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2445.854090] Call Trace: [ 2445.854784] dump_stack+0x107/0x167 [ 2445.855770] should_fail.cold+0x5/0xa [ 2445.856805] _copy_from_user+0x2e/0x1b0 [ 2445.857877] ioctl_preallocate+0x9f/0x210 [ 2445.859011] ? fiemap_prep+0x220/0x220 [ 2445.860054] ? find_held_lock+0x2c/0x110 [ 2445.861164] do_vfs_ioctl+0xe59/0x10d0 [ 2445.862217] ? selinux_bprm_creds_for_exec+0xb60/0xb60 15:52:28 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 35) fallocate(r0, 0x0, 0x0, 0x8000) 15:52:28 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5460, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:52:28 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:52:28 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 27) [ 2445.863644] ? generic_block_fiemap+0x60/0x60 [ 2445.865012] ? lock_downgrade+0x6d0/0x6d0 [ 2445.866136] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2445.867456] ? wait_for_completion_io+0x270/0x270 [ 2445.868787] ? selinux_file_ioctl+0xb6/0x270 [ 2445.870002] __x64_sys_ioctl+0x10c/0x210 [ 2445.871121] do_syscall_64+0x33/0x40 [ 2445.872130] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2445.873512] RIP: 0033:0x7f1bfeab1b19 [ 2445.874526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2445.879471] RSP: 002b:00007f1bfc027188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2445.881039] FAULT_INJECTION: forcing a failure. [ 2445.881039] name failslab, interval 1, probability 0, space 0, times 0 [ 2445.881504] RAX: ffffffffffffffda RBX: 00007f1bfebc4f60 RCX: 00007f1bfeab1b19 [ 2445.881518] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2445.881532] RBP: 00007f1bfc0271d0 R08: 0000000000000000 R09: 0000000000000000 [ 2445.881548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2445.890656] R13: 00007ffde55570af R14: 00007f1bfc027300 R15: 0000000000022000 15:52:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0xf}, 0x0) [ 2445.892576] CPU: 1 PID: 20455 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2445.893704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2445.894808] Call Trace: [ 2445.895162] dump_stack+0x107/0x167 [ 2445.895643] should_fail.cold+0x5/0xa [ 2445.896214] ? create_object.isra.0+0x3a/0xa30 [ 2445.896812] should_failslab+0x5/0x20 [ 2445.897327] kmem_cache_alloc+0x5b/0x310 [ 2445.897865] create_object.isra.0+0x3a/0xa30 [ 2445.898498] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2445.899202] kmem_cache_alloc+0x159/0x310 [ 2445.899760] __es_insert_extent+0xed1/0x1370 [ 2445.900357] ext4_es_insert_extent+0x45d/0xf10 [ 2445.900968] ? ext4_es_is_delayed+0x38/0x50 [ 2445.901539] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2445.902099] ? do_raw_read_unlock+0x3b/0x70 [ 2445.902685] ? _raw_read_unlock+0x1a/0x30 [ 2445.903240] ? ext4_es_scan_range+0x116/0x240 [ 2445.903829] ? ext4_es_find_extent_range+0x460/0x460 [ 2445.904498] ? down_write_killable+0x180/0x180 [ 2445.905114] ext4_map_blocks+0x80b/0x1910 [ 2445.905674] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2445.906264] ? jbd2__journal_start+0xf3/0x7e0 [ 2445.906871] ? __ext4_journal_start_sb+0x214/0x390 [ 2445.907527] ? __ext4_journal_start_sb+0x1db/0x390 [ 2445.908185] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2445.908878] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2445.909518] ? down_write_killable+0x180/0x180 [ 2445.910141] ext4_fallocate+0x415/0x3850 [ 2445.910685] ? ioctl_preallocate+0x192/0x210 [ 2445.911263] ? lock_release+0x680/0x680 [ 2445.911789] ? ext4_ext_truncate+0x250/0x250 [ 2445.912375] ? selinux_file_permission+0x92/0x520 [ 2445.913003] ? ext4_ext_truncate+0x250/0x250 [ 2445.913584] vfs_fallocate+0x48f/0xda0 [ 2445.914101] ioctl_preallocate+0x192/0x210 [ 2445.914665] ? fiemap_prep+0x220/0x220 [ 2445.915174] ? find_held_lock+0x2c/0x110 [ 2445.915726] do_vfs_ioctl+0xe59/0x10d0 [ 2445.916243] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2445.916935] ? generic_block_fiemap+0x60/0x60 [ 2445.917521] ? lock_downgrade+0x6d0/0x6d0 [ 2445.918063] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2445.918719] ? wait_for_completion_io+0x270/0x270 [ 2445.919345] ? selinux_file_ioctl+0xb6/0x270 [ 2445.919917] __x64_sys_ioctl+0x10c/0x210 [ 2445.920446] do_syscall_64+0x33/0x40 [ 2445.920938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2445.921592] RIP: 0033:0x7f1c84620b19 [ 2445.922081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2445.924450] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2445.925442] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2445.926363] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2445.927262] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2445.928158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2445.929056] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 15:52:28 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40049409, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2445.977953] FAULT_INJECTION: forcing a failure. [ 2445.977953] name failslab, interval 1, probability 0, space 0, times 0 [ 2445.980565] CPU: 0 PID: 20466 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2445.982142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2445.984073] Call Trace: [ 2445.984674] dump_stack+0x107/0x167 [ 2445.985520] should_fail.cold+0x5/0xa [ 2445.986414] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2445.987584] should_failslab+0x5/0x20 [ 2445.988465] kmem_cache_alloc_trace+0x55/0x320 [ 2445.989518] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2445.990696] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2445.991849] __list_lru_init+0x44d/0x890 [ 2445.992788] alloc_super+0x8b8/0xa90 [ 2445.993651] sget_fc+0x110/0x860 [ 2445.994463] ? set_anon_super+0xc0/0xc0 [ 2445.995382] ? pseudo_fs_get_tree+0x20/0x20 [ 2445.996389] get_tree_nodev+0x24/0x1d0 [ 2445.997294] vfs_get_tree+0x8e/0x300 [ 2445.998151] path_mount+0x14ab/0x2200 [ 2445.999049] ? strncpy_from_user+0x9e/0x470 [ 2446.000037] ? finish_automount+0xa90/0xa90 [ 2446.001056] ? getname_flags.part.0+0x1dd/0x4f0 [ 2446.002145] __x64_sys_mount+0x282/0x300 [ 2446.003088] ? copy_mnt_ns+0xa00/0xa00 15:52:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x300}, 0x0) [ 2446.003997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2446.005337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2446.006541] do_syscall_64+0x33/0x40 [ 2446.007404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2446.008582] RIP: 0033:0x7f575796fb19 [ 2446.009415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2446.013602] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2446.015384] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2446.017037] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2446.018679] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2446.020330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2446.021956] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:52:28 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:52:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:52:28 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000010000001800b6d1", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffa000/0x2000)=nil, 0x2000) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:52:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x600}, 0x0) 15:52:29 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 28) 15:52:29 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 2) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2446.384238] FAULT_INJECTION: forcing a failure. [ 2446.384238] name failslab, interval 1, probability 0, space 0, times 0 [ 2446.385598] CPU: 1 PID: 20494 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2446.386402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2446.387351] Call Trace: [ 2446.387661] dump_stack+0x107/0x167 [ 2446.388078] should_fail.cold+0x5/0xa [ 2446.388521] ? jbd2__journal_start+0x190/0x7e0 [ 2446.388651] FAULT_INJECTION: forcing a failure. [ 2446.388651] name failslab, interval 1, probability 0, space 0, times 0 [ 2446.389050] should_failslab+0x5/0x20 [ 2446.389073] kmem_cache_alloc+0x5b/0x310 [ 2446.392518] jbd2__journal_start+0x190/0x7e0 [ 2446.393030] __ext4_journal_start_sb+0x214/0x390 [ 2446.393582] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2446.394197] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2446.394761] ? down_write_killable+0x180/0x180 [ 2446.395289] ext4_fallocate+0x415/0x3850 [ 2446.395760] ? ioctl_preallocate+0x192/0x210 [ 2446.396269] ? lock_release+0x680/0x680 [ 2446.396729] ? ext4_ext_truncate+0x250/0x250 [ 2446.397233] ? selinux_file_permission+0x92/0x520 [ 2446.397786] ? ext4_ext_truncate+0x250/0x250 [ 2446.398292] vfs_fallocate+0x48f/0xda0 [ 2446.398754] ioctl_preallocate+0x192/0x210 [ 2446.399236] ? fiemap_prep+0x220/0x220 [ 2446.399680] ? find_held_lock+0x2c/0x110 [ 2446.400153] do_vfs_ioctl+0xe59/0x10d0 [ 2446.400600] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2446.401203] ? generic_block_fiemap+0x60/0x60 [ 2446.401716] ? lock_downgrade+0x6d0/0x6d0 [ 2446.402188] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2446.402750] ? wait_for_completion_io+0x270/0x270 [ 2446.403310] ? selinux_file_ioctl+0xb6/0x270 [ 2446.403816] __x64_sys_ioctl+0x10c/0x210 [ 2446.404283] do_syscall_64+0x33/0x40 [ 2446.404709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2446.405297] RIP: 0033:0x7f1c84620b19 [ 2446.405721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2446.407846] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2446.408722] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2446.409537] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2446.410365] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2446.411182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2446.411998] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2446.412853] CPU: 0 PID: 20495 Comm: syz-executor.6 Not tainted 5.10.248 #1 [ 2446.414494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2446.416398] Call Trace: [ 2446.417038] dump_stack+0x107/0x167 [ 2446.417887] should_fail.cold+0x5/0xa [ 2446.418773] ? jbd2__journal_start+0x190/0x7e0 [ 2446.419851] should_failslab+0x5/0x20 [ 2446.420729] kmem_cache_alloc+0x5b/0x310 [ 2446.421683] jbd2__journal_start+0x190/0x7e0 [ 2446.422714] __ext4_journal_start_sb+0x214/0x390 [ 2446.423801] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2446.425029] ? file_remove_privs+0x182/0x520 [ 2446.426049] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2446.427178] ? down_write_killable+0x180/0x180 [ 2446.428233] ext4_fallocate+0x415/0x3850 [ 2446.429177] ? ioctl_preallocate+0x192/0x210 [ 2446.430202] ? lock_release+0x680/0x680 [ 2446.431131] ? ext4_ext_truncate+0x250/0x250 [ 2446.432130] ? selinux_file_permission+0x92/0x520 [ 2446.433249] ? ext4_ext_truncate+0x250/0x250 [ 2446.434268] vfs_fallocate+0x48f/0xda0 [ 2446.435190] ioctl_preallocate+0x192/0x210 [ 2446.436158] ? fiemap_prep+0x220/0x220 [ 2446.437062] ? find_held_lock+0x2c/0x110 [ 2446.438018] do_vfs_ioctl+0xe59/0x10d0 [ 2446.438927] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2446.440124] ? generic_block_fiemap+0x60/0x60 [ 2446.441171] ? lock_downgrade+0x6d0/0x6d0 [ 2446.442129] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2446.443242] ? wait_for_completion_io+0x270/0x270 [ 2446.444357] ? selinux_file_ioctl+0xb6/0x270 [ 2446.445386] __x64_sys_ioctl+0x10c/0x210 [ 2446.446347] do_syscall_64+0x33/0x40 [ 2446.447205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2446.448370] RIP: 0033:0x7f1bfeab1b19 [ 2446.449248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2446.453465] RSP: 002b:00007f1bfc027188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2446.455233] RAX: ffffffffffffffda RBX: 00007f1bfebc4f60 RCX: 00007f1bfeab1b19 [ 2446.456856] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2446.458528] RBP: 00007f1bfc0271d0 R08: 0000000000000000 R09: 0000000000000000 [ 2446.460173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2446.462139] R13: 00007ffde55570af R14: 00007f1bfc027300 R15: 0000000000022000 15:52:40 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00e0\x00'/22]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:52:40 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 3) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2458.194389] FAULT_INJECTION: forcing a failure. [ 2458.194389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2458.195976] CPU: 0 PID: 20503 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2458.196834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.197855] Call Trace: [ 2458.198187] dump_stack+0x107/0x167 [ 2458.198658] should_fail.cold+0x5/0xa [ 2458.199136] _copy_from_user+0x2e/0x1b0 [ 2458.199633] ioctl_preallocate+0x9f/0x210 [ 2458.200146] ? fiemap_prep+0x220/0x220 [ 2458.200639] ? find_held_lock+0x2c/0x110 [ 2458.201153] do_vfs_ioctl+0xe59/0x10d0 [ 2458.201637] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2458.202291] ? generic_block_fiemap+0x60/0x60 [ 2458.202856] ? lock_downgrade+0x6d0/0x6d0 [ 2458.203378] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2458.203980] ? wait_for_completion_io+0x270/0x270 [ 2458.204585] ? selinux_file_ioctl+0xb6/0x270 [ 2458.205139] __x64_sys_ioctl+0x10c/0x210 [ 2458.205660] do_syscall_64+0x33/0x40 [ 2458.206124] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.206773] RIP: 0033:0x7f0b4e5c1b19 [ 2458.207233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.209511] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.210462] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2458.211341] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2458.212217] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.213093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2458.213210] FAULT_INJECTION: forcing a failure. [ 2458.213210] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.213971] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2458.218083] CPU: 1 PID: 20504 Comm: syz-executor.6 Not tainted 5.10.248 #1 15:52:40 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 36) fallocate(r0, 0x0, 0x0, 0x8000) 15:52:40 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 1) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:52:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4881}, 0x50) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="aa1f28647be2fbe889009238caae776c3c72d5d6c0620d74effe7c31339debc53958d80ea58b91839fb31aa44bc07b19b7d14c7186bb8a0662805fa5801961d0cac9bd83696f939389656f0b39d93613b88d", @ANYRES16=0x0, @ANYBLOB="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"], 0x2cc}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x38}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x11, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',:\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d1) 15:52:40 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40087602, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:52:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x900}, 0x0) 15:52:40 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 29) [ 2458.219549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.221611] Call Trace: [ 2458.222168] dump_stack+0x107/0x167 [ 2458.222947] should_fail.cold+0x5/0xa [ 2458.223745] ? create_object.isra.0+0x3a/0xa30 [ 2458.224696] should_failslab+0x5/0x20 [ 2458.225489] kmem_cache_alloc+0x5b/0x310 [ 2458.226336] create_object.isra.0+0x3a/0xa30 [ 2458.227265] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2458.228334] kmem_cache_alloc+0x159/0x310 [ 2458.229203] jbd2__journal_start+0x190/0x7e0 [ 2458.230130] __ext4_journal_start_sb+0x214/0x390 [ 2458.231139] ext4_dirty_inode+0xbc/0x130 [ 2458.231978] ? ext4_setattr+0x21b0/0x21b0 [ 2458.232834] __mark_inode_dirty+0x492/0xd30 [ 2458.233725] ? current_time+0xac/0x120 [ 2458.234546] generic_update_time+0x21c/0x370 [ 2458.235462] ? igrab+0xc0/0xc0 [ 2458.236139] file_update_time+0x43a/0x520 [ 2458.237010] ? evict_inodes+0x470/0x470 [ 2458.237855] ? down_write_killable+0x180/0x180 [ 2458.238824] file_modified+0x7d/0xa0 15:52:41 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 2) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 2458.239601] ext4_fallocate+0x3c6/0x3850 [ 2458.240562] ? ioctl_preallocate+0x192/0x210 [ 2458.241502] ? lock_release+0x680/0x680 [ 2458.242351] ? ext4_ext_truncate+0x250/0x250 [ 2458.243295] ? selinux_file_permission+0x92/0x520 [ 2458.244325] ? ext4_ext_truncate+0x250/0x250 [ 2458.245253] vfs_fallocate+0x48f/0xda0 [ 2458.246092] ioctl_preallocate+0x192/0x210 [ 2458.246996] ? fiemap_prep+0x220/0x220 [ 2458.247822] ? find_held_lock+0x2c/0x110 [ 2458.248693] do_vfs_ioctl+0xe59/0x10d0 [ 2458.249523] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2458.250631] ? generic_block_fiemap+0x60/0x60 [ 2458.251580] ? lock_downgrade+0x6d0/0x6d0 [ 2458.252451] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2458.253485] ? wait_for_completion_io+0x270/0x270 [ 2458.254531] ? selinux_file_ioctl+0xb6/0x270 [ 2458.255474] __x64_sys_ioctl+0x10c/0x210 [ 2458.256338] do_syscall_64+0x33/0x40 [ 2458.257131] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.258203] RIP: 0033:0x7f1bfeab1b19 [ 2458.258999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.262907] RSP: 002b:00007f1bfc027188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.264524] RAX: ffffffffffffffda RBX: 00007f1bfebc4f60 RCX: 00007f1bfeab1b19 [ 2458.266041] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2458.267558] RBP: 00007f1bfc0271d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.269063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2458.270585] R13: 00007ffde55570af R14: 00007f1bfc027300 R15: 0000000000022000 15:52:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0xf00}, 0x0) [ 2458.289083] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 2458.296268] FAULT_INJECTION: forcing a failure. [ 2458.296268] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.298705] CPU: 1 PID: 20514 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2458.300185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.301956] Call Trace: [ 2458.302534] dump_stack+0x107/0x167 [ 2458.303317] should_fail.cold+0x5/0xa [ 2458.304132] ? create_object.isra.0+0x3a/0xa30 [ 2458.305104] should_failslab+0x5/0x20 [ 2458.305921] kmem_cache_alloc+0x5b/0x310 [ 2458.306805] ? lock_chain_count+0x20/0x20 [ 2458.307706] create_object.isra.0+0x3a/0xa30 [ 2458.308649] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2458.309736] __kmalloc+0x16e/0x390 [ 2458.310143] FAULT_INJECTION: forcing a failure. [ 2458.310143] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.310513] ext4_find_extent+0xa77/0xd70 [ 2458.312735] ext4_ext_map_blocks+0x1c8/0x5880 [ 2458.313705] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2458.314832] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2458.315960] ? ext4_ext_release+0x10/0x10 [ 2458.316852] ? ext4_map_blocks+0x5cd/0x1910 [ 2458.317785] ? lock_release+0x680/0x680 [ 2458.318653] ? ext4_es_lookup_extent+0x485/0xa80 [ 2458.319662] ? lock_downgrade+0x6d0/0x6d0 [ 2458.320570] ? down_write+0xe0/0x160 [ 2458.321365] ? down_write_killable+0x180/0x180 [ 2458.322354] ext4_map_blocks+0x63f/0x1910 [ 2458.323251] ? kmem_cache_alloc+0x2a6/0x310 [ 2458.324180] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2458.325143] ? jbd2__journal_start+0xf3/0x7e0 [ 2458.326106] ? __ext4_journal_start_sb+0x214/0x390 [ 2458.327160] ? __ext4_journal_start_sb+0x1db/0x390 [ 2458.328211] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2458.329345] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2458.330383] ? down_write_killable+0x180/0x180 [ 2458.331377] ext4_fallocate+0x415/0x3850 [ 2458.332240] ? ioctl_preallocate+0x192/0x210 [ 2458.333184] ? lock_release+0x680/0x680 [ 2458.334040] ? ext4_ext_truncate+0x250/0x250 [ 2458.334993] ? selinux_file_permission+0x92/0x520 [ 2458.336024] ? ext4_ext_truncate+0x250/0x250 [ 2458.336971] vfs_fallocate+0x48f/0xda0 [ 2458.337816] ioctl_preallocate+0x192/0x210 [ 2458.338730] ? fiemap_prep+0x220/0x220 [ 2458.339542] ? find_held_lock+0x2c/0x110 [ 2458.340408] do_vfs_ioctl+0xe59/0x10d0 [ 2458.341238] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2458.342356] ? generic_block_fiemap+0x60/0x60 [ 2458.343319] ? lock_downgrade+0x6d0/0x6d0 [ 2458.344206] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2458.345240] ? wait_for_completion_io+0x270/0x270 [ 2458.346282] ? selinux_file_ioctl+0xb6/0x270 [ 2458.347247] __x64_sys_ioctl+0x10c/0x210 [ 2458.348119] do_syscall_64+0x33/0x40 [ 2458.348910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.350006] RIP: 0033:0x7f1c84620b19 [ 2458.350817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.354756] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.356377] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2458.357904] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2458.359437] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.360955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2458.362486] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2458.364029] CPU: 0 PID: 20518 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2458.364852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.365821] Call Trace: [ 2458.366142] dump_stack+0x107/0x167 [ 2458.366585] should_fail.cold+0x5/0xa [ 2458.367031] ? jbd2__journal_start+0x190/0x7e0 [ 2458.367575] should_failslab+0x5/0x20 [ 2458.368030] kmem_cache_alloc+0x5b/0x310 [ 2458.368514] jbd2__journal_start+0x190/0x7e0 [ 2458.369039] __ext4_journal_start_sb+0x214/0x390 [ 2458.369600] ext4_dirty_inode+0xbc/0x130 [ 2458.370091] ? ext4_setattr+0x21b0/0x21b0 [ 2458.370592] __mark_inode_dirty+0x492/0xd30 [ 2458.371102] ? current_time+0xac/0x120 [ 2458.371561] generic_update_time+0x21c/0x370 [ 2458.372070] ? igrab+0xc0/0xc0 [ 2458.372450] file_update_time+0x43a/0x520 [ 2458.372949] ? evict_inodes+0x470/0x470 [ 2458.373417] ? down_write_killable+0x180/0x180 [ 2458.373955] file_modified+0x7d/0xa0 [ 2458.374386] ext4_fallocate+0x3c6/0x3850 [ 2458.374865] ? ioctl_preallocate+0x192/0x210 [ 2458.375395] ? lock_release+0x680/0x680 [ 2458.375864] ? ext4_ext_truncate+0x250/0x250 [ 2458.375915] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 2458.376378] ? selinux_file_permission+0x92/0x520 [ 2458.376393] ? ext4_ext_truncate+0x250/0x250 [ 2458.376406] vfs_fallocate+0x48f/0xda0 [ 2458.376426] ioctl_preallocate+0x192/0x210 [ 2458.380843] ? fiemap_prep+0x220/0x220 [ 2458.381293] ? find_held_lock+0x2c/0x110 [ 2458.381780] do_vfs_ioctl+0xe59/0x10d0 [ 2458.382233] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2458.382851] ? generic_block_fiemap+0x60/0x60 [ 2458.383373] ? lock_downgrade+0x6d0/0x6d0 [ 2458.383850] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2458.384412] ? wait_for_completion_io+0x270/0x270 [ 2458.384979] ? selinux_file_ioctl+0xb6/0x270 [ 2458.385498] __x64_sys_ioctl+0x10c/0x210 [ 2458.385974] do_syscall_64+0x33/0x40 [ 2458.386406] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.387011] RIP: 0033:0x7f0b4e5c1b19 [ 2458.387442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.389576] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.390473] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2458.391300] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2458.392115] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.392935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2458.393755] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 15:52:41 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4020940d, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2458.424360] FAULT_INJECTION: forcing a failure. [ 2458.424360] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.426788] CPU: 1 PID: 20524 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2458.428235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 15:52:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="47ffffff", @ANYRES16=r1, @ANYBLOB="01090000ca690966529afee1ddd42e77245fd0000400ebf80000b6d5461e1938f97faf5a2a3b"], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r5) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100000070570000000002000000"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r7) sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r10, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7f}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1f}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44005}, 0x80) [ 2458.429962] Call Trace: [ 2458.430667] dump_stack+0x107/0x167 [ 2458.431439] should_fail.cold+0x5/0xa [ 2458.432243] ? create_object.isra.0+0x3a/0xa30 [ 2458.433193] should_failslab+0x5/0x20 [ 2458.433986] kmem_cache_alloc+0x5b/0x310 [ 2458.434854] create_object.isra.0+0x3a/0xa30 [ 2458.435768] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2458.436833] kmem_cache_alloc_trace+0x151/0x320 [ 2458.437820] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2458.438857] __list_lru_init+0x44d/0x890 [ 2458.439726] alloc_super+0x8b8/0xa90 [ 2458.440504] sget_fc+0x110/0x860 [ 2458.441220] ? set_anon_super+0xc0/0xc0 [ 2458.442053] ? pseudo_fs_get_tree+0x20/0x20 [ 2458.442970] get_tree_nodev+0x24/0x1d0 [ 2458.443780] vfs_get_tree+0x8e/0x300 [ 2458.444552] path_mount+0x14ab/0x2200 [ 2458.445364] ? strncpy_from_user+0x9e/0x470 [ 2458.446264] ? finish_automount+0xa90/0xa90 [ 2458.447179] ? getname_flags.part.0+0x1dd/0x4f0 [ 2458.448164] __x64_sys_mount+0x282/0x300 [ 2458.449017] ? copy_mnt_ns+0xa00/0xa00 [ 2458.449837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2458.450938] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2458.452019] do_syscall_64+0x33/0x40 [ 2458.452802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.453875] RIP: 0033:0x7f575796fb19 [ 2458.454670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.458512] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2458.460107] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2458.461607] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2458.463119] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.464622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2458.466132] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:52:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x30000}, 0x0) 15:52:41 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x81, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ff9000/0x4000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:52:41 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 30) [ 2458.608609] FAULT_INJECTION: forcing a failure. [ 2458.608609] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.610001] CPU: 0 PID: 20538 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2458.610793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.611735] Call Trace: [ 2458.612040] dump_stack+0x107/0x167 [ 2458.612457] should_fail.cold+0x5/0xa [ 2458.612895] ? ext4_find_extent+0xa77/0xd70 [ 2458.613389] should_failslab+0x5/0x20 [ 2458.613820] __kmalloc+0x72/0x390 [ 2458.614227] ext4_find_extent+0xa77/0xd70 [ 2458.614715] ext4_ext_map_blocks+0x1c8/0x5880 [ 2458.615235] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2458.615833] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2458.616436] ? ext4_ext_release+0x10/0x10 [ 2458.616914] ? ext4_map_blocks+0x5cd/0x1910 [ 2458.617406] ? lock_release+0x680/0x680 [ 2458.617859] ? ext4_es_lookup_extent+0x485/0xa80 [ 2458.618396] ? lock_downgrade+0x6d0/0x6d0 [ 2458.618887] ? down_write+0xe0/0x160 [ 2458.619312] ? down_write_killable+0x180/0x180 [ 2458.619842] ext4_map_blocks+0x63f/0x1910 [ 2458.620317] ? kmem_cache_alloc+0x2a6/0x310 [ 2458.620810] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2458.621321] ? jbd2__journal_start+0xf3/0x7e0 [ 2458.621830] ? __ext4_journal_start_sb+0x214/0x390 [ 2458.622387] ? __ext4_journal_start_sb+0x1db/0x390 [ 2458.622954] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2458.623558] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2458.624106] ? down_write_killable+0x180/0x180 [ 2458.624632] ext4_fallocate+0x415/0x3850 [ 2458.625095] ? ioctl_preallocate+0x192/0x210 [ 2458.625607] ? lock_release+0x680/0x680 [ 2458.626067] ? ext4_ext_truncate+0x250/0x250 [ 2458.626579] ? selinux_file_permission+0x92/0x520 [ 2458.627134] ? ext4_ext_truncate+0x250/0x250 [ 2458.627635] vfs_fallocate+0x48f/0xda0 [ 2458.628080] ioctl_preallocate+0x192/0x210 [ 2458.628563] ? fiemap_prep+0x220/0x220 [ 2458.629005] ? find_held_lock+0x2c/0x110 [ 2458.629480] do_vfs_ioctl+0xe59/0x10d0 [ 2458.629922] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2458.630526] ? generic_block_fiemap+0x60/0x60 [ 2458.631035] ? lock_downgrade+0x6d0/0x6d0 [ 2458.631509] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2458.632058] ? wait_for_completion_io+0x270/0x270 [ 2458.632611] ? selinux_file_ioctl+0xb6/0x270 [ 2458.633123] __x64_sys_ioctl+0x10c/0x210 [ 2458.633587] do_syscall_64+0x33/0x40 [ 2458.634011] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.634602] RIP: 0033:0x7f1c84620b19 [ 2458.635030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.637116] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.637989] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2458.638814] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2458.639631] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.640439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2458.641253] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 15:52:41 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 4) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:52:41 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2458.778263] FAULT_INJECTION: forcing a failure. [ 2458.778263] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.779575] CPU: 0 PID: 20549 Comm: syz-executor.6 Not tainted 5.10.248 #1 [ 2458.780354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2458.781295] Call Trace: [ 2458.781603] dump_stack+0x107/0x167 [ 2458.782021] should_fail.cold+0x5/0xa [ 2458.782466] ? jbd2__journal_start+0x190/0x7e0 [ 2458.782983] should_failslab+0x5/0x20 [ 2458.783422] kmem_cache_alloc+0x5b/0x310 [ 2458.783885] jbd2__journal_start+0x190/0x7e0 [ 2458.784388] __ext4_journal_start_sb+0x214/0x390 [ 2458.784930] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2458.785526] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2458.786074] ? down_write_killable+0x180/0x180 [ 2458.786604] ext4_fallocate+0x415/0x3850 [ 2458.787063] ? ioctl_preallocate+0x192/0x210 [ 2458.787564] ? lock_release+0x680/0x680 [ 2458.788017] ? ext4_ext_truncate+0x250/0x250 [ 2458.788522] ? selinux_file_permission+0x92/0x520 [ 2458.789069] ? ext4_ext_truncate+0x250/0x250 [ 2458.789579] vfs_fallocate+0x48f/0xda0 [ 2458.790024] ioctl_preallocate+0x192/0x210 [ 2458.790511] ? fiemap_prep+0x220/0x220 [ 2458.790952] ? find_held_lock+0x2c/0x110 [ 2458.791423] do_vfs_ioctl+0xe59/0x10d0 [ 2458.791866] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2458.792462] ? generic_block_fiemap+0x60/0x60 [ 2458.792967] ? lock_downgrade+0x6d0/0x6d0 [ 2458.793437] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2458.793988] ? wait_for_completion_io+0x270/0x270 [ 2458.794548] ? selinux_file_ioctl+0xb6/0x270 [ 2458.795050] __x64_sys_ioctl+0x10c/0x210 [ 2458.795513] do_syscall_64+0x33/0x40 [ 2458.795935] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2458.796513] RIP: 0033:0x7f1bfeab1b19 [ 2458.796946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.799028] RSP: 002b:00007f1bfc027188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.799886] RAX: ffffffffffffffda RBX: 00007f1bfebc4f60 RCX: 00007f1bfeab1b19 [ 2458.800694] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2458.801500] RBP: 00007f1bfc0271d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.802319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2458.803137] R13: 00007ffde55570af R14: 00007f1bfc027300 R15: 0000000000022000 15:52:52 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 5) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:52:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x60000}, 0x0) 15:52:52 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 37) fallocate(r0, 0x0, 0x0, 0x8000) 15:52:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x28}, 0x200400c0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:52:52 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 3) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 2470.212721] FAULT_INJECTION: forcing a failure. [ 2470.212721] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.214049] CPU: 1 PID: 20564 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2470.214838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.215227] FAULT_INJECTION: forcing a failure. [ 2470.215227] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.215786] Call Trace: [ 2470.215805] dump_stack+0x107/0x167 [ 2470.215823] should_fail.cold+0x5/0xa [ 2470.218625] ? create_object.isra.0+0x3a/0xa30 [ 2470.219145] should_failslab+0x5/0x20 [ 2470.219584] kmem_cache_alloc+0x5b/0x310 [ 2470.220046] create_object.isra.0+0x3a/0xa30 [ 2470.220546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2470.221130] kmem_cache_alloc+0x159/0x310 [ 2470.221607] ext4_mb_new_blocks+0x698/0x45c0 [ 2470.222118] ? trace_hardirqs_on+0x5b/0x180 [ 2470.222622] ? ext4_cache_extents+0x148/0x2d0 [ 2470.223133] ? ext4_discard_preallocations+0xd80/0xd80 [ 2470.223733] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2470.224283] ext4_ext_map_blocks+0x1a55/0x5880 [ 2470.224815] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.225413] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.226018] ? ext4_ext_release+0x10/0x10 [ 2470.226494] ? ext4_map_blocks+0x5cd/0x1910 [ 2470.226997] ? lock_release+0x680/0x680 [ 2470.227452] ? ext4_es_lookup_extent+0x485/0xa80 [ 2470.227997] ? lock_downgrade+0x6d0/0x6d0 [ 2470.228486] ? down_write_killable+0x180/0x180 [ 2470.229014] ext4_map_blocks+0x63f/0x1910 [ 2470.229487] ? kmem_cache_alloc+0x2a6/0x310 [ 2470.229984] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2470.230495] ? jbd2__journal_start+0xf3/0x7e0 [ 2470.231021] ? __ext4_journal_start_sb+0x214/0x390 [ 2470.231579] ? __ext4_journal_start_sb+0x1db/0x390 [ 2470.232148] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2470.232748] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2470.233303] ? down_write_killable+0x180/0x180 [ 2470.233832] ext4_fallocate+0x415/0x3850 [ 2470.234299] ? ioctl_preallocate+0x192/0x210 [ 2470.234811] ? lock_release+0x680/0x680 [ 2470.235268] ? ext4_ext_truncate+0x250/0x250 [ 2470.235773] ? selinux_file_permission+0x92/0x520 [ 2470.236329] ? ext4_ext_truncate+0x250/0x250 [ 2470.236830] vfs_fallocate+0x48f/0xda0 [ 2470.237282] ioctl_preallocate+0x192/0x210 [ 2470.237761] ? fiemap_prep+0x220/0x220 [ 2470.238203] ? find_held_lock+0x2c/0x110 [ 2470.238684] do_vfs_ioctl+0xe59/0x10d0 [ 2470.239129] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2470.239728] ? generic_block_fiemap+0x60/0x60 [ 2470.240245] ? lock_downgrade+0x6d0/0x6d0 [ 2470.240716] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2470.241266] ? wait_for_completion_io+0x270/0x270 [ 2470.241820] ? selinux_file_ioctl+0xb6/0x270 [ 2470.242327] __x64_sys_ioctl+0x10c/0x210 [ 2470.242805] do_syscall_64+0x33/0x40 [ 2470.243236] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.243824] RIP: 0033:0x7f1c84620b19 [ 2470.244248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.246357] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.247238] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2470.248052] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2470.248864] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.249673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2470.250482] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2470.251336] CPU: 0 PID: 20565 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2470.252602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.253601] FAULT_INJECTION: forcing a failure. [ 2470.253601] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.254049] Call Trace: [ 2470.254079] dump_stack+0x107/0x167 [ 2470.254099] should_fail.cold+0x5/0xa [ 2470.257058] ? create_object.isra.0+0x3a/0xa30 [ 2470.257838] should_failslab+0x5/0x20 [ 2470.258501] kmem_cache_alloc+0x5b/0x310 [ 2470.259232] create_object.isra.0+0x3a/0xa30 [ 2470.259985] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2470.260866] kmem_cache_alloc+0x159/0x310 [ 2470.261574] jbd2__journal_start+0x190/0x7e0 [ 2470.262344] __ext4_journal_start_sb+0x214/0x390 [ 2470.263184] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2470.264092] ? file_remove_privs+0x182/0x520 [ 2470.264857] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2470.265687] ? down_write_killable+0x180/0x180 [ 2470.266453] ext4_fallocate+0x415/0x3850 [ 2470.267157] ? ioctl_preallocate+0x192/0x210 [ 2470.267927] ? lock_release+0x680/0x680 [ 2470.268618] ? ext4_ext_truncate+0x250/0x250 [ 2470.269371] ? selinux_file_permission+0x92/0x520 [ 2470.270221] ? ext4_ext_truncate+0x250/0x250 [ 2470.270995] vfs_fallocate+0x48f/0xda0 [ 2470.271690] ioctl_preallocate+0x192/0x210 [ 2470.272413] ? fiemap_prep+0x220/0x220 [ 2470.273091] ? find_held_lock+0x2c/0x110 [ 2470.273806] do_vfs_ioctl+0xe59/0x10d0 [ 2470.274474] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2470.275295] ? generic_block_fiemap+0x60/0x60 [ 2470.275971] ? lock_downgrade+0x6d0/0x6d0 [ 2470.276603] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2470.277338] ? wait_for_completion_io+0x270/0x270 [ 2470.278071] ? selinux_file_ioctl+0xb6/0x270 [ 2470.278757] __x64_sys_ioctl+0x10c/0x210 [ 2470.279371] do_syscall_64+0x33/0x40 [ 2470.279942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.280720] RIP: 0033:0x7f0b4e5c1b19 [ 2470.281284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.284066] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.285214] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2470.286300] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2470.287393] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.288464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2470.289539] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2470.290655] CPU: 1 PID: 20561 Comm: syz-executor.6 Not tainted 5.10.248 #1 [ 2470.291449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.292401] Call Trace: [ 2470.292700] dump_stack+0x107/0x167 [ 2470.293118] should_fail.cold+0x5/0xa [ 2470.293551] ? create_object.isra.0+0x3a/0xa30 [ 2470.294071] should_failslab+0x5/0x20 [ 2470.294517] kmem_cache_alloc+0x5b/0x310 [ 2470.295000] create_object.isra.0+0x3a/0xa30 [ 2470.295508] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2470.296084] kmem_cache_alloc+0x159/0x310 [ 2470.296557] jbd2__journal_start+0x190/0x7e0 [ 2470.297052] __ext4_journal_start_sb+0x214/0x390 [ 2470.297602] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2470.298194] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2470.298751] ? down_write_killable+0x180/0x180 [ 2470.299269] ext4_fallocate+0x415/0x3850 [ 2470.299721] ? ioctl_preallocate+0x192/0x210 [ 2470.300215] ? lock_release+0x680/0x680 [ 2470.300663] ? ext4_ext_truncate+0x250/0x250 [ 2470.301153] ? selinux_file_permission+0x92/0x520 [ 2470.301709] ? ext4_ext_truncate+0x250/0x250 [ 2470.302199] vfs_fallocate+0x48f/0xda0 [ 2470.302657] ioctl_preallocate+0x192/0x210 [ 2470.303136] ? fiemap_prep+0x220/0x220 [ 2470.303574] ? find_held_lock+0x2c/0x110 [ 2470.304044] do_vfs_ioctl+0xe59/0x10d0 [ 2470.304484] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2470.305080] ? generic_block_fiemap+0x60/0x60 [ 2470.305588] ? lock_downgrade+0x6d0/0x6d0 [ 2470.306056] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2470.306611] ? wait_for_completion_io+0x270/0x270 [ 2470.307164] ? selinux_file_ioctl+0xb6/0x270 [ 2470.307666] __x64_sys_ioctl+0x10c/0x210 15:52:52 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:52:52 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 31) 15:52:53 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x1}) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) [ 2470.308127] do_syscall_64+0x33/0x40 [ 2470.308791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.309379] RIP: 0033:0x7f1bfeab1b19 [ 2470.309802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.311895] RSP: 002b:00007f1bfc027188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.312759] RAX: ffffffffffffffda RBX: 00007f1bfebc4f60 RCX: 00007f1bfeab1b19 [ 2470.313565] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2470.314375] RBP: 00007f1bfc0271d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.315190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2470.315998] R13: 00007ffde55570af R14: 00007f1bfc027300 R15: 0000000000022000 [ 2470.330121] FAULT_INJECTION: forcing a failure. [ 2470.330121] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.331894] CPU: 0 PID: 20568 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2470.332966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.334287] Call Trace: [ 2470.334721] dump_stack+0x107/0x167 [ 2470.335301] should_fail.cold+0x5/0xa [ 2470.335899] ? create_object.isra.0+0x3a/0xa30 [ 2470.336626] should_failslab+0x5/0x20 [ 2470.337223] kmem_cache_alloc+0x5b/0x310 [ 2470.337871] ? mark_held_locks+0x9e/0xe0 [ 2470.338512] create_object.isra.0+0x3a/0xa30 [ 2470.339207] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2470.340021] kmem_cache_alloc_trace+0x151/0x320 [ 2470.340772] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2470.341554] __list_lru_init+0x44d/0x890 [ 2470.342209] alloc_super+0x8b8/0xa90 [ 2470.342803] sget_fc+0x110/0x860 [ 2470.343356] ? set_anon_super+0xc0/0xc0 [ 2470.343997] ? pseudo_fs_get_tree+0x20/0x20 [ 2470.344691] get_tree_nodev+0x24/0x1d0 [ 2470.345300] vfs_get_tree+0x8e/0x300 [ 2470.345894] path_mount+0x14ab/0x2200 [ 2470.346509] ? strncpy_from_user+0x9e/0x470 [ 2470.347201] ? finish_automount+0xa90/0xa90 [ 2470.347881] ? getname_flags.part.0+0x1dd/0x4f0 [ 2470.348629] __x64_sys_mount+0x282/0x300 [ 2470.349273] ? copy_mnt_ns+0xa00/0xa00 [ 2470.349892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2470.350719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2470.351545] do_syscall_64+0x33/0x40 [ 2470.352144] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.352961] RIP: 0033:0x7f575796fb19 [ 2470.353548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.356436] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2470.357628] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2470.358774] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2470.359896] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.361020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2470.362142] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:52:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x80000}, 0x0) 15:52:53 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 6) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2470.466075] FAULT_INJECTION: forcing a failure. [ 2470.466075] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.467488] CPU: 1 PID: 20579 Comm: syz-executor.6 Not tainted 5.10.248 #1 [ 2470.468282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.469233] Call Trace: [ 2470.469544] dump_stack+0x107/0x167 [ 2470.469968] should_fail.cold+0x5/0xa [ 2470.470405] ? ext4_find_extent+0xa77/0xd70 [ 2470.470920] should_failslab+0x5/0x20 [ 2470.471362] __kmalloc+0x72/0x390 [ 2470.471763] ? is_dynamic_key+0x1e0/0x1e0 [ 2470.472245] ext4_find_extent+0xa77/0xd70 [ 2470.472726] ? __lock_acquire+0x1657/0x5b00 [ 2470.473231] ext4_ext_map_blocks+0x1c8/0x5880 [ 2470.473750] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.474363] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.474979] ? ext4_ext_release+0x10/0x10 [ 2470.475463] ? lock_release+0x680/0x680 [ 2470.475921] ? ext4_es_lookup_extent+0x485/0xa80 [ 2470.476469] ? lock_downgrade+0x6d0/0x6d0 [ 2470.476954] ? down_read+0x10f/0x430 [ 2470.477383] ? down_write+0x160/0x160 [ 2470.477828] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2470.478370] ext4_map_blocks+0x8e1/0x1910 [ 2470.478857] ? kmem_cache_alloc+0x2a6/0x310 [ 2470.479357] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2470.479886] ? jbd2__journal_start+0xf3/0x7e0 [ 2470.480407] ? __ext4_journal_start_sb+0x214/0x390 [ 2470.480975] ? __ext4_journal_start_sb+0x1db/0x390 [ 2470.481544] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2470.482155] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2470.482725] ? down_write_killable+0x180/0x180 [ 2470.483257] ext4_fallocate+0x415/0x3850 [ 2470.483737] ? ioctl_preallocate+0x192/0x210 [ 2470.484243] ? lock_release+0x680/0x680 [ 2470.484706] ? ext4_ext_truncate+0x250/0x250 [ 2470.485217] ? selinux_file_permission+0x92/0x520 [ 2470.485774] ? ext4_ext_truncate+0x250/0x250 [ 2470.486284] vfs_fallocate+0x48f/0xda0 [ 2470.486744] ioctl_preallocate+0x192/0x210 [ 2470.487232] ? fiemap_prep+0x220/0x220 [ 2470.487679] ? find_held_lock+0x2c/0x110 [ 2470.488156] do_vfs_ioctl+0xe59/0x10d0 [ 2470.488607] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2470.489213] ? generic_block_fiemap+0x60/0x60 [ 2470.489734] ? lock_downgrade+0x6d0/0x6d0 [ 2470.490212] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2470.490779] ? wait_for_completion_io+0x270/0x270 [ 2470.491343] ? selinux_file_ioctl+0xb6/0x270 [ 2470.491861] __x64_sys_ioctl+0x10c/0x210 [ 2470.492337] do_syscall_64+0x33/0x40 [ 2470.492768] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.493359] RIP: 0033:0x7f1bfeab1b19 [ 2470.493785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.495919] RSP: 002b:00007f1bfc027188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.496796] RAX: ffffffffffffffda RBX: 00007f1bfebc4f60 RCX: 00007f1bfeab1b19 [ 2470.497619] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2470.498439] RBP: 00007f1bfc0271d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.499266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2470.500094] R13: 00007ffde55570af R14: 00007f1bfc027300 R15: 0000000000022000 15:52:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 38) fallocate(r0, 0x0, 0x0, 0x8000) 15:52:53 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 4) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:52:53 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 32) 15:52:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x1000000}, 0x0) 15:52:53 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0x7, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x450, 0x1da, 0x0, 0x5, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 2470.528463] FAULT_INJECTION: forcing a failure. [ 2470.528463] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.529788] CPU: 1 PID: 20585 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2470.530566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.531503] Call Trace: [ 2470.531811] dump_stack+0x107/0x167 [ 2470.532224] should_fail.cold+0x5/0xa [ 2470.532656] ? ext4_find_extent+0xa77/0xd70 [ 2470.533141] should_failslab+0x5/0x20 [ 2470.533582] __kmalloc+0x72/0x390 [ 2470.533976] ? is_dynamic_key+0x1e0/0x1e0 [ 2470.534459] ext4_find_extent+0xa77/0xd70 [ 2470.534943] ? __lock_acquire+0x1657/0x5b00 [ 2470.535442] ext4_ext_map_blocks+0x1c8/0x5880 [ 2470.535966] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.536572] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.537181] ? ext4_ext_release+0x10/0x10 [ 2470.537665] ? lock_release+0x680/0x680 [ 2470.538123] ? ext4_es_lookup_extent+0x485/0xa80 [ 2470.538679] ? lock_downgrade+0x6d0/0x6d0 [ 2470.539159] ? down_read+0x10f/0x430 [ 2470.539588] ? down_write+0x160/0x160 [ 2470.540018] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2470.540557] ext4_map_blocks+0x8e1/0x1910 [ 2470.541040] ? kmem_cache_alloc+0x2a6/0x310 [ 2470.541536] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2470.542050] ? jbd2__journal_start+0xf3/0x7e0 [ 2470.542581] ? __ext4_journal_start_sb+0x214/0x390 [ 2470.543144] ? __ext4_journal_start_sb+0x1db/0x390 [ 2470.543717] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2470.544323] ? file_remove_privs+0x182/0x520 [ 2470.544836] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2470.545394] ? down_write_killable+0x180/0x180 [ 2470.545931] ext4_fallocate+0x415/0x3850 [ 2470.546403] ? ioctl_preallocate+0x192/0x210 [ 2470.546920] ? lock_release+0x680/0x680 [ 2470.547384] ? ext4_ext_truncate+0x250/0x250 [ 2470.547889] ? selinux_file_permission+0x92/0x520 [ 2470.548448] ? ext4_ext_truncate+0x250/0x250 [ 2470.548960] vfs_fallocate+0x48f/0xda0 [ 2470.549410] ioctl_preallocate+0x192/0x210 [ 2470.549899] ? fiemap_prep+0x220/0x220 [ 2470.550346] ? find_held_lock+0x2c/0x110 [ 2470.550832] do_vfs_ioctl+0xe59/0x10d0 [ 2470.551282] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2470.551892] ? generic_block_fiemap+0x60/0x60 [ 2470.552408] ? lock_downgrade+0x6d0/0x6d0 [ 2470.552886] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2470.553441] ? wait_for_completion_io+0x270/0x270 [ 2470.554007] ? selinux_file_ioctl+0xb6/0x270 [ 2470.554518] __x64_sys_ioctl+0x10c/0x210 [ 2470.554997] do_syscall_64+0x33/0x40 [ 2470.555426] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.556015] RIP: 0033:0x7f0b4e5c1b19 [ 2470.556441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.558577] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.559450] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2470.560269] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2470.561090] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.561923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2470.562754] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2470.577406] FAULT_INJECTION: forcing a failure. [ 2470.577406] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.579280] CPU: 0 PID: 20591 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2470.580327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.581555] Call Trace: [ 2470.581969] dump_stack+0x107/0x167 [ 2470.582519] should_fail.cold+0x5/0xa [ 2470.583096] ? create_object.isra.0+0x3a/0xa30 [ 2470.583790] should_failslab+0x5/0x20 [ 2470.584361] kmem_cache_alloc+0x5b/0x310 [ 2470.584971] ? mark_held_locks+0x9e/0xe0 [ 2470.585574] create_object.isra.0+0x3a/0xa30 [ 2470.586239] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2470.586997] kmem_cache_alloc_trace+0x151/0x320 [ 2470.587699] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2470.588424] __list_lru_init+0x44d/0x890 [ 2470.589031] alloc_super+0x8b8/0xa90 [ 2470.589613] sget_fc+0x110/0x860 [ 2470.590136] ? set_anon_super+0xc0/0xc0 [ 2470.590742] ? pseudo_fs_get_tree+0x20/0x20 [ 2470.591389] get_tree_nodev+0x24/0x1d0 [ 2470.591963] vfs_get_tree+0x8e/0x300 [ 2470.592514] path_mount+0x14ab/0x2200 [ 2470.593094] ? strncpy_from_user+0x9e/0x470 [ 2470.593744] ? finish_automount+0xa90/0xa90 [ 2470.594383] ? getname_flags.part.0+0x1dd/0x4f0 [ 2470.595084] __x64_sys_mount+0x282/0x300 [ 2470.595714] ? copy_mnt_ns+0xa00/0xa00 [ 2470.596291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2470.597093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2470.597874] do_syscall_64+0x33/0x40 [ 2470.598437] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.599218] RIP: 0033:0x7f575796fb19 [ 2470.599778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.602507] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2470.603647] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2470.604700] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2470.605751] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.606799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2470.607837] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2470.618119] FAULT_INJECTION: forcing a failure. [ 2470.618119] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.619871] CPU: 0 PID: 20592 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2470.620881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.622102] Call Trace: [ 2470.622490] dump_stack+0x107/0x167 [ 2470.623046] should_fail.cold+0x5/0xa [ 2470.623604] ? ext4_mb_new_blocks+0x698/0x45c0 [ 2470.624289] should_failslab+0x5/0x20 [ 2470.624852] kmem_cache_alloc+0x5b/0x310 [ 2470.625449] ext4_mb_new_blocks+0x698/0x45c0 [ 2470.626119] ? trace_hardirqs_on+0x5b/0x180 [ 2470.626760] ? ext4_cache_extents+0x148/0x2d0 [ 2470.627414] ? ext4_discard_preallocations+0xd80/0xd80 [ 2470.628180] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2470.628884] ext4_ext_map_blocks+0x1a55/0x5880 [ 2470.629560] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.630330] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.631119] ? ext4_ext_release+0x10/0x10 [ 2470.631729] ? ext4_map_blocks+0x5cd/0x1910 [ 2470.632366] ? lock_release+0x680/0x680 [ 2470.632947] ? ext4_es_lookup_extent+0x485/0xa80 [ 2470.633639] ? lock_downgrade+0x6d0/0x6d0 [ 2470.634278] ? down_write_killable+0x180/0x180 [ 2470.634968] ext4_map_blocks+0x63f/0x1910 [ 2470.635572] ? kmem_cache_alloc+0x2a6/0x310 [ 2470.636203] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2470.636853] ? jbd2__journal_start+0xf3/0x7e0 [ 2470.637505] ? __ext4_journal_start_sb+0x214/0x390 [ 2470.638213] ? __ext4_journal_start_sb+0x1db/0x390 [ 2470.638935] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2470.639700] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2470.640399] ? down_write_killable+0x180/0x180 15:52:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x44}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x810) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x1}, 0x14}}, 0x0) 15:52:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x2000000}, 0x0) [ 2470.641067] ext4_fallocate+0x415/0x3850 [ 2470.641868] ? ioctl_preallocate+0x192/0x210 [ 2470.642514] ? lock_release+0x680/0x680 [ 2470.643104] ? ext4_ext_truncate+0x250/0x250 [ 2470.643748] ? selinux_file_permission+0x92/0x520 [ 2470.644449] ? ext4_ext_truncate+0x250/0x250 [ 2470.645092] vfs_fallocate+0x48f/0xda0 [ 2470.645680] ioctl_preallocate+0x192/0x210 [ 2470.646300] ? fiemap_prep+0x220/0x220 [ 2470.646875] ? find_held_lock+0x2c/0x110 [ 2470.647475] do_vfs_ioctl+0xe59/0x10d0 [ 2470.648037] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2470.648791] ? generic_block_fiemap+0x60/0x60 [ 2470.649439] ? lock_downgrade+0x6d0/0x6d0 [ 2470.650034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2470.650735] ? wait_for_completion_io+0x270/0x270 [ 2470.651438] ? selinux_file_ioctl+0xb6/0x270 [ 2470.652080] __x64_sys_ioctl+0x10c/0x210 [ 2470.652671] do_syscall_64+0x33/0x40 [ 2470.653215] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.653965] RIP: 0033:0x7f1c84620b19 [ 2470.654504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.657164] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.658277] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2470.659314] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2470.660339] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.661366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2470.662392] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 15:52:53 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 33) 15:52:53 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 7) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2470.782520] FAULT_INJECTION: forcing a failure. [ 2470.782520] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.784341] CPU: 0 PID: 20607 Comm: syz-executor.3 Not tainted 5.10.248 #1 [ 2470.785432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.786580] Call Trace: [ 2470.786956] dump_stack+0x107/0x167 [ 2470.787455] should_fail.cold+0x5/0xa [ 2470.787979] ? create_object.isra.0+0x3a/0xa30 [ 2470.788602] should_failslab+0x5/0x20 [ 2470.789126] kmem_cache_alloc+0x5b/0x310 [ 2470.789686] create_object.isra.0+0x3a/0xa30 [ 2470.790294] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 15:52:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x3000000}, 0x0) [ 2470.791001] kmem_cache_alloc+0x159/0x310 [ 2470.791659] ext4_mb_new_blocks+0x698/0x45c0 [ 2470.792275] ? trace_hardirqs_on+0x5b/0x180 [ 2470.792870] ? ext4_cache_extents+0x148/0x2d0 [ 2470.793482] ? ext4_discard_preallocations+0xd80/0xd80 [ 2470.794201] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2470.794876] ext4_ext_map_blocks+0x1a55/0x5880 [ 2470.795512] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.796230] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.796952] ? ext4_ext_release+0x10/0x10 [ 2470.797533] ? ext4_map_blocks+0x5cd/0x1910 [ 2470.798128] ? lock_release+0x680/0x680 [ 2470.798687] ? ext4_es_lookup_extent+0x485/0xa80 [ 2470.799337] ? lock_downgrade+0x6d0/0x6d0 [ 2470.799914] ? down_write_killable+0x180/0x180 [ 2470.800548] ext4_map_blocks+0x63f/0x1910 [ 2470.801123] ? kmem_cache_alloc+0x2a6/0x310 [ 2470.801715] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2470.802326] ? jbd2__journal_start+0xf3/0x7e0 [ 2470.802952] ? __ext4_journal_start_sb+0x214/0x390 [ 2470.803626] ? __ext4_journal_start_sb+0x1db/0x390 [ 2470.804299] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2470.805023] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2470.805678] ? down_write_killable+0x180/0x180 [ 2470.806313] ext4_fallocate+0x415/0x3850 [ 2470.806872] ? ioctl_preallocate+0x192/0x210 [ 2470.807482] ? lock_release+0x680/0x680 [ 2470.808033] ? ext4_ext_truncate+0x250/0x250 [ 2470.808631] ? selinux_file_permission+0x92/0x520 [ 2470.809295] ? ext4_ext_truncate+0x250/0x250 [ 2470.809907] vfs_fallocate+0x48f/0xda0 [ 2470.810452] ioctl_preallocate+0x192/0x210 [ 2470.811033] ? fiemap_prep+0x220/0x220 [ 2470.811562] ? find_held_lock+0x2c/0x110 [ 2470.812129] do_vfs_ioctl+0xe59/0x10d0 [ 2470.812671] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2470.813391] ? generic_block_fiemap+0x60/0x60 [ 2470.814013] ? lock_downgrade+0x6d0/0x6d0 [ 2470.814589] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2470.815246] ? wait_for_completion_io+0x270/0x270 [ 2470.815919] ? selinux_file_ioctl+0xb6/0x270 [ 2470.816535] __x64_sys_ioctl+0x10c/0x210 [ 2470.817099] do_syscall_64+0x33/0x40 [ 2470.817605] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.818300] RIP: 0033:0x7f1c84620b19 [ 2470.818821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.821309] RSP: 002b:00007f1c81b96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.822330] RAX: ffffffffffffffda RBX: 00007f1c84733f60 RCX: 00007f1c84620b19 [ 2470.823317] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2470.824287] RBP: 00007f1c81b961d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.825245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2470.826199] R13: 00007ffe2108818f R14: 00007f1c81b96300 R15: 0000000000022000 [ 2470.841664] FAULT_INJECTION: forcing a failure. [ 2470.841664] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.843357] CPU: 0 PID: 20612 Comm: syz-executor.6 Not tainted 5.10.248 #1 [ 2470.844394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2470.845511] Call Trace: [ 2470.845879] dump_stack+0x107/0x167 [ 2470.846364] should_fail.cold+0x5/0xa [ 2470.846890] ? create_object.isra.0+0x3a/0xa30 [ 2470.847507] should_failslab+0x5/0x20 [ 2470.848018] kmem_cache_alloc+0x5b/0x310 [ 2470.848567] create_object.isra.0+0x3a/0xa30 [ 2470.849176] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2470.849859] __kmalloc+0x16e/0x390 [ 2470.850345] ext4_find_extent+0xa77/0xd70 [ 2470.850913] ? __lock_acquire+0x1657/0x5b00 [ 2470.851506] ext4_ext_map_blocks+0x1c8/0x5880 [ 2470.852113] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.852822] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2470.853528] ? ext4_ext_release+0x10/0x10 [ 2470.854083] ? lock_release+0x680/0x680 [ 2470.854626] ? ext4_es_lookup_extent+0x485/0xa80 [ 2470.855252] ? lock_downgrade+0x6d0/0x6d0 [ 2470.855814] ? down_read+0x10f/0x430 [ 2470.856314] ? down_write+0x160/0x160 [ 2470.856822] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2470.857449] ext4_map_blocks+0x8e1/0x1910 [ 2470.858007] ? kmem_cache_alloc+0x2a6/0x310 [ 2470.858589] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2470.859179] ? jbd2__journal_start+0xf3/0x7e0 [ 2470.859769] ? __ext4_journal_start_sb+0x214/0x390 [ 2470.860418] ? __ext4_journal_start_sb+0x1db/0x390 [ 2470.861087] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2470.861793] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2470.862432] ? down_write_killable+0x180/0x180 [ 2470.863055] ext4_fallocate+0x415/0x3850 [ 2470.863596] ? ioctl_preallocate+0x192/0x210 [ 2470.864178] ? lock_release+0x680/0x680 [ 2470.864708] ? ext4_ext_truncate+0x250/0x250 [ 2470.865294] ? selinux_file_permission+0x92/0x520 [ 2470.865933] ? ext4_ext_truncate+0x250/0x250 [ 2470.866520] vfs_fallocate+0x48f/0xda0 [ 2470.867051] ioctl_preallocate+0x192/0x210 [ 2470.867611] ? fiemap_prep+0x220/0x220 [ 2470.868124] ? find_held_lock+0x2c/0x110 [ 2470.868671] do_vfs_ioctl+0xe59/0x10d0 [ 2470.869192] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2470.869888] ? generic_block_fiemap+0x60/0x60 [ 2470.870482] ? lock_downgrade+0x6d0/0x6d0 [ 2470.871034] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2470.871670] ? wait_for_completion_io+0x270/0x270 [ 2470.872305] ? selinux_file_ioctl+0xb6/0x270 [ 2470.872891] __x64_sys_ioctl+0x10c/0x210 [ 2470.873424] do_syscall_64+0x33/0x40 [ 2470.873916] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2470.874611] RIP: 0033:0x7f1bfeab1b19 [ 2470.875112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.877540] RSP: 002b:00007f1bfc027188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.878540] RAX: ffffffffffffffda RBX: 00007f1bfebc4f60 RCX: 00007f1bfeab1b19 [ 2470.879481] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2470.880435] RBP: 00007f1bfc0271d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.881389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2470.882330] R13: 00007ffde55570af R14: 00007f1bfc027300 R15: 0000000000022000 15:52:53 executing program 7: perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="011800"/12, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./fmle1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:53:06 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 5) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:53:06 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 8) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:53:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 34) 15:53:06 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 39) fallocate(r0, 0x0, 0x0, 0x8000) 15:53:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4673770", @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10010}, 0x16f86d09dfd3c913) 15:53:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x9000000}, 0x0) 15:53:06 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) r4 = shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:53:06 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:06 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2484.122178] FAULT_INJECTION: forcing a failure. [ 2484.122178] name failslab, interval 1, probability 0, space 0, times 0 [ 2484.123608] CPU: 1 PID: 20631 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2484.124393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2484.125392] Call Trace: [ 2484.125720] dump_stack+0x107/0x167 [ 2484.126160] should_fail.cold+0x5/0xa [ 2484.126624] ? create_object.isra.0+0x3a/0xa30 [ 2484.127186] should_failslab+0x5/0x20 [ 2484.127645] kmem_cache_alloc+0x5b/0x310 [ 2484.128137] create_object.isra.0+0x3a/0xa30 [ 2484.128671] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2484.129284] kmem_cache_alloc+0x159/0x310 [ 2484.129786] jbd2__journal_start+0x190/0x7e0 [ 2484.130318] __ext4_journal_start_sb+0x214/0x390 [ 2484.130903] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2484.131542] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2484.132124] ? down_write_killable+0x180/0x180 [ 2484.132678] ext4_fallocate+0x415/0x3850 [ 2484.133166] ? ioctl_preallocate+0x192/0x210 [ 2484.133698] ? lock_release+0x680/0x680 [ 2484.134188] ? ext4_ext_truncate+0x250/0x250 [ 2484.134731] ? selinux_file_permission+0x92/0x520 [ 2484.135314] ? ext4_ext_truncate+0x250/0x250 [ 2484.135845] vfs_fallocate+0x48f/0xda0 [ 2484.136320] ioctl_preallocate+0x192/0x210 [ 2484.136832] ? fiemap_prep+0x220/0x220 [ 2484.137301] ? find_held_lock+0x2c/0x110 [ 2484.137799] do_vfs_ioctl+0xe59/0x10d0 [ 2484.138266] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2484.138909] ? generic_block_fiemap+0x60/0x60 [ 2484.139445] ? lock_downgrade+0x6d0/0x6d0 [ 2484.139941] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2484.140521] ? wait_for_completion_io+0x270/0x270 [ 2484.141103] ? selinux_file_ioctl+0xb6/0x270 [ 2484.141637] __x64_sys_ioctl+0x10c/0x210 [ 2484.142125] do_syscall_64+0x33/0x40 [ 2484.142567] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2484.143189] RIP: 0033:0x7f0b4e5c1b19 [ 2484.143633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2484.145837] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2484.146757] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2484.147609] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2484.148461] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2484.149309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2484.150165] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2484.151920] FAULT_INJECTION: forcing a failure. [ 2484.151920] name failslab, interval 1, probability 0, space 0, times 0 [ 2484.153285] CPU: 1 PID: 20637 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2484.154112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2484.155113] Call Trace: [ 2484.155148] FAULT_INJECTION: forcing a failure. [ 2484.155148] name failslab, interval 1, probability 0, space 0, times 0 [ 2484.155428] dump_stack+0x107/0x167 [ 2484.155448] should_fail.cold+0x5/0xa [ 2484.158544] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2484.159149] should_failslab+0x5/0x20 [ 2484.159597] kmem_cache_alloc_trace+0x55/0x320 [ 2484.160137] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2484.160739] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2484.161320] __list_lru_init+0x44d/0x890 [ 2484.161806] alloc_super+0x8b8/0xa90 [ 2484.162251] sget_fc+0x110/0x860 [ 2484.162652] ? set_anon_super+0xc0/0xc0 [ 2484.163136] ? pseudo_fs_get_tree+0x20/0x20 [ 2484.163652] get_tree_nodev+0x24/0x1d0 [ 2484.164117] vfs_get_tree+0x8e/0x300 [ 2484.164533] path_mount+0x14ab/0x2200 [ 2484.164987] ? strncpy_from_user+0x9e/0x470 [ 2484.165471] ? finish_automount+0xa90/0xa90 [ 2484.165985] ? getname_flags.part.0+0x1dd/0x4f0 [ 2484.166547] __x64_sys_mount+0x282/0x300 [ 2484.167057] ? copy_mnt_ns+0xa00/0xa00 [ 2484.167521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2484.168140] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2484.168750] do_syscall_64+0x33/0x40 [ 2484.169187] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2484.169795] RIP: 0033:0x7f575796fb19 [ 2484.170229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2484.172433] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2484.173338] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2484.174183] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2484.175038] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2484.175877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2484.176714] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2484.177577] CPU: 0 PID: 20638 Comm: syz-executor.6 Not tainted 5.10.248 #1 [ 2484.178995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2484.180654] Call Trace: [ 2484.181186] dump_stack+0x107/0x167 [ 2484.181918] should_fail.cold+0x5/0xa [ 2484.182684] ? ext4_find_extent+0xa77/0xd70 [ 2484.183559] should_failslab+0x5/0x20 [ 2484.184323] __kmalloc+0x72/0x390 [ 2484.185022] ext4_find_extent+0xa77/0xd70 [ 2484.185859] ext4_ext_map_blocks+0x1c8/0x5880 [ 2484.186785] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2484.187833] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2484.188893] ? ext4_ext_release+0x10/0x10 [ 2484.189731] ? ext4_map_blocks+0x5cd/0x1910 [ 2484.190602] ? lock_release+0x680/0x680 [ 2484.191412] ? ext4_es_lookup_extent+0x485/0xa80 [ 2484.192370] ? find_held_lock+0x2c/0x110 15:53:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2484.193294] ? down_write+0xe0/0x160 [ 2484.194053] ? down_write_killable+0x180/0x180 [ 2484.194988] ext4_map_blocks+0x63f/0x1910 [ 2484.195835] ? kmem_cache_alloc+0x2a6/0x310 [ 2484.196706] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2484.197604] ? jbd2__journal_start+0xf3/0x7e0 [ 2484.198502] ? __ext4_journal_start_sb+0x214/0x390 [ 2484.199497] ? __ext4_journal_start_sb+0x1db/0x390 [ 2484.200481] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2484.201528] ? file_remove_privs+0x182/0x520 [ 2484.202411] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2484.203379] ? down_write_killable+0x180/0x180 [ 2484.204293] ext4_fallocate+0x415/0x3850 [ 2484.205102] ? ioctl_preallocate+0x192/0x210 [ 2484.205981] ? lock_release+0x680/0x680 [ 2484.206788] ? ext4_ext_truncate+0x250/0x250 [ 2484.207661] ? selinux_file_permission+0x92/0x520 [ 2484.208625] ? ext4_ext_truncate+0x250/0x250 [ 2484.209511] vfs_fallocate+0x48f/0xda0 [ 2484.210288] ioctl_preallocate+0x192/0x210 [ 2484.211131] ? fiemap_prep+0x220/0x220 [ 2484.211906] ? find_held_lock+0x2c/0x110 [ 2484.212734] do_vfs_ioctl+0xe59/0x10d0 [ 2484.213505] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2484.214550] ? generic_block_fiemap+0x60/0x60 [ 2484.215457] ? lock_downgrade+0x6d0/0x6d0 [ 2484.216282] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2484.217243] ? wait_for_completion_io+0x270/0x270 [ 2484.218215] ? selinux_file_ioctl+0xb6/0x270 [ 2484.219112] __x64_sys_ioctl+0x10c/0x210 [ 2484.219922] do_syscall_64+0x33/0x40 [ 2484.220661] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2484.221677] RIP: 0033:0x7f1bfeab1b19 [ 2484.222415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2484.226082] RSP: 002b:00007f1bfc027188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2484.227604] RAX: ffffffffffffffda RBX: 00007f1bfebc4f60 RCX: 00007f1bfeab1b19 [ 2484.229017] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2484.230430] RBP: 00007f1bfc0271d0 R08: 0000000000000000 R09: 0000000000000000 [ 2484.231858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2484.233271] R13: 00007ffde55570af R14: 00007f1bfc027300 R15: 0000000000022000 15:53:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0xf000000}, 0x0) [ 2493.802698] Bluetooth: hci5: command 0x0406 tx timeout 15:53:20 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x403058c8, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:20 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xc, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:53:20 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 6) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:53:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0xffffff7f}, 0x0) 15:53:20 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b1922746", @ANYRES16=r7, @ANYBLOB="01a057d4000000000000000000024fe2032f7be6850d8d7de24600d0de3cbd76e052c55c0e1951bbe72b8f5671a40def6f62c31fe7680d92eaa50d770c5c7349c75608030ed1aa2cbb7c2fc58c6a1cdba25386f29ee64e830b6a072b7ca4e6ea1699ab2feca2eda26546fff6cfbd75650f31d26de419796c7bb1c37bd35c354363513a93dfb4f78f93903a9af2d9a6f1c5ee857c07ccdeb2165b221927b0f628265f963be8a634bd592cbeefea82e8cc7231b038d2fc757c0a39b198a1c13225b66b001a4ed46bda"], 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x1}, 0x14}}, 0x0) 15:53:20 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 9) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:53:20 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 40) fallocate(r0, 0x0, 0x0, 0x8000) [ 2497.915245] FAULT_INJECTION: forcing a failure. [ 2497.915245] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.917664] CPU: 1 PID: 20668 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2497.919138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.920884] Call Trace: [ 2497.921448] dump_stack+0x107/0x167 [ 2497.922216] should_fail.cold+0x5/0xa [ 2497.923034] ? ext4_find_extent+0xa77/0xd70 [ 2497.923940] should_failslab+0x5/0x20 [ 2497.924739] __kmalloc+0x72/0x390 [ 2497.925478] ? is_dynamic_key+0x1e0/0x1e0 [ 2497.926350] ext4_find_extent+0xa77/0xd70 [ 2497.927245] ? __lock_acquire+0x1657/0x5b00 [ 2497.928163] ext4_ext_map_blocks+0x1c8/0x5880 [ 2497.929131] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2497.930248] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2497.931391] ? ext4_ext_release+0x10/0x10 [ 2497.932279] ? lock_release+0x680/0x680 [ 2497.933126] ? ext4_es_lookup_extent+0x485/0xa80 [ 2497.934129] ? lock_downgrade+0x6d0/0x6d0 [ 2497.935039] ? down_read+0x10f/0x430 [ 2497.935826] ? down_write+0x160/0x160 [ 2497.936637] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2497.937641] ext4_map_blocks+0x8e1/0x1910 [ 2497.938525] ? kmem_cache_alloc+0x2a6/0x310 [ 2497.939451] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2497.940405] ? jbd2__journal_start+0xf3/0x7e0 [ 2497.941363] ? __ext4_journal_start_sb+0x214/0x390 [ 2497.942398] ? __ext4_journal_start_sb+0x1db/0x390 [ 2497.943452] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2497.944572] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2497.945603] ? down_write_killable+0x180/0x180 [ 2497.946588] ext4_fallocate+0x415/0x3850 [ 2497.947481] ? ioctl_preallocate+0x192/0x210 [ 2497.948416] ? lock_release+0x680/0x680 [ 2497.948565] FAULT_INJECTION: forcing a failure. [ 2497.948565] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.949265] ? ext4_ext_truncate+0x250/0x250 [ 2497.951875] ? selinux_file_permission+0x92/0x520 [ 2497.952901] ? ext4_ext_truncate+0x250/0x250 [ 2497.953834] vfs_fallocate+0x48f/0xda0 [ 2497.954678] ioctl_preallocate+0x192/0x210 [ 2497.955585] ? fiemap_prep+0x220/0x220 [ 2497.956411] ? find_held_lock+0x2c/0x110 [ 2497.957290] do_vfs_ioctl+0xe59/0x10d0 [ 2497.958115] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2497.959233] ? generic_block_fiemap+0x60/0x60 [ 2497.960186] ? lock_downgrade+0x6d0/0x6d0 [ 2497.961062] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2497.962086] ? wait_for_completion_io+0x270/0x270 [ 2497.963134] ? selinux_file_ioctl+0xb6/0x270 [ 2497.964080] __x64_sys_ioctl+0x10c/0x210 [ 2497.964945] do_syscall_64+0x33/0x40 [ 2497.965733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.966819] RIP: 0033:0x7f0b4e5c1b19 [ 2497.967616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2497.971478] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2497.973074] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2497.974566] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2497.976070] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2497.977559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2497.979060] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2497.980582] CPU: 0 PID: 20673 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2497.981584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2497.982772] Call Trace: [ 2497.983174] dump_stack+0x107/0x167 [ 2497.983694] should_fail.cold+0x5/0xa [ 2497.984241] ? create_object.isra.0+0x3a/0xa30 [ 2497.984889] should_failslab+0x5/0x20 [ 2497.985435] kmem_cache_alloc+0x5b/0x310 [ 2497.986011] ? mark_held_locks+0x9e/0xe0 [ 2497.986592] create_object.isra.0+0x3a/0xa30 [ 2497.987240] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2497.987977] kmem_cache_alloc_trace+0x151/0x320 [ 2497.988652] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2497.989346] __list_lru_init+0x44d/0x890 [ 2497.989957] alloc_super+0x8b8/0xa90 [ 2497.990487] sget_fc+0x110/0x860 [ 2497.990995] ? set_anon_super+0xc0/0xc0 [ 2497.991568] ? pseudo_fs_get_tree+0x20/0x20 [ 2497.992190] get_tree_nodev+0x24/0x1d0 [ 2497.992740] vfs_get_tree+0x8e/0x300 [ 2497.993264] path_mount+0x14ab/0x2200 [ 2497.993806] ? strncpy_from_user+0x9e/0x470 [ 2497.994417] ? finish_automount+0xa90/0xa90 [ 2497.995067] ? getname_flags.part.0+0x1dd/0x4f0 [ 2497.995732] __x64_sys_mount+0x282/0x300 [ 2497.996303] ? copy_mnt_ns+0xa00/0xa00 [ 2497.996861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2497.997612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2497.998337] do_syscall_64+0x33/0x40 [ 2497.998877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2497.999607] RIP: 0033:0x7f575796fb19 [ 2498.000131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2498.002720] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2498.003816] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2498.004832] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2498.005827] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2498.006839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2498.007851] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:53:20 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x80086601, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2498.073328] FAULT_INJECTION: forcing a failure. [ 2498.073328] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.075770] CPU: 1 PID: 20675 Comm: syz-executor.6 Not tainted 5.10.248 #1 [ 2498.077199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2498.078935] Call Trace: [ 2498.079499] dump_stack+0x107/0x167 [ 2498.080278] should_fail.cold+0x5/0xa [ 2498.081087] ? create_object.isra.0+0x3a/0xa30 [ 2498.082048] should_failslab+0x5/0x20 [ 2498.082875] kmem_cache_alloc+0x5b/0x310 [ 2498.083753] create_object.isra.0+0x3a/0xa30 [ 2498.084682] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2498.085768] kmem_cache_alloc+0x159/0x310 [ 2498.086654] __es_insert_extent+0xed1/0x1370 [ 2498.087596] ? do_raw_read_unlock+0x70/0x70 [ 2498.088512] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2498.089646] ext4_es_insert_extent+0x45d/0xf10 [ 2498.090627] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2498.091555] ? ext4_es_find_extent_range+0x1cb/0x460 [ 2498.092631] ? lock_downgrade+0x6d0/0x6d0 [ 2498.093513] ? __ext4_handle_dirty_super+0x100/0x100 [ 2498.094588] ? __es_find_extent_range+0x1d3/0x490 [ 2498.095619] ? do_raw_read_unlock+0x3b/0x70 [ 2498.096546] ext4_ext_map_blocks+0x1567/0x5880 [ 2498.097525] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2498.098640] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2498.099767] ? ext4_ext_release+0x10/0x10 [ 2498.100655] ? lock_release+0x680/0x680 [ 2498.101507] ? ext4_es_lookup_extent+0x485/0xa80 [ 2498.102516] ? lock_downgrade+0x6d0/0x6d0 [ 2498.103425] ? down_read+0x10f/0x430 [ 2498.104217] ? down_write+0x160/0x160 [ 2498.105030] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2498.106032] ext4_map_blocks+0x8e1/0x1910 [ 2498.106929] ? kmem_cache_alloc+0x2a6/0x310 [ 2498.107849] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2498.108803] ? jbd2__journal_start+0xf3/0x7e0 [ 2498.109766] ? __ext4_journal_start_sb+0x214/0x390 [ 2498.110800] ? __ext4_journal_start_sb+0x1db/0x390 [ 2498.111862] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2498.112989] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2498.114019] ? down_write_killable+0x180/0x180 [ 2498.115008] ext4_fallocate+0x415/0x3850 [ 2498.115868] ? ioctl_preallocate+0x192/0x210 [ 2498.116810] ? lock_release+0x680/0x680 [ 2498.117670] ? ext4_ext_truncate+0x250/0x250 [ 2498.118605] ? selinux_file_permission+0x92/0x520 [ 2498.119642] ? ext4_ext_truncate+0x250/0x250 [ 2498.120585] vfs_fallocate+0x48f/0xda0 [ 2498.121424] ioctl_preallocate+0x192/0x210 [ 2498.122316] ? fiemap_prep+0x220/0x220 [ 2498.123152] ? find_held_lock+0x2c/0x110 [ 2498.124030] do_vfs_ioctl+0xe59/0x10d0 [ 2498.124852] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2498.125962] ? generic_block_fiemap+0x60/0x60 [ 2498.126923] ? lock_downgrade+0x6d0/0x6d0 [ 2498.127806] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2498.128826] ? wait_for_completion_io+0x270/0x270 [ 2498.129863] ? selinux_file_ioctl+0xb6/0x270 [ 2498.130811] __x64_sys_ioctl+0x10c/0x210 [ 2498.131696] do_syscall_64+0x33/0x40 [ 2498.132485] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2498.133571] RIP: 0033:0x7f1bfeab1b19 [ 2498.134366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2498.138289] RSP: 002b:00007f1bfc027188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2498.139920] RAX: ffffffffffffffda RBX: 00007f1bfebc4f60 RCX: 00007f1bfeab1b19 [ 2498.141436] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2498.142968] RBP: 00007f1bfc0271d0 R08: 0000000000000000 R09: 0000000000000000 [ 2498.144484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2498.146002] R13: 00007ffde55570af R14: 00007f1bfc027300 R15: 0000000000022000 15:53:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:53:20 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x3000000000000}, 0x0) 15:53:21 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x80087601, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:21 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002ec466696c65312f66696c653000"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000f1df7b746a47793f42f1539f37bf3535c11a85cd1373c986acf2a85d6d5996c089277f7cc372211d2099484ed87fb62a01ccc1597f84053fcfa29d7cb1d8d9fcf7e35c5ba9c8939f572972a242b31831b9bf7c241e93b16e", @ANYRES16=0x0, @ANYBLOB="4000000000000000000017000000"], 0x14}}, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f00000001c0)=""/88) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:53:21 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 7) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 2498.330279] FAULT_INJECTION: forcing a failure. [ 2498.330279] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.331732] CPU: 0 PID: 20702 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2498.332589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2498.333611] Call Trace: [ 2498.333942] dump_stack+0x107/0x167 [ 2498.334403] should_fail.cold+0x5/0xa [ 2498.334906] ? create_object.isra.0+0x3a/0xa30 [ 2498.335477] should_failslab+0x5/0x20 [ 2498.335956] kmem_cache_alloc+0x5b/0x310 [ 2498.336466] create_object.isra.0+0x3a/0xa30 [ 2498.337010] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2498.337638] __kmalloc+0x16e/0x390 [ 2498.338093] ext4_find_extent+0xa77/0xd70 [ 2498.338612] ? __lock_acquire+0x1657/0x5b00 [ 2498.339173] ext4_ext_map_blocks+0x1c8/0x5880 [ 2498.339744] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2498.340399] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2498.341061] ? ext4_ext_release+0x10/0x10 [ 2498.341581] ? lock_release+0x680/0x680 [ 2498.342081] ? ext4_es_lookup_extent+0x485/0xa80 [ 2498.342678] ? lock_downgrade+0x6d0/0x6d0 [ 2498.343225] ? down_read+0x10f/0x430 [ 2498.343688] ? down_write+0x160/0x160 [ 2498.344163] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2498.344747] ext4_map_blocks+0x8e1/0x1910 [ 2498.345265] ? kmem_cache_alloc+0x2a6/0x310 [ 2498.345804] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2498.346360] ? jbd2__journal_start+0xf3/0x7e0 [ 2498.346944] ? __ext4_journal_start_sb+0x214/0x390 [ 2498.347549] ? __ext4_journal_start_sb+0x1db/0x390 [ 2498.348159] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2498.348811] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2498.349408] ? down_write_killable+0x180/0x180 [ 2498.349976] ext4_fallocate+0x415/0x3850 [ 2498.350479] ? ioctl_preallocate+0x192/0x210 [ 2498.351046] ? lock_release+0x680/0x680 [ 2498.351539] ? ext4_ext_truncate+0x250/0x250 [ 2498.352080] ? selinux_file_permission+0x92/0x520 [ 2498.352693] ? ext4_ext_truncate+0x250/0x250 [ 2498.353234] vfs_fallocate+0x48f/0xda0 [ 2498.353717] ioctl_preallocate+0x192/0x210 [ 2498.354238] ? fiemap_prep+0x220/0x220 [ 2498.354724] ? find_held_lock+0x2c/0x110 [ 2498.355256] do_vfs_ioctl+0xe59/0x10d0 [ 2498.355735] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2498.356383] ? generic_block_fiemap+0x60/0x60 [ 2498.356931] ? lock_downgrade+0x6d0/0x6d0 [ 2498.357441] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2498.358033] ? wait_for_completion_io+0x270/0x270 [ 2498.358633] ? selinux_file_ioctl+0xb6/0x270 [ 2498.359210] __x64_sys_ioctl+0x10c/0x210 [ 2498.359709] do_syscall_64+0x33/0x40 [ 2498.360166] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2498.360792] RIP: 0033:0x7f0b4e5c1b19 [ 2498.361246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2498.363527] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2498.364461] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2498.365332] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2498.366203] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2498.367093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2498.367969] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 15:53:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 10) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:53:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4b47, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:21 executing program 4: syz_io_uring_setup(0x55b5, &(0x7f0000000000)={0x0, 0xef36, 0x8, 0x1, 0x24f}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x5000}}, 0x7) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)="df698c3b6a0697a08cba569c02978c1d8af4f9174fa03a59986e666a5fcda15b106355a20a431dedbcd16b922033029d840c627fa13dab9852fb5870767f4850678ad8a28b688ea70c5d8290e477faa4ea69d455261ff30c4b2e7f076fae3878e2a561d08ab96acf957e2b83d6f2c35176fbceb911b31ba2d4bc338c955bbd40ed578e6956073cede609ab", 0x8b, 0x24008001, 0x0, {0x0, r3}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="02000000", @ANYRES16=r5, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) [ 2498.412313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57329 sclass=netlink_tcpdiag_socket pid=20710 comm=syz-executor.7 [ 2498.435592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57329 sclass=netlink_tcpdiag_socket pid=20711 comm=syz-executor.7 15:53:33 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 8) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:53:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x6000000000000}, 0x0) 15:53:33 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10}) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:53:33 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4b49, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:33 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 41) fallocate(r0, 0x0, 0x0, 0x8000) 15:53:33 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='802.15.4 MAC\x00') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000028000000"], 0x14}}, 0x0) 15:53:33 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0045878, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:33 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:53:33 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0045878, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2510.291444] FAULT_INJECTION: forcing a failure. [ 2510.291444] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.292804] CPU: 1 PID: 20732 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2510.293604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2510.294560] Call Trace: [ 2510.294873] dump_stack+0x107/0x167 [ 2510.295304] should_fail.cold+0x5/0xa [ 2510.295746] ? __es_insert_extent+0xed1/0x1370 [ 2510.296267] should_failslab+0x5/0x20 [ 2510.296702] kmem_cache_alloc+0x5b/0x310 [ 2510.297168] __es_insert_extent+0xed1/0x1370 [ 2510.297671] ? do_raw_read_unlock+0x70/0x70 [ 2510.298163] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2510.298768] ext4_es_insert_extent+0x45d/0xf10 [ 2510.299302] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2510.299793] ? ext4_es_find_extent_range+0x1cb/0x460 [ 2510.300370] ? lock_downgrade+0x6d0/0x6d0 [ 2510.300843] ? __ext4_handle_dirty_super+0x100/0x100 [ 2510.301418] ? __es_find_extent_range+0x1d3/0x490 [ 2510.301967] ? do_raw_read_unlock+0x3b/0x70 [ 2510.302482] ext4_ext_map_blocks+0x1567/0x5880 [ 2510.303020] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2510.303616] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2510.304227] ? ext4_ext_release+0x10/0x10 [ 2510.304703] ? lock_release+0x680/0x680 [ 2510.305163] ? ext4_es_lookup_extent+0x485/0xa80 [ 2510.305703] ? lock_downgrade+0x6d0/0x6d0 [ 2510.306193] ? down_read+0x10f/0x430 [ 2510.306618] ? down_write+0x160/0x160 [ 2510.307080] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2510.307618] ext4_map_blocks+0x8e1/0x1910 [ 2510.308111] ? kmem_cache_alloc+0x2a6/0x310 [ 2510.308601] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2510.309120] ? jbd2__journal_start+0xf3/0x7e0 [ 2510.309635] ? __ext4_journal_start_sb+0x214/0x390 [ 2510.310194] ? __ext4_journal_start_sb+0x1db/0x390 [ 2510.310753] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2510.311367] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2510.311915] ? down_write_killable+0x180/0x180 [ 2510.312454] ext4_fallocate+0x415/0x3850 [ 2510.312919] ? ioctl_preallocate+0x192/0x210 [ 2510.313424] ? lock_release+0x680/0x680 [ 2510.313877] ? ext4_ext_truncate+0x250/0x250 [ 2510.314383] ? selinux_file_permission+0x92/0x520 [ 2510.314934] ? ext4_ext_truncate+0x250/0x250 [ 2510.315447] vfs_fallocate+0x48f/0xda0 [ 2510.315900] ioctl_preallocate+0x192/0x210 [ 2510.316174] FAULT_INJECTION: forcing a failure. [ 2510.316174] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.316390] ? fiemap_prep+0x220/0x220 [ 2510.316409] ? find_held_lock+0x2c/0x110 [ 2510.319626] do_vfs_ioctl+0xe59/0x10d0 [ 2510.320082] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2510.320668] ? generic_block_fiemap+0x60/0x60 [ 2510.321177] ? lock_downgrade+0x6d0/0x6d0 [ 2510.321639] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2510.322186] ? wait_for_completion_io+0x270/0x270 [ 2510.322736] ? selinux_file_ioctl+0xb6/0x270 [ 2510.323250] __x64_sys_ioctl+0x10c/0x210 [ 2510.323708] do_syscall_64+0x33/0x40 [ 2510.324143] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2510.324717] RIP: 0033:0x7f0b4e5c1b19 [ 2510.325145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2510.327267] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2510.328128] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2510.328930] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2510.329741] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2510.330546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2510.331356] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2510.332196] CPU: 0 PID: 20735 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2510.333671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2510.335403] Call Trace: [ 2510.335961] dump_stack+0x107/0x167 [ 2510.336720] should_fail.cold+0x5/0xa [ 2510.337518] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2510.338567] should_failslab+0x5/0x20 [ 2510.339374] kmem_cache_alloc_trace+0x55/0x320 [ 2510.340321] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2510.341389] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2510.342414] __list_lru_init+0x44d/0x890 [ 2510.343279] alloc_super+0x8b8/0xa90 [ 2510.344056] sget_fc+0x110/0x860 [ 2510.344781] ? set_anon_super+0xc0/0xc0 [ 2510.345615] ? pseudo_fs_get_tree+0x20/0x20 [ 2510.346512] get_tree_nodev+0x24/0x1d0 [ 2510.347340] vfs_get_tree+0x8e/0x300 [ 2510.348115] path_mount+0x14ab/0x2200 [ 2510.348912] ? strncpy_from_user+0x9e/0x470 [ 2510.349811] ? finish_automount+0xa90/0xa90 [ 2510.350716] ? getname_flags.part.0+0x1dd/0x4f0 [ 2510.351706] __x64_sys_mount+0x282/0x300 [ 2510.352553] ? copy_mnt_ns+0xa00/0xa00 [ 2510.353371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2510.354472] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2510.355563] do_syscall_64+0x33/0x40 [ 2510.356334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2510.357396] RIP: 0033:0x7f575796fb19 [ 2510.358173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2510.362025] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2510.363609] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2510.365098] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2510.366584] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2510.368079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2510.369562] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:53:33 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x8000000000000}, 0x0) 15:53:33 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x541b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0xffffffff}, 0xffffffffffffffb7}}, 0x20008000) 15:53:45 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 42) fallocate(r0, 0x0, 0x0, 0x8000) 15:53:45 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc020660b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:45 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:53:45 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5421, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:45 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={0x0, "4468bd9a48b4635c64c9367396305435"}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000014c0)={r4, 0x80, 0x0, [0x5, 0x5, 0x3, 0x1000000000000, 0x2], [0x5, 0x200, 0x1, 0x3, 0x7fff, 0x2, 0x6, 0xfffffffffffffc01, 0x97, 0x5, 0x8001, 0x20, 0x5, 0xffffffffffffffe1, 0x0, 0x8, 0x1, 0x7, 0x8001, 0x6, 0x400, 0x1ff, 0x7, 0x0, 0x1000, 0x1731, 0x401, 0x7, 0x9412, 0x400, 0x6, 0x7, 0x8, 0x3f, 0x7a73, 0x20d, 0x2f8, 0x5, 0xfffffffffffffffc, 0x198a97d1, 0x4, 0x7ff, 0x1, 0x7, 0x0, 0x7, 0x8, 0x3, 0x6, 0x3, 0xa0000, 0xa20000000000000, 0x2, 0x8, 0x3, 0x80000000, 0x6, 0x1, 0x8, 0x9, 0x8001, 0xfffffffffffff800, 0x4, 0xf3, 0x10d7c9bc, 0x8, 0x8b1, 0x7, 0x8fe, 0x5, 0xa8, 0x3e2, 0x1, 0xfffffffffffffffd, 0x9, 0xbf4, 0x5, 0x400, 0x80000000, 0x5, 0x2, 0x35e, 0xfa, 0x3, 0x7, 0x2, 0xb7, 0x4, 0x23fb29ba, 0x100, 0xcad, 0x0, 0xd5e, 0x60, 0x6, 0x6, 0x1f, 0x6, 0x3, 0xd961, 0xb, 0x4, 0x0, 0x5, 0xffffffffffff0f13, 0x2, 0x1f, 0x0, 0x7, 0xfffffffffffffffd, 0x1a8f, 0xfff, 0x1, 0x5, 0xb3ee, 0x9, 0x20, 0x100, 0x4, 0x5, 0xff]}) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:53:45 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x100000000000000}, 0x0) 15:53:45 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="44327285523701000000000000fc000030000000"], 0x14}}, 0x0) 15:53:45 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 9) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 2523.192968] FAULT_INJECTION: forcing a failure. [ 2523.192968] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.195782] CPU: 1 PID: 20776 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2523.197333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2523.199205] Call Trace: [ 2523.199807] dump_stack+0x107/0x167 [ 2523.200631] should_fail.cold+0x5/0xa [ 2523.201491] ? create_object.isra.0+0x3a/0xa30 [ 2523.202525] should_failslab+0x5/0x20 [ 2523.203380] kmem_cache_alloc+0x5b/0x310 [ 2523.204290] create_object.isra.0+0x3a/0xa30 [ 2523.205262] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2523.206390] kmem_cache_alloc+0x159/0x310 [ 2523.207341] __es_insert_extent+0xed1/0x1370 [ 2523.208331] ? do_raw_read_unlock+0x70/0x70 [ 2523.209299] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2523.210491] ext4_es_insert_extent+0x45d/0xf10 [ 2523.211537] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2523.212510] ? ext4_es_find_extent_range+0x1cb/0x460 [ 2523.213653] ? lock_downgrade+0x6d0/0x6d0 [ 2523.214606] ? __ext4_handle_dirty_super+0x100/0x100 [ 2523.215759] ? __es_find_extent_range+0x1d3/0x490 [ 2523.216848] ? do_raw_read_unlock+0x3b/0x70 [ 2523.217827] ext4_ext_map_blocks+0x1567/0x5880 [ 2523.218870] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2523.220062] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2523.221246] ? ext4_ext_release+0x10/0x10 [ 2523.222196] ? lock_release+0x680/0x680 [ 2523.223108] ? ext4_es_lookup_extent+0x485/0xa80 [ 2523.224181] ? lock_downgrade+0x6d0/0x6d0 [ 2523.225129] ? down_read+0x10f/0x430 [ 2523.225968] ? down_write+0x160/0x160 [ 2523.226826] ? ext4_es_lookup_extent+0xc4/0xa80 [ 2523.227891] ext4_map_blocks+0x8e1/0x1910 [ 2523.228833] ? kmem_cache_alloc+0x2a6/0x310 [ 2523.229805] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2523.230826] ? jbd2__journal_start+0xf3/0x7e0 [ 2523.231855] ? __ext4_journal_start_sb+0x214/0x390 [ 2523.232968] ? __ext4_journal_start_sb+0x1db/0x390 [ 2523.234079] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2523.235282] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2523.236375] ? down_write_killable+0x180/0x180 [ 2523.237417] ext4_fallocate+0x415/0x3850 [ 2523.238333] ? ioctl_preallocate+0x192/0x210 [ 2523.239339] ? lock_release+0x680/0x680 [ 2523.240243] ? ext4_ext_truncate+0x250/0x250 [ 2523.241236] ? selinux_file_permission+0x92/0x520 [ 2523.242328] ? ext4_ext_truncate+0x250/0x250 [ 2523.243334] vfs_fallocate+0x48f/0xda0 [ 2523.244222] ioctl_preallocate+0x192/0x210 [ 2523.245175] ? fiemap_prep+0x220/0x220 [ 2523.246050] ? find_held_lock+0x2c/0x110 [ 2523.246984] do_vfs_ioctl+0xe59/0x10d0 [ 2523.247867] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2523.249052] ? generic_block_fiemap+0x60/0x60 [ 2523.250062] ? lock_downgrade+0x6d0/0x6d0 [ 2523.250995] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2523.252098] ? wait_for_completion_io+0x270/0x270 [ 2523.253195] ? selinux_file_ioctl+0xb6/0x270 [ 2523.254199] __x64_sys_ioctl+0x10c/0x210 [ 2523.255125] do_syscall_64+0x33/0x40 [ 2523.255968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2523.257121] RIP: 0033:0x7f0b4e5c1b19 [ 2523.257962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2523.262114] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2523.263837] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2523.265444] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2523.267049] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2523.268663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2523.270267] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2523.302130] FAULT_INJECTION: forcing a failure. [ 2523.302130] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.304576] CPU: 0 PID: 20783 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2523.306034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2523.307783] Call Trace: [ 2523.308353] dump_stack+0x107/0x167 [ 2523.309131] should_fail.cold+0x5/0xa [ 2523.309945] ? create_object.isra.0+0x3a/0xa30 [ 2523.310909] should_failslab+0x5/0x20 [ 2523.311733] kmem_cache_alloc+0x5b/0x310 [ 2523.312592] ? mark_held_locks+0x9e/0xe0 [ 2523.313452] create_object.isra.0+0x3a/0xa30 [ 2523.314378] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2523.315468] kmem_cache_alloc_trace+0x151/0x320 [ 2523.316459] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2523.317497] __list_lru_init+0x44d/0x890 [ 2523.318358] alloc_super+0x8b8/0xa90 [ 2523.319161] sget_fc+0x110/0x860 [ 2523.319876] ? set_anon_super+0xc0/0xc0 [ 2523.320718] ? pseudo_fs_get_tree+0x20/0x20 [ 2523.321626] get_tree_nodev+0x24/0x1d0 [ 2523.322451] vfs_get_tree+0x8e/0x300 [ 2523.323241] path_mount+0x14ab/0x2200 [ 2523.324051] ? strncpy_from_user+0x9e/0x470 [ 2523.324959] ? finish_automount+0xa90/0xa90 [ 2523.325882] ? getname_flags.part.0+0x1dd/0x4f0 [ 2523.326876] __x64_sys_mount+0x282/0x300 [ 2523.327745] ? copy_mnt_ns+0xa00/0xa00 [ 2523.328574] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2523.329682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2523.330781] do_syscall_64+0x33/0x40 [ 2523.331578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2523.332663] RIP: 0033:0x7f575796fb19 [ 2523.333451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2523.337354] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2523.338963] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2523.340478] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2523.341981] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2523.343493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2523.344996] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:53:46 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4b47, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:53:46 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100003f00000000ecfbcf8ebcf5d09761d0a5cf116f9ac34524087dd6675ed2966825e0bbf1213cabfb92c50522bc0589c6", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:53:46 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:53:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x200000000000000}, 0x0) 15:53:46 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4b49, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2528.042714] Bluetooth: hci7: command 0x0409 tx timeout [ 2530.090706] Bluetooth: hci7: command 0x041b tx timeout [ 2532.138701] Bluetooth: hci7: command 0x040f tx timeout [ 2532.742276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2532.744416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2532.748127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2532.796485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2532.798591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2532.801166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2534.186676] Bluetooth: hci7: command 0x0419 tx timeout 15:54:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5450, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:54:10 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x541b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:54:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8010) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:54:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 10) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:54:10 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 43) fallocate(r0, 0x0, 0x0, 0x8000) 15:54:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x300000000000000}, 0x0) 15:54:10 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x80000000}) 15:54:10 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) [ 2548.100224] FAULT_INJECTION: forcing a failure. [ 2548.100224] name failslab, interval 1, probability 0, space 0, times 0 [ 2548.103327] CPU: 1 PID: 21283 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2548.105241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2548.107572] Call Trace: [ 2548.108312] dump_stack+0x107/0x167 [ 2548.109313] should_fail.cold+0x5/0xa [ 2548.110378] ? ext4_find_extent+0xa77/0xd70 [ 2548.111571] should_failslab+0x5/0x20 [ 2548.112629] __kmalloc+0x72/0x390 [ 2548.113611] ext4_find_extent+0xa77/0xd70 [ 2548.114778] ext4_ext_map_blocks+0x1c8/0x5880 [ 2548.116056] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2548.117492] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2548.118950] ? ext4_ext_release+0x10/0x10 [ 2548.119917] ? ext4_map_blocks+0x5cd/0x1910 [ 2548.121102] ? lock_release+0x680/0x680 [ 2548.122213] ? ext4_es_lookup_extent+0x485/0xa80 [ 2548.123534] ? find_held_lock+0x2c/0x110 [ 2548.124664] ? down_write+0xe0/0x160 [ 2548.125691] ? down_write_killable+0x180/0x180 [ 2548.126956] ext4_map_blocks+0x63f/0x1910 [ 2548.128109] ? kmem_cache_alloc+0x2a6/0x310 [ 2548.129310] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2548.130551] ? jbd2__journal_start+0xf3/0x7e0 [ 2548.131823] ? __ext4_journal_start_sb+0x214/0x390 [ 2548.133181] ? __ext4_journal_start_sb+0x1db/0x390 [ 2548.134537] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2548.136017] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2548.137360] ? down_write_killable+0x180/0x180 [ 2548.138630] ext4_fallocate+0x415/0x3850 [ 2548.139816] ? ioctl_preallocate+0x192/0x210 [ 2548.140936] ? lock_release+0x680/0x680 [ 2548.141946] ? ext4_ext_truncate+0x250/0x250 [ 2548.143052] ? selinux_file_permission+0x92/0x520 [ 2548.143851] FAULT_INJECTION: forcing a failure. [ 2548.143851] name failslab, interval 1, probability 0, space 0, times 0 [ 2548.144235] ? ext4_ext_truncate+0x250/0x250 [ 2548.146823] vfs_fallocate+0x48f/0xda0 [ 2548.147715] ioctl_preallocate+0x192/0x210 [ 2548.148656] ? fiemap_prep+0x220/0x220 [ 2548.149517] ? find_held_lock+0x2c/0x110 [ 2548.150438] do_vfs_ioctl+0xe59/0x10d0 [ 2548.151300] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2548.152470] ? generic_block_fiemap+0x60/0x60 [ 2548.153460] ? lock_downgrade+0x6d0/0x6d0 [ 2548.154380] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2548.155464] ? wait_for_completion_io+0x270/0x270 [ 2548.156550] ? selinux_file_ioctl+0xb6/0x270 [ 2548.157538] __x64_sys_ioctl+0x10c/0x210 [ 2548.158447] do_syscall_64+0x33/0x40 [ 2548.159278] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2548.160431] RIP: 0033:0x7f0b4e5c1b19 [ 2548.161258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2548.165345] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2548.167040] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2548.168633] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2548.170214] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2548.171804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2548.173388] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2548.175007] CPU: 0 PID: 21285 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2548.176017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2548.177170] Call Trace: [ 2548.177552] dump_stack+0x107/0x167 [ 2548.178087] should_fail.cold+0x5/0xa [ 2548.178650] ? create_object.isra.0+0x3a/0xa30 [ 2548.179308] should_failslab+0x5/0x20 [ 2548.179857] kmem_cache_alloc+0x5b/0x310 [ 2548.180447] create_object.isra.0+0x3a/0xa30 [ 2548.181086] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2548.181808] kmem_cache_alloc_trace+0x151/0x320 [ 2548.182477] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2548.183183] __list_lru_init+0x44d/0x890 [ 2548.183782] alloc_super+0x8b8/0xa90 [ 2548.184311] sget_fc+0x110/0x860 [ 2548.184814] ? set_anon_super+0xc0/0xc0 [ 2548.185411] ? pseudo_fs_get_tree+0x20/0x20 15:54:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x900000000000000}, 0x0) 15:54:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5451, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:54:10 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5421, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2548.186038] get_tree_nodev+0x24/0x1d0 [ 2548.186730] vfs_get_tree+0x8e/0x300 [ 2548.187244] path_mount+0x14ab/0x2200 [ 2548.187780] ? strncpy_from_user+0x9e/0x470 [ 2548.188373] ? finish_automount+0xa90/0xa90 [ 2548.188967] ? getname_flags.part.0+0x1dd/0x4f0 [ 2548.189627] __x64_sys_mount+0x282/0x300 [ 2548.190192] ? copy_mnt_ns+0xa00/0xa00 [ 2548.190736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2548.191463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2548.192177] do_syscall_64+0x33/0x40 [ 2548.192692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2548.193399] RIP: 0033:0x7f575796fb19 [ 2548.193912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2548.196420] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2548.197485] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2548.198481] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2548.199488] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2548.200460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2548.201433] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:54:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0xf00000000000000}, 0x0) 15:54:11 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5452, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:54:11 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x3, 0x7c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:54:11 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 11) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:54:11 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5460, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:54:11 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 44) fallocate(r0, 0x0, 0x0, 0x8000) 15:54:11 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x80000000}) [ 2548.482260] FAULT_INJECTION: forcing a failure. [ 2548.482260] name failslab, interval 1, probability 0, space 0, times 0 [ 2548.483698] CPU: 0 PID: 21311 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2548.484525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2548.485528] Call Trace: [ 2548.485853] dump_stack+0x107/0x167 [ 2548.486300] should_fail.cold+0x5/0xa [ 2548.486762] ? create_object.isra.0+0x3a/0xa30 [ 2548.487316] should_failslab+0x5/0x20 [ 2548.487789] kmem_cache_alloc+0x5b/0x310 [ 2548.488284] ? lock_chain_count+0x20/0x20 [ 2548.488787] create_object.isra.0+0x3a/0xa30 [ 2548.489316] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2548.489933] __kmalloc+0x16e/0x390 [ 2548.490370] ext4_find_extent+0xa77/0xd70 [ 2548.490884] ext4_ext_map_blocks+0x1c8/0x5880 [ 2548.491444] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2548.492080] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2548.492722] ? ext4_ext_release+0x10/0x10 [ 2548.493223] ? ext4_map_blocks+0x5cd/0x1910 [ 2548.493743] ? lock_release+0x680/0x680 [ 2548.494222] ? ext4_es_lookup_extent+0x485/0xa80 [ 2548.494793] ? find_held_lock+0x2c/0x110 [ 2548.495291] ? down_write+0xe0/0x160 [ 2548.495742] ? down_write_killable+0x180/0x180 [ 2548.496297] ext4_map_blocks+0x63f/0x1910 [ 2548.496801] ? kmem_cache_alloc+0x2a6/0x310 [ 2548.497320] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2548.497874] ? jbd2__journal_start+0xf3/0x7e0 [ 2548.498418] ? __ext4_journal_start_sb+0x214/0x390 [ 2548.499005] ? __ext4_journal_start_sb+0x1db/0x390 [ 2548.499606] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2548.500241] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2548.500826] ? down_write_killable+0x180/0x180 [ 2548.501379] ext4_fallocate+0x415/0x3850 [ 2548.501870] ? ioctl_preallocate+0x192/0x210 [ 2548.502403] ? lock_release+0x680/0x680 [ 2548.502883] ? ext4_ext_truncate+0x250/0x250 [ 2548.503417] ? selinux_file_permission+0x92/0x520 [ 2548.504001] ? ext4_ext_truncate+0x250/0x250 [ 2548.504529] vfs_fallocate+0x48f/0xda0 [ 2548.505003] ioctl_preallocate+0x192/0x210 [ 2548.505507] ? fiemap_prep+0x220/0x220 [ 2548.505975] ? find_held_lock+0x2c/0x110 [ 2548.506476] do_vfs_ioctl+0xe59/0x10d0 [ 2548.506944] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2548.507574] ? generic_block_fiemap+0x60/0x60 [ 2548.508107] ? lock_downgrade+0x6d0/0x6d0 [ 2548.508598] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2548.509177] ? wait_for_completion_io+0x270/0x270 [ 2548.509756] ? selinux_file_ioctl+0xb6/0x270 [ 2548.510282] __x64_sys_ioctl+0x10c/0x210 [ 2548.510766] do_syscall_64+0x33/0x40 [ 2548.511212] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2548.511825] RIP: 0033:0x7f0b4e5c1b19 [ 2548.512270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2548.514471] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2548.515392] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2548.516243] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2548.517099] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2548.517950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2548.518799] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2548.628780] FAULT_INJECTION: forcing a failure. [ 2548.628780] name failslab, interval 1, probability 0, space 0, times 0 [ 2548.631480] CPU: 1 PID: 21322 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2548.633113] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2548.635064] Call Trace: [ 2548.635713] dump_stack+0x107/0x167 [ 2548.636580] should_fail.cold+0x5/0xa [ 2548.637489] ? create_object.isra.0+0x3a/0xa30 [ 2548.638564] should_failslab+0x5/0x20 [ 2548.639489] kmem_cache_alloc+0x5b/0x310 [ 2548.640467] ? mark_held_locks+0x9e/0xe0 [ 2548.641447] create_object.isra.0+0x3a/0xa30 [ 2548.642497] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2548.643728] kmem_cache_alloc_trace+0x151/0x320 [ 2548.644844] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2548.646014] __list_lru_init+0x44d/0x890 [ 2548.646989] alloc_super+0x8b8/0xa90 [ 2548.647893] sget_fc+0x110/0x860 [ 2548.648703] ? set_anon_super+0xc0/0xc0 [ 2548.649655] ? pseudo_fs_get_tree+0x20/0x20 [ 2548.650677] get_tree_nodev+0x24/0x1d0 [ 2548.651614] vfs_get_tree+0x8e/0x300 [ 2548.652509] path_mount+0x14ab/0x2200 [ 2548.653426] ? strncpy_from_user+0x9e/0x470 [ 2548.654461] ? finish_automount+0xa90/0xa90 [ 2548.655665] ? getname_flags.part.0+0x1dd/0x4f0 [ 2548.657092] __x64_sys_mount+0x282/0x300 [ 2548.658235] ? copy_mnt_ns+0xa00/0xa00 [ 2548.659407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2548.661237] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2548.662625] do_syscall_64+0x33/0x40 [ 2548.663784] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2548.665060] RIP: 0033:0x7f575796fb19 [ 2548.666235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2548.671985] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2548.674344] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2548.676574] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2548.678835] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2548.681056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2548.683273] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2553.194776] Bluetooth: hci5: command 0x0409 tx timeout [ 2555.242936] Bluetooth: hci5: command 0x041b tx timeout [ 2557.172484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2557.174664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2557.189864] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2557.197955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2557.199533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2557.202129] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2557.290923] Bluetooth: hci5: command 0x040f tx timeout [ 2559.338707] Bluetooth: hci5: command 0x0419 tx timeout 15:54:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 15:54:33 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40049409, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:54:33 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x80000000}) 15:54:33 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5450, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:54:33 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 12) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:54:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000d798b26a1bc9d3c86d0da8628ba42167bc19334b667d4d42a107f019b2bd458bd8d9f822474f12d3000100003ef04f39a699d5f65b00"/73, @ANYRES16=0x0, @ANYBLOB="0000000000000000000017000000"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x6e}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x1}, 0x14}}, 0x0) 15:54:33 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_LOCK(0x0, 0xb) 15:54:33 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 45) fallocate(r0, 0x0, 0x0, 0x8000) [ 2571.091315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39127 sclass=netlink_tcpdiag_socket pid=21800 comm=syz-executor.4 [ 2571.099349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=21800 comm=syz-executor.4 [ 2571.107492] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39127 sclass=netlink_tcpdiag_socket pid=21800 comm=syz-executor.4 [ 2571.113362] FAULT_INJECTION: forcing a failure. [ 2571.113362] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.114790] CPU: 0 PID: 21805 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2571.115665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.116680] Call Trace: [ 2571.117013] dump_stack+0x107/0x167 [ 2571.117460] should_fail.cold+0x5/0xa [ 2571.117937] ? ext4_mb_new_blocks+0x698/0x45c0 [ 2571.118537] should_failslab+0x5/0x20 [ 2571.119016] kmem_cache_alloc+0x5b/0x310 [ 2571.119527] ext4_mb_new_blocks+0x698/0x45c0 [ 2571.120087] ? trace_hardirqs_on+0x5b/0x180 [ 2571.120617] ? kasan_unpoison_shadow+0x33/0x50 [ 2571.121180] ? ext4_cache_extents+0x68/0x2d0 [ 2571.121722] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2571.122343] ? ext4_discard_preallocations+0xd80/0xd80 [ 2571.122984] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2571.123563] ? ext4_inode_to_goal_block+0x320/0x430 [ 2571.124194] ext4_ext_map_blocks+0x1a55/0x5880 [ 2571.124775] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2571.125416] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2571.126064] ? ext4_ext_release+0x10/0x10 [ 2571.126575] ? ext4_map_blocks+0x5cd/0x1910 [ 2571.127111] ? lock_release+0x680/0x680 [ 2571.127606] ? ext4_es_lookup_extent+0x485/0xa80 [ 2571.128196] ? find_held_lock+0x2c/0x110 [ 2571.128701] ? down_write_killable+0x180/0x180 [ 2571.129472] ext4_map_blocks+0x63f/0x1910 [ 2571.129981] ? kmem_cache_alloc+0x2a6/0x310 [ 2571.130509] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2571.131063] ? jbd2__journal_start+0xf3/0x7e0 [ 2571.131621] ? __ext4_journal_start_sb+0x214/0x390 [ 2571.132224] ? __ext4_journal_start_sb+0x1db/0x390 [ 2571.132822] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2571.133461] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2571.134054] ? down_write_killable+0x180/0x180 [ 2571.134612] ext4_fallocate+0x415/0x3850 [ 2571.135111] ? ioctl_preallocate+0x192/0x210 [ 2571.135656] ? lock_release+0x680/0x680 [ 2571.136143] ? ext4_ext_truncate+0x250/0x250 [ 2571.136678] ? selinux_file_permission+0x92/0x520 [ 2571.137269] ? ext4_ext_truncate+0x250/0x250 [ 2571.137817] vfs_fallocate+0x48f/0xda0 [ 2571.138294] ioctl_preallocate+0x192/0x210 [ 2571.138808] ? fiemap_prep+0x220/0x220 [ 2571.139284] ? find_held_lock+0x2c/0x110 [ 2571.139806] do_vfs_ioctl+0xe59/0x10d0 [ 2571.140279] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2571.140933] ? generic_block_fiemap+0x60/0x60 [ 2571.141476] ? lock_downgrade+0x6d0/0x6d0 [ 2571.141988] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2571.142574] ? wait_for_completion_io+0x270/0x270 [ 2571.143168] ? selinux_file_ioctl+0xb6/0x270 [ 2571.143719] __x64_sys_ioctl+0x10c/0x210 [ 2571.144216] do_syscall_64+0x33/0x40 [ 2571.144669] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2571.145295] RIP: 0033:0x7f0b4e5c1b19 [ 2571.145747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.147986] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2571.148902] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2571.149763] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2571.150618] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.151478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.152347] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 15:54:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 15:54:33 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2571.179339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=21806 comm=syz-executor.4 [ 2571.185033] FAULT_INJECTION: forcing a failure. [ 2571.185033] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.186575] CPU: 0 PID: 21811 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2571.187513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.188510] Call Trace: [ 2571.188823] dump_stack+0x107/0x167 [ 2571.189258] should_fail.cold+0x5/0xa [ 2571.189708] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2571.190316] should_failslab+0x5/0x20 [ 2571.190771] kmem_cache_alloc_trace+0x55/0x320 [ 2571.191313] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2571.191925] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2571.192510] __list_lru_init+0x44d/0x890 [ 2571.192993] alloc_super+0x8b8/0xa90 [ 2571.193440] sget_fc+0x110/0x860 [ 2571.193842] ? set_anon_super+0xc0/0xc0 [ 2571.194320] ? pseudo_fs_get_tree+0x20/0x20 [ 2571.194827] get_tree_nodev+0x24/0x1d0 [ 2571.195295] vfs_get_tree+0x8e/0x300 [ 2571.195745] path_mount+0x14ab/0x2200 [ 2571.196198] ? strncpy_from_user+0x9e/0x470 [ 2571.196704] ? finish_automount+0xa90/0xa90 [ 2571.197215] ? getname_flags.part.0+0x1dd/0x4f0 [ 2571.197766] __x64_sys_mount+0x282/0x300 [ 2571.198248] ? copy_mnt_ns+0xa00/0xa00 [ 2571.198708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.199330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2571.199971] do_syscall_64+0x33/0x40 [ 2571.200424] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2571.201047] RIP: 0033:0x7f575796fb19 [ 2571.201498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.203751] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2571.204683] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2571.205555] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2571.206422] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.207293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.208158] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:54:33 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5451, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:54:34 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x80000000}) 15:54:34 executing program 4: syz_80211_join_ibss(&(0x7f0000000080)='wlan0\x00', &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd29}, 0x14}}, 0x4000000) 15:54:34 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40087602, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:54:34 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5452, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:54:34 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 13) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:54:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x3}, 0x0) 15:54:34 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYBLOB="00000000570000022e2f66692c6531d868cb8dfee2bac098b2778e172f66696c6530004466af178eaf1562603ef7447243c368c4a9eadfb798640f39ffd2db8f0b795e5969a9380b915b389d73cf310c"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) [ 2571.450466] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 2571.453389] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 2571.479822] FAULT_INJECTION: forcing a failure. [ 2571.479822] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.482254] CPU: 1 PID: 21842 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2571.483724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.486053] Call Trace: [ 2571.486761] dump_stack+0x107/0x167 [ 2571.487786] should_fail.cold+0x5/0xa [ 2571.488824] ? create_object.isra.0+0x3a/0xa30 [ 2571.490075] should_failslab+0x5/0x20 [ 2571.491098] kmem_cache_alloc+0x5b/0x310 [ 2571.492245] create_object.isra.0+0x3a/0xa30 [ 2571.493478] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2571.494807] kmem_cache_alloc+0x159/0x310 [ 2571.495993] ext4_mb_new_blocks+0x698/0x45c0 [ 2571.497194] ? trace_hardirqs_on+0x5b/0x180 [ 2571.498187] ? kasan_unpoison_shadow+0x33/0x50 [ 2571.499243] ? ext4_cache_extents+0x68/0x2d0 [ 2571.500327] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2571.501757] ? ext4_discard_preallocations+0xd80/0xd80 [ 2571.503206] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2571.504533] ? ext4_inode_to_goal_block+0x320/0x430 [ 2571.505904] ext4_ext_map_blocks+0x1a55/0x5880 [ 2571.507067] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2571.508529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.509637] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2571.510585] ? trace_hardirqs_on+0x5b/0x180 [ 2571.511500] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2571.512458] ? finish_task_switch+0x126/0x5d0 [ 2571.513404] ? finish_task_switch+0xef/0x5d0 [ 2571.514332] ? ext4_ext_release+0x10/0x10 [ 2571.515209] ? ext4_map_blocks+0x5cd/0x1910 [ 2571.516130] ? lock_release+0x680/0x680 [ 2571.516966] ? io_schedule_timeout+0x140/0x140 [ 2571.517922] ? find_held_lock+0x2c/0x110 [ 2571.518787] ? down_write_killable+0x180/0x180 [ 2571.519767] ext4_map_blocks+0x63f/0x1910 [ 2571.520653] ? kmem_cache_alloc+0x2a6/0x310 [ 2571.521567] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2571.522507] ? jbd2__journal_start+0xf3/0x7e0 [ 2571.523457] ? __ext4_journal_start_sb+0x214/0x390 [ 2571.524486] ? __ext4_journal_start_sb+0x1db/0x390 [ 2571.525531] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2571.526643] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2571.527676] ? down_write_killable+0x180/0x180 [ 2571.528659] ext4_fallocate+0x415/0x3850 [ 2571.529511] ? ioctl_preallocate+0x192/0x210 [ 2571.530437] ? lock_release+0x680/0x680 [ 2571.531265] ? ext4_ext_truncate+0x250/0x250 [ 2571.532187] ? selinux_file_permission+0x92/0x520 [ 2571.533187] ? ext4_ext_truncate+0x250/0x250 [ 2571.534113] vfs_fallocate+0x48f/0xda0 [ 2571.534940] ioctl_preallocate+0x192/0x210 [ 2571.535838] ? fiemap_prep+0x220/0x220 [ 2571.536656] ? find_held_lock+0x2c/0x110 [ 2571.537528] do_vfs_ioctl+0xe59/0x10d0 [ 2571.538331] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2571.539428] ? generic_block_fiemap+0x60/0x60 [ 2571.540372] ? lock_downgrade+0x6d0/0x6d0 [ 2571.541253] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2571.542263] ? wait_for_completion_io+0x270/0x270 [ 2571.543282] ? selinux_file_ioctl+0xb6/0x270 [ 2571.544214] __x64_sys_ioctl+0x10c/0x210 [ 2571.545071] do_syscall_64+0x33/0x40 [ 2571.545853] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2571.546939] RIP: 0033:0x7f0b4e5c1b19 [ 2571.547729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.551595] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2571.553195] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2571.554681] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2571.556175] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.557682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.559165] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 15:54:34 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x80000000}) 15:54:34 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5460, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:54:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x6}, 0x0) 15:54:34 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 46) fallocate(r0, 0x0, 0x0, 0x8000) 15:54:34 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="0400000001000000f2970000f41c47487a7bb6e3a141552f589967970cdcce0d27ef03a577fad88ec8876eee72a62394c35fcddc5caca6ae73c57eb9fb6e7ea73deca0bbcdfd32434e1df87066bcaaab5a4f08956c0d763bed197cc28112378518112ffb5e54ee197efba25dac4408cc69ea61b8d4778eca03efa25af63b9d02dfe68f3506af92b7f71df08a7f", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:54:34 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40049409, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2571.738253] FAULT_INJECTION: forcing a failure. [ 2571.738253] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.739591] CPU: 0 PID: 21858 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2571.740385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2571.741321] Call Trace: [ 2571.741631] dump_stack+0x107/0x167 [ 2571.742045] should_fail.cold+0x5/0xa [ 2571.742480] ? create_object.isra.0+0x3a/0xa30 [ 2571.742996] should_failslab+0x5/0x20 [ 2571.743428] kmem_cache_alloc+0x5b/0x310 [ 2571.743894] create_object.isra.0+0x3a/0xa30 [ 2571.744392] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2571.744968] kmem_cache_alloc_trace+0x151/0x320 [ 2571.745500] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2571.746055] __list_lru_init+0x44d/0x890 [ 2571.746517] alloc_super+0x8b8/0xa90 [ 2571.746941] sget_fc+0x110/0x860 [ 2571.747323] ? set_anon_super+0xc0/0xc0 [ 2571.747782] ? pseudo_fs_get_tree+0x20/0x20 [ 2571.748270] get_tree_nodev+0x24/0x1d0 [ 2571.748710] vfs_get_tree+0x8e/0x300 [ 2571.749132] path_mount+0x14ab/0x2200 [ 2571.749562] ? strncpy_from_user+0x9e/0x470 [ 2571.750049] ? finish_automount+0xa90/0xa90 [ 2571.750535] ? getname_flags.part.0+0x1dd/0x4f0 [ 2571.751064] __x64_sys_mount+0x282/0x300 [ 2571.751520] ? copy_mnt_ns+0xa00/0xa00 [ 2571.752038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2571.752818] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2571.753402] do_syscall_64+0x33/0x40 [ 2571.753823] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2571.754401] RIP: 0033:0x7f575796fb19 [ 2571.754830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2571.756908] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2571.757770] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2571.758568] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2571.759368] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2571.760174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2571.760974] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:54:46 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 47) fallocate(r0, 0x0, 0x0, 0x8000) 15:54:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4020940d, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:54:46 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x7, 0x0, 0x0, 0x80000000}) 15:54:46 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:54:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0000000000000000000000000000a139"], 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x188, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e0ee9c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbea4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f6613c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc39b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bac867f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x755b310b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e7c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x147a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1949}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc28fb41}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd23b116}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68525189}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5347}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd292}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7318}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48555fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf144}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcdd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13144339}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe15e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfae8}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fd9aaf0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8781}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9752}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x163409c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74b4db81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78920ecd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd2d2043}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x366e1d9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66075871}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8be1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ca1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f0a0126}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x753e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b4684da}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40051}, 0x80) 15:54:46 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x8}, 0x0) 15:54:46 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 14) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:54:46 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000140)=""/75) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80002008}) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) [ 2584.020122] FAULT_INJECTION: forcing a failure. [ 2584.020122] name failslab, interval 1, probability 0, space 0, times 0 [ 2584.023519] CPU: 0 PID: 21882 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2584.025573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2584.028028] Call Trace: [ 2584.028808] dump_stack+0x107/0x167 [ 2584.029881] should_fail.cold+0x5/0xa [ 2584.030992] ? ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2584.032368] should_failslab+0x5/0x20 [ 2584.033483] kmem_cache_alloc+0x5b/0x310 [ 2584.034685] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2584.036033] ? trace_hardirqs_on+0x5b/0x180 [ 2584.037183] ? kasan_unpoison_shadow+0x33/0x50 [ 2584.038329] ? ext4_cache_extents+0x68/0x2d0 [ 2584.039433] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2584.040725] ? ext4_discard_preallocations+0xd80/0xd80 [ 2584.042038] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2584.043231] ? ext4_inode_to_goal_block+0x320/0x430 [ 2584.044515] ext4_ext_map_blocks+0x1a55/0x5880 [ 2584.045669] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2584.046994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2584.048318] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2584.049445] ? trace_hardirqs_on+0x5b/0x180 [ 2584.050530] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2584.051658] ? finish_task_switch+0x126/0x5d0 [ 2584.052793] ? finish_task_switch+0xef/0x5d0 [ 2584.053901] ? ext4_ext_release+0x10/0x10 [ 2584.054955] ? ext4_map_blocks+0x5cd/0x1910 [ 2584.056060] ? lock_release+0x680/0x680 [ 2584.057062] ? io_schedule_timeout+0x140/0x140 [ 2584.058216] ? find_held_lock+0x2c/0x110 [ 2584.059260] ? down_write_killable+0x180/0x180 [ 2584.060437] ext4_map_blocks+0x63f/0x1910 [ 2584.061493] ? kmem_cache_alloc+0x2a6/0x310 [ 2584.062587] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2584.063724] ? jbd2__journal_start+0xf3/0x7e0 [ 2584.064875] ? __ext4_journal_start_sb+0x214/0x390 [ 2584.066109] ? __ext4_journal_start_sb+0x1db/0x390 [ 2584.067360] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2584.068706] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2584.069928] ? down_write_killable+0x180/0x180 [ 2584.071091] ext4_fallocate+0x415/0x3850 [ 2584.072126] ? ioctl_preallocate+0x192/0x210 [ 2584.073241] ? lock_release+0x680/0x680 [ 2584.074251] ? ext4_ext_truncate+0x250/0x250 [ 2584.075363] ? selinux_file_permission+0x92/0x520 [ 2584.076608] ? ext4_ext_truncate+0x250/0x250 [ 2584.077723] vfs_fallocate+0x48f/0xda0 [ 2584.078719] ioctl_preallocate+0x192/0x210 [ 2584.079785] ? fiemap_prep+0x220/0x220 [ 2584.080755] ? find_held_lock+0x2c/0x110 [ 2584.081794] do_vfs_ioctl+0xe59/0x10d0 [ 2584.082767] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2584.084087] ? generic_block_fiemap+0x60/0x60 [ 2584.085209] ? lock_downgrade+0x6d0/0x6d0 [ 2584.086237] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2584.087446] ? wait_for_completion_io+0x270/0x270 [ 2584.088679] ? selinux_file_ioctl+0xb6/0x270 [ 2584.089786] __x64_sys_ioctl+0x10c/0x210 [ 2584.090804] do_syscall_64+0x33/0x40 [ 2584.091747] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2584.093032] RIP: 0033:0x7f0b4e5c1b19 [ 2584.093964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2584.098514] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2584.100417] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2584.102199] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2584.103983] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2584.105760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2584.107540] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 15:54:46 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40087602, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:54:46 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0xff, 0x5b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x22004000}, 0x4045) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 2584.131327] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 2584.138105] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 15:54:46 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 15) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:54:46 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4020940d, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2584.229074] FAULT_INJECTION: forcing a failure. [ 2584.229074] name failslab, interval 1, probability 0, space 0, times 0 [ 2584.230459] CPU: 1 PID: 21898 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2584.231489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2584.232508] Call Trace: [ 2584.232823] dump_stack+0x107/0x167 [ 2584.233247] should_fail.cold+0x5/0xa [ 2584.233698] ? create_object.isra.0+0x3a/0xa30 [ 2584.234226] should_failslab+0x5/0x20 [ 2584.234678] kmem_cache_alloc+0x5b/0x310 [ 2584.235156] create_object.isra.0+0x3a/0xa30 [ 2584.235669] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2584.236376] kmem_cache_alloc+0x159/0x310 [ 2584.236970] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2584.237510] ? trace_hardirqs_on+0x5b/0x180 [ 2584.238023] ? kasan_unpoison_shadow+0x33/0x50 [ 2584.238555] ? ext4_cache_extents+0x68/0x2d0 [ 2584.239072] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2584.239662] ? ext4_discard_preallocations+0xd80/0xd80 [ 2584.240280] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2584.240826] ? ext4_inode_to_goal_block+0x320/0x430 [ 2584.241409] ext4_ext_map_blocks+0x1a55/0x5880 [ 2584.241955] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2584.242563] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2584.243175] ? ext4_ext_release+0x10/0x10 [ 2584.243660] ? ext4_map_blocks+0x5cd/0x1910 [ 2584.244173] ? lock_release+0x680/0x680 [ 2584.244631] ? ext4_es_lookup_extent+0x485/0xa80 [ 2584.245176] ? find_held_lock+0x2c/0x110 [ 2584.245653] ? down_write_killable+0x180/0x180 [ 2584.246186] ext4_map_blocks+0x63f/0x1910 [ 2584.246669] ? kmem_cache_alloc+0x2a6/0x310 [ 2584.247170] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2584.247690] ? jbd2__journal_start+0xf3/0x7e0 [ 2584.248217] ? __ext4_journal_start_sb+0x214/0x390 [ 2584.248782] ? __ext4_journal_start_sb+0x1db/0x390 [ 2584.249346] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2584.249960] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2584.250532] ? down_write_killable+0x180/0x180 [ 2584.251065] ext4_fallocate+0x415/0x3850 [ 2584.251541] ? ioctl_preallocate+0x192/0x210 [ 2584.252054] ? lock_release+0x680/0x680 [ 2584.252515] ? ext4_ext_truncate+0x250/0x250 [ 2584.253024] ? selinux_file_permission+0x92/0x520 [ 2584.253578] ? ext4_ext_truncate+0x250/0x250 [ 2584.254076] vfs_fallocate+0x48f/0xda0 [ 2584.254530] ioctl_preallocate+0x192/0x210 [ 2584.255011] ? fiemap_prep+0x220/0x220 [ 2584.255453] ? find_held_lock+0x2c/0x110 [ 2584.255951] do_vfs_ioctl+0xe59/0x10d0 [ 2584.256401] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2584.257012] ? generic_block_fiemap+0x60/0x60 [ 2584.257527] ? lock_downgrade+0x6d0/0x6d0 [ 2584.257998] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2584.258558] ? wait_for_completion_io+0x270/0x270 [ 2584.259123] ? selinux_file_ioctl+0xb6/0x270 [ 2584.259640] __x64_sys_ioctl+0x10c/0x210 [ 2584.260116] do_syscall_64+0x33/0x40 [ 2584.260548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2584.261142] RIP: 0033:0x7f0b4e5c1b19 [ 2584.261571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2584.263674] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2584.264550] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2584.265367] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2584.266180] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2584.266997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2584.267824] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2584.271091] FAULT_INJECTION: forcing a failure. [ 2584.271091] name failslab, interval 1, probability 0, space 0, times 0 [ 2584.272395] CPU: 1 PID: 21875 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2584.273180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2584.274117] Call Trace: [ 2584.274420] dump_stack+0x107/0x167 [ 2584.274835] should_fail.cold+0x5/0xa [ 2584.275272] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2584.275853] should_failslab+0x5/0x20 [ 2584.276295] kmem_cache_alloc_trace+0x55/0x320 [ 2584.276820] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2584.277392] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2584.277966] __list_lru_init+0x44d/0x890 [ 2584.278429] alloc_super+0x8b8/0xa90 [ 2584.278878] sget_fc+0x110/0x860 [ 2584.279258] ? set_anon_super+0xc0/0xc0 [ 2584.279717] ? pseudo_fs_get_tree+0x20/0x20 [ 2584.280237] get_tree_nodev+0x24/0x1d0 [ 2584.280692] vfs_get_tree+0x8e/0x300 [ 2584.281114] path_mount+0x14ab/0x2200 [ 2584.281552] ? strncpy_from_user+0x9e/0x470 [ 2584.282043] ? finish_automount+0xa90/0xa90 [ 2584.282531] ? getname_flags.part.0+0x1dd/0x4f0 [ 2584.283074] __x64_sys_mount+0x282/0x300 [ 2584.283530] ? copy_mnt_ns+0xa00/0xa00 [ 2584.283982] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2584.284576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2584.285159] do_syscall_64+0x33/0x40 [ 2584.285582] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2584.286173] RIP: 0033:0x7f575796fb19 [ 2584.286602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2584.288715] RSP: 002b:00007f5754ee5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2584.289575] RAX: ffffffffffffffda RBX: 00007f5757a82f60 RCX: 00007f575796fb19 [ 2584.290383] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2584.291278] RBP: 00007f5754ee51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2584.292246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2584.293067] R13: 00007ffc26ef80cf R14: 00007f5754ee5300 R15: 0000000000022000 15:54:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x114, 0x0, 0x304, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46189543}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xcc7058c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8532}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x96a1f13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x445f6a4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x688c5c5a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2216}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf41d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7be55dc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74b45e25}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b16f9a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa837}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x699c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70ffba56}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4001) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c000040261a96ba7064cc027ec362bae300ba175870de99db85fd688e5bbbcd91cdf64d89931ea5dc7e1a7d45e381dfe201454651f3e5c8b0000492580c167fe365ff912a565a6100c855ac703336d8a50217a3aa7d88c0bdf06e3df6413d83d330126a5944dca3faef1b7312dbb9adb08335b1120c5be3d86e59c89b717221715a89d48c4b4274b48fc79ddc5349bdcf4fbf37b460e07fdac2d3f4b76bb22dda1920096a79b5b6f64860ce540079d9f1", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fcdbdf251b0000000c0006000200000000000000100023800c0004000201aaaaaaaaaaaa0c0006000200000002000000100023800c0004000203aaaaaaaaaaaa100023800c0004000000000000000000100023800c0004000200aaaaaaaaaaaa"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x44}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xb, 0x1, '--\'\'[+\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x40010) 15:54:47 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000001c0)={0x8fc872d26340487, 0x80, 0x5, 0x6, 0x2, 0x9, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x9}, 0x20, 0x5, 0x4, 0x2, 0x5, 0xe64, 0x1, 0x0, 0x1000, 0x0, 0x1}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002e2f66696c65312f6669e405fb1d"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:55:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x9}, 0x0) 15:55:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:55:06 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x8, 0x0, 0x0, 0x80000000}) 15:55:06 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 16) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:55:06 executing program 4: getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0xffff, &(0x7f0000000080)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x1, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0xffffffffffffff30}, 0x1, 0x0, 0x0, 0x4001}, 0x20481c1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6a7f93e4b8871579e8cc1b0c20b8f27021cbe8562bce7a0d4daa47da7ef23eef8f16c1fad0522e8af239062f05ac68ad28f6db9aedcb008e64f0ba15c2fe19669a223974f3ee03333ae96fb1eb317dc90e08c094a4d071c0b0fac90aca7ae678a9205b19057121d0e438f0d21819569ce6b7a0279a748f5777aca7b758cc667fe53d9514716b6ee5e71a402c061789e64383587c66ebdd832752c429631d016e70fa3e6757c43cb8c0cd2decdbc40b", @ANYRES16=r1, @ANYBLOB="0004feffffff0000000030000000"], 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000400)={0x100000001, 0x7, 0x582}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r8, 0x820, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd19}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20000040) 15:55:06 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 48) fallocate(r0, 0x0, 0x0, 0x8000) 15:55:06 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x32b, 0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:55:07 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2604.271878] FAULT_INJECTION: forcing a failure. [ 2604.271878] name failslab, interval 1, probability 0, space 0, times 0 [ 2604.273237] CPU: 0 PID: 21935 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2604.273988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2604.274879] Call Trace: [ 2604.275175] dump_stack+0x107/0x167 [ 2604.275571] should_fail.cold+0x5/0xa [ 2604.275995] ? __es_insert_extent+0xed1/0x1370 [ 2604.276493] should_failslab+0x5/0x20 [ 2604.276911] kmem_cache_alloc+0x5b/0x310 [ 2604.277351] __es_insert_extent+0xed1/0x1370 [ 2604.277835] ext4_es_insert_extent+0x45d/0xf10 [ 2604.278330] ? ext4_es_is_delayed+0x38/0x50 [ 2604.278797] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2604.279264] ? do_raw_read_unlock+0x3b/0x70 [ 2604.279734] ? _raw_read_unlock+0x1a/0x30 [ 2604.280212] ? ext4_es_scan_range+0x116/0x240 [ 2604.280695] ? ext4_es_find_extent_range+0x460/0x460 [ 2604.281242] ? down_write_killable+0x180/0x180 [ 2604.281743] ext4_map_blocks+0x80b/0x1910 [ 2604.282197] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2604.282682] ? jbd2__journal_start+0xf3/0x7e0 [ 2604.283166] ? __ext4_journal_start_sb+0x214/0x390 [ 2604.283690] ? __ext4_journal_start_sb+0x1db/0x390 [ 2604.284233] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2604.284802] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2604.285325] ? down_write_killable+0x180/0x180 [ 2604.285822] ext4_fallocate+0x415/0x3850 [ 2604.286262] ? ioctl_preallocate+0x192/0x210 [ 2604.286738] ? lock_release+0x680/0x680 [ 2604.287168] ? ext4_ext_truncate+0x250/0x250 [ 2604.287642] ? selinux_file_permission+0x92/0x520 [ 2604.288167] ? ext4_ext_truncate+0x250/0x250 [ 2604.288646] vfs_fallocate+0x48f/0xda0 [ 2604.289071] ioctl_preallocate+0x192/0x210 [ 2604.289524] ? fiemap_prep+0x220/0x220 [ 2604.289940] ? find_held_lock+0x2c/0x110 [ 2604.290388] do_vfs_ioctl+0xe59/0x10d0 [ 2604.290806] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2604.291367] ? generic_block_fiemap+0x60/0x60 [ 2604.291849] ? lock_downgrade+0x6d0/0x6d0 [ 2604.292299] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2604.292818] ? wait_for_completion_io+0x270/0x270 [ 2604.293339] ? selinux_file_ioctl+0xb6/0x270 [ 2604.293819] __x64_sys_ioctl+0x10c/0x210 [ 2604.294257] do_syscall_64+0x33/0x40 [ 2604.294658] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2604.295208] RIP: 0033:0x7f0b4e5c1b19 [ 2604.295607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2604.297588] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2604.298404] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2604.299167] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2604.299931] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2604.300702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2604.301464] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 15:55:07 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:55:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x484}, 0x8801) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:autofs_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000001}, 0x8000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x408, 0x70bd28, 0x80000000}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) [ 2604.352303] FAULT_INJECTION: forcing a failure. [ 2604.352303] name failslab, interval 1, probability 0, space 0, times 0 [ 2604.353677] CPU: 0 PID: 21937 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2604.354522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2604.355413] Call Trace: [ 2604.355706] dump_stack+0x107/0x167 [ 2604.356111] should_fail.cold+0x5/0xa [ 2604.356525] ? create_object.isra.0+0x3a/0xa30 [ 2604.357021] should_failslab+0x5/0x20 [ 2604.357431] kmem_cache_alloc+0x5b/0x310 [ 2604.357869] ? mark_held_locks+0x9e/0xe0 [ 2604.358307] create_object.isra.0+0x3a/0xa30 [ 2604.358779] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2604.359327] kmem_cache_alloc_trace+0x151/0x320 [ 2604.359831] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2604.360368] __list_lru_init+0x44d/0x890 [ 2604.360808] alloc_super+0x8b8/0xa90 [ 2604.361211] sget_fc+0x110/0x860 [ 2604.361577] ? set_anon_super+0xc0/0xc0 [ 2604.362008] ? pseudo_fs_get_tree+0x20/0x20 [ 2604.362469] get_tree_nodev+0x24/0x1d0 [ 2604.362889] vfs_get_tree+0x8e/0x300 [ 2604.363288] path_mount+0x14ab/0x2200 [ 2604.363699] ? strncpy_from_user+0x9e/0x470 [ 2604.364169] ? finish_automount+0xa90/0xa90 [ 2604.364632] ? getname_flags.part.0+0x1dd/0x4f0 [ 2604.365138] __x64_sys_mount+0x282/0x300 [ 2604.365573] ? copy_mnt_ns+0xa00/0xa00 [ 2604.365995] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2604.366561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2604.367116] do_syscall_64+0x33/0x40 [ 2604.367517] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2604.368077] RIP: 0033:0x7f575796fb19 [ 2604.368477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2604.370440] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2604.371254] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2604.372023] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2604.372785] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2604.373553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2604.374316] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:55:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0xf}, 0x0) 15:55:07 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:55:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:55:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:55:21 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x2811, 0x0, 0x80, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="0156", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x3000) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:55:21 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 49) fallocate(r0, 0x0, 0x0, 0x8000) 15:55:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x300}, 0x0) 15:55:21 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 17) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:55:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x44}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4004000) 15:55:21 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x9, 0x0, 0x0, 0x80000000}) [ 2618.310159] FAULT_INJECTION: forcing a failure. [ 2618.310159] name failslab, interval 1, probability 0, space 0, times 0 [ 2618.313670] CPU: 1 PID: 21976 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2618.315537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2618.317802] Call Trace: [ 2618.318534] dump_stack+0x107/0x167 [ 2618.319537] should_fail.cold+0x5/0xa [ 2618.320612] ? create_object.isra.0+0x3a/0xa30 [ 2618.321856] should_failslab+0x5/0x20 [ 2618.322920] kmem_cache_alloc+0x5b/0x310 [ 2618.324041] create_object.isra.0+0x3a/0xa30 [ 2618.325284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2618.326680] kmem_cache_alloc+0x159/0x310 [ 2618.327821] __es_insert_extent+0xed1/0x1370 [ 2618.329047] ext4_es_insert_extent+0x45d/0xf10 [ 2618.330096] ? ext4_es_is_delayed+0x38/0x50 [ 2618.331284] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2618.332481] ? do_raw_read_unlock+0x3b/0x70 [ 2618.333660] ? _raw_read_unlock+0x1a/0x30 [ 2618.334800] ? ext4_es_scan_range+0x116/0x240 [ 2618.336027] ? ext4_es_find_extent_range+0x460/0x460 [ 2618.336082] FAULT_INJECTION: forcing a failure. [ 2618.336082] name failslab, interval 1, probability 0, space 0, times 0 [ 2618.337454] ? down_write_killable+0x180/0x180 [ 2618.337498] ext4_map_blocks+0x80b/0x1910 [ 2618.341135] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2618.342383] ? jbd2__journal_start+0xf3/0x7e0 [ 2618.343604] ? __ext4_journal_start_sb+0x214/0x390 [ 2618.344948] ? __ext4_journal_start_sb+0x1db/0x390 [ 2618.346324] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2618.347770] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2618.349131] ? down_write_killable+0x180/0x180 [ 2618.350402] ext4_fallocate+0x415/0x3850 [ 2618.351531] ? ioctl_preallocate+0x192/0x210 [ 2618.352754] ? lock_release+0x680/0x680 [ 2618.353857] ? ext4_ext_truncate+0x250/0x250 [ 2618.355057] ? selinux_file_permission+0x92/0x520 [ 2618.356412] ? ext4_ext_truncate+0x250/0x250 [ 2618.357616] vfs_fallocate+0x48f/0xda0 [ 2618.358713] ioctl_preallocate+0x192/0x210 [ 2618.359863] ? fiemap_prep+0x220/0x220 [ 2618.360950] ? find_held_lock+0x2c/0x110 [ 2618.362105] do_vfs_ioctl+0xe59/0x10d0 [ 2618.363179] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2618.364641] ? generic_block_fiemap+0x60/0x60 [ 2618.365869] ? lock_downgrade+0x6d0/0x6d0 [ 2618.367014] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2618.368366] ? wait_for_completion_io+0x270/0x270 [ 2618.369714] ? selinux_file_ioctl+0xb6/0x270 [ 2618.370940] __x64_sys_ioctl+0x10c/0x210 [ 2618.372063] do_syscall_64+0x33/0x40 [ 2618.372974] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2618.374431] RIP: 0033:0x7f0b4e5c1b19 [ 2618.375455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2618.380411] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2618.382503] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2618.384440] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2618.386373] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2618.388328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2618.390293] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2618.392267] CPU: 0 PID: 21981 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2618.393039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2618.394020] Call Trace: [ 2618.394322] dump_stack+0x107/0x167 [ 2618.394731] should_fail.cold+0x5/0xa [ 2618.395186] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2618.395787] should_failslab+0x5/0x20 [ 2618.396242] kmem_cache_alloc_trace+0x55/0x320 [ 2618.396774] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2618.397379] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2618.397967] __list_lru_init+0x44d/0x890 [ 2618.398447] alloc_super+0x8b8/0xa90 [ 2618.398883] sget_fc+0x110/0x860 [ 2618.399289] ? set_anon_super+0xc0/0xc0 [ 2618.399755] ? pseudo_fs_get_tree+0x20/0x20 [ 2618.400281] get_tree_nodev+0x24/0x1d0 [ 2618.400736] vfs_get_tree+0x8e/0x300 [ 2618.401173] path_mount+0x14ab/0x2200 [ 2618.401632] ? strncpy_from_user+0x9e/0x470 [ 2618.402147] ? finish_automount+0xa90/0xa90 [ 2618.402650] ? getname_flags.part.0+0x1dd/0x4f0 [ 2618.403203] __x64_sys_mount+0x282/0x300 [ 2618.403682] ? copy_mnt_ns+0xa00/0xa00 [ 2618.404150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2618.404762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2618.405378] do_syscall_64+0x33/0x40 [ 2618.405814] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2618.406412] RIP: 0033:0x7f575796fb19 [ 2618.406857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2618.409013] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2618.409907] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2618.410753] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2618.411597] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2618.412436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2618.413287] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:55:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x4) 15:55:21 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:55:21 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="01f96f000100000018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1/file0\x00']) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:55:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x600}, 0x0) 15:55:21 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 18) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:55:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100002b0000000a0001007770616e34000000"], 0x20}}, 0x0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r5) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40004041}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r3, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x810}, 0x8000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r4) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x1}, 0x14}}, 0x0) 15:55:21 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2618.638765] FAULT_INJECTION: forcing a failure. [ 2618.638765] name failslab, interval 1, probability 0, space 0, times 0 [ 2618.641249] CPU: 0 PID: 22001 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2618.642714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2618.644472] Call Trace: [ 2618.645034] dump_stack+0x107/0x167 [ 2618.645819] should_fail.cold+0x5/0xa [ 2618.646624] ? jbd2__journal_start+0x190/0x7e0 [ 2618.647593] should_failslab+0x5/0x20 [ 2618.648403] kmem_cache_alloc+0x5b/0x310 [ 2618.649265] jbd2__journal_start+0x190/0x7e0 [ 2618.650199] __ext4_journal_start_sb+0x214/0x390 [ 2618.651206] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2618.652323] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2618.653346] ? down_write_killable+0x180/0x180 [ 2618.654324] ext4_fallocate+0x415/0x3850 [ 2618.655181] ? ioctl_preallocate+0x192/0x210 [ 2618.656135] ? lock_release+0x680/0x680 [ 2618.656982] ? ext4_ext_truncate+0x250/0x250 [ 2618.657909] ? selinux_file_permission+0x92/0x520 [ 2618.658937] ? ext4_ext_truncate+0x250/0x250 [ 2618.659873] vfs_fallocate+0x48f/0xda0 [ 2618.660717] ioctl_preallocate+0x192/0x210 [ 2618.661607] ? fiemap_prep+0x220/0x220 [ 2618.662429] ? find_held_lock+0x2c/0x110 [ 2618.663328] do_vfs_ioctl+0xe59/0x10d0 [ 2618.664160] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2618.665297] ? generic_block_fiemap+0x60/0x60 [ 2618.666325] ? lock_downgrade+0x6d0/0x6d0 [ 2618.667200] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2618.668230] ? wait_for_completion_io+0x270/0x270 [ 2618.669263] ? selinux_file_ioctl+0xb6/0x270 [ 2618.670209] __x64_sys_ioctl+0x10c/0x210 [ 2618.671073] do_syscall_64+0x33/0x40 [ 2618.671860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2618.672949] RIP: 0033:0x7f0b4e5c1b19 [ 2618.673734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2618.677634] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2618.679250] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2618.680762] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2618.682264] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2618.683766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2618.685273] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 [ 2634.026309] FAULT_INJECTION: forcing a failure. [ 2634.026309] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.027717] CPU: 0 PID: 22017 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2634.028508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2634.029410] Call Trace: [ 2634.029705] dump_stack+0x107/0x167 [ 2634.030096] should_fail.cold+0x5/0xa 15:55:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000b4", @ANYRES16=r1, @ANYBLOB="010000000000000000003000001e"], 0x14}}, 0x0) 15:55:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x900}, 0x0) 15:55:36 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x80086601, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:55:36 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 19) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:55:36 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xa, 0x0, 0x0, 0x80000000}) 15:55:36 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:55:36 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 50) fallocate(r0, 0x0, 0x0, 0x8000) [ 2634.030509] ? create_object.isra.0+0x3a/0xa30 [ 2634.031224] should_failslab+0x5/0x20 [ 2634.031635] kmem_cache_alloc+0x5b/0x310 [ 2634.032073] create_object.isra.0+0x3a/0xa30 [ 2634.032557] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2634.033108] kmem_cache_alloc+0x159/0x310 [ 2634.033557] jbd2__journal_start+0x190/0x7e0 [ 2634.034032] __ext4_journal_start_sb+0x214/0x390 [ 2634.034541] ext4_alloc_file_blocks.isra.0+0x2b0/0xb40 [ 2634.035108] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2634.035626] ? down_write_killable+0x180/0x180 [ 2634.036145] ext4_fallocate+0x415/0x3850 [ 2634.036595] ? ioctl_preallocate+0x192/0x210 [ 2634.037069] ? lock_release+0x680/0x680 [ 2634.037497] ? ext4_ext_truncate+0x250/0x250 [ 2634.037967] ? selinux_file_permission+0x92/0x520 [ 2634.038483] ? ext4_ext_truncate+0x250/0x250 [ 2634.038957] vfs_fallocate+0x48f/0xda0 [ 2634.039399] ioctl_preallocate+0x192/0x210 [ 2634.039854] ? fiemap_prep+0x220/0x220 [ 2634.040310] ? find_held_lock+0x2c/0x110 [ 2634.040755] do_vfs_ioctl+0xe59/0x10d0 [ 2634.041172] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2634.041761] ? generic_block_fiemap+0x60/0x60 [ 2634.042239] ? lock_downgrade+0x6d0/0x6d0 [ 2634.042707] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2634.043224] ? wait_for_completion_io+0x270/0x270 [ 2634.043743] ? selinux_file_ioctl+0xb6/0x270 [ 2634.044219] __x64_sys_ioctl+0x10c/0x210 [ 2634.044690] do_syscall_64+0x33/0x40 [ 2634.045093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2634.045640] RIP: 0033:0x7f0b4e5c1b19 [ 2634.046040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2634.047995] RSP: 002b:00007f0b4bb37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2634.048816] RAX: ffffffffffffffda RBX: 00007f0b4e6d4f60 RCX: 00007f0b4e5c1b19 [ 2634.049626] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2634.050387] RBP: 00007f0b4bb371d0 R08: 0000000000000000 R09: 0000000000000000 [ 2634.051195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2634.051958] R13: 00007ffc23999a9f R14: 00007f0b4bb37300 R15: 0000000000022000 15:55:36 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) shmctl$SHM_LOCK(r3, 0xb) [ 2634.081561] FAULT_INJECTION: forcing a failure. [ 2634.081561] name failslab, interval 1, probability 0, space 0, times 0 [ 2634.082853] CPU: 0 PID: 22034 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2634.083589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2634.084493] Call Trace: [ 2634.084796] dump_stack+0x107/0x167 [ 2634.085193] should_fail.cold+0x5/0xa [ 2634.085602] ? create_object.isra.0+0x3a/0xa30 [ 2634.086089] should_failslab+0x5/0x20 [ 2634.086518] kmem_cache_alloc+0x5b/0x310 [ 2634.086955] ? mark_held_locks+0x9e/0xe0 [ 2634.087391] create_object.isra.0+0x3a/0xa30 [ 2634.087859] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2634.088409] kmem_cache_alloc_trace+0x151/0x320 [ 2634.088911] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2634.089437] __list_lru_init+0x44d/0x890 [ 2634.089881] alloc_super+0x8b8/0xa90 [ 2634.090282] sget_fc+0x110/0x860 [ 2634.090644] ? set_anon_super+0xc0/0xc0 [ 2634.091095] ? pseudo_fs_get_tree+0x20/0x20 [ 2634.091557] get_tree_nodev+0x24/0x1d0 [ 2634.091976] vfs_get_tree+0x8e/0x300 [ 2634.092406] path_mount+0x14ab/0x2200 [ 2634.092819] ? strncpy_from_user+0x9e/0x470 [ 2634.093279] ? finish_automount+0xa90/0xa90 [ 2634.093739] ? getname_flags.part.0+0x1dd/0x4f0 [ 2634.094383] __x64_sys_mount+0x282/0x300 [ 2634.094819] ? copy_mnt_ns+0xa00/0xa00 [ 2634.095238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2634.095799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2634.096359] do_syscall_64+0x33/0x40 [ 2634.096789] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2634.097336] RIP: 0033:0x7f575796fb19 [ 2634.097756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2634.099711] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2634.100590] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 15:55:36 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x80087601, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2634.101400] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2634.102337] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2634.103139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2634.103949] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:55:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x20, 0x0, 0x25dfdbfa}, 0xff14}}, 0x0) 15:55:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0xf00}, 0x0) 15:55:37 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0045878, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:55:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x30000}, 0x0) 15:55:37 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ff3000/0xd000)=nil, 0x0) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:55:37 executing program 4: modify_ldt$write(0x1, &(0x7f0000000240)={0x401, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000000080001"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x40) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100000083090000000000000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 15:55:37 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 20) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 2638.890782] Bluetooth: hci2: command 0x0409 tx timeout [ 2640.938733] Bluetooth: hci2: command 0x041b tx timeout [ 2642.986689] Bluetooth: hci2: command 0x040f tx timeout [ 2643.532225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2643.534383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2643.537514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2643.591136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2643.593270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2643.597132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2643.737026] FAULT_INJECTION: forcing a failure. [ 2643.737026] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.739507] CPU: 0 PID: 22525 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2643.740991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2643.742762] Call Trace: [ 2643.743330] dump_stack+0x107/0x167 [ 2643.744113] should_fail.cold+0x5/0xa [ 2643.744940] ? ext4_find_extent+0xa77/0xd70 [ 2643.745863] should_failslab+0x5/0x20 [ 2643.746676] __kmalloc+0x72/0x390 [ 2643.747424] ext4_find_extent+0xa77/0xd70 [ 2643.748328] ext4_ext_map_blocks+0x1c8/0x5880 [ 2643.749309] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2643.750433] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2643.751562] ? ext4_ext_release+0x10/0x10 [ 2643.752471] ? ext4_map_blocks+0x5cd/0x1910 [ 2643.753401] ? lock_release+0x680/0x680 [ 2643.754261] ? ext4_es_lookup_extent+0x485/0xa80 [ 2643.755273] ? lock_downgrade+0x6d0/0x6d0 [ 2643.756178] ? down_write+0xe0/0x160 [ 2643.756981] ? down_write_killable+0x180/0x180 [ 2643.757974] ext4_map_blocks+0x63f/0x1910 [ 2643.758868] ? kmem_cache_alloc+0x2a6/0x310 [ 2643.759796] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2643.760765] ? jbd2__journal_start+0xf3/0x7e0 [ 2643.761729] ? __ext4_journal_start_sb+0x214/0x390 [ 2643.762773] ? __ext4_journal_start_sb+0x1db/0x390 [ 2643.763834] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2643.764978] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2643.766014] ? down_write_killable+0x180/0x180 [ 2643.767002] ext4_fallocate+0x415/0x3850 [ 2643.767873] ? ioctl_preallocate+0x192/0x210 [ 2643.768829] ? lock_release+0x680/0x680 [ 2643.769684] ? ext4_ext_truncate+0x250/0x250 [ 2643.770628] ? selinux_file_permission+0x92/0x520 [ 2643.771664] ? ext4_ext_truncate+0x250/0x250 [ 2643.772618] vfs_fallocate+0x48f/0xda0 [ 2643.773463] ioctl_preallocate+0x192/0x210 [ 2643.774369] ? fiemap_prep+0x220/0x220 [ 2643.775203] ? find_held_lock+0x2c/0x110 [ 2643.776092] do_vfs_ioctl+0xe59/0x10d0 [ 2643.776933] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2643.778052] ? generic_block_fiemap+0x60/0x60 [ 2643.779011] ? lock_downgrade+0x6d0/0x6d0 [ 2643.779897] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2643.780938] ? wait_for_completion_io+0x270/0x270 [ 2643.781982] ? selinux_file_ioctl+0xb6/0x270 [ 2643.782937] __x64_sys_ioctl+0x10c/0x210 [ 2643.783811] do_syscall_64+0x33/0x40 [ 2643.784621] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2643.785719] RIP: 0033:0x7efc867d9b19 [ 2643.786520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2643.790483] RSP: 002b:00007efc83d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2643.792115] RAX: ffffffffffffffda RBX: 00007efc868ecf60 RCX: 00007efc867d9b19 [ 2643.793663] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2643.795193] RBP: 00007efc83d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2643.796725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2643.798252] R13: 00007ffe71c453af R14: 00007efc83d4f300 R15: 0000000000022000 [ 2645.034690] Bluetooth: hci2: command 0x0419 tx timeout [ 2649.450707] Bluetooth: hci7: command 0x0406 tx timeout 15:56:00 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 21) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:56:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x60000}, 0x0) 15:56:00 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xb, 0x0, 0x0, 0x80000000}) 15:56:00 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x80086601, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:56:00 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0045878, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:56:00 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1/file0\x00'}) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/75) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) preadv(r4, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000400)=""/10, 0xa}], 0x8, 0x7fffffff, 0x3) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:56:00 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 51) fallocate(r0, 0x0, 0x0, 0x8000) 15:56:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000034c17f713888797e0100000000000030000000"], 0x14}}, 0x0) [ 2657.557151] FAULT_INJECTION: forcing a failure. [ 2657.557151] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.559766] CPU: 0 PID: 22542 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2657.561210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2657.562941] Call Trace: [ 2657.563494] dump_stack+0x107/0x167 [ 2657.564266] should_fail.cold+0x5/0xa [ 2657.565075] ? create_object.isra.0+0x3a/0xa30 [ 2657.566045] should_failslab+0x5/0x20 [ 2657.566841] kmem_cache_alloc+0x5b/0x310 [ 2657.567689] ? lock_chain_count+0x20/0x20 [ 2657.568575] create_object.isra.0+0x3a/0xa30 [ 2657.569486] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2657.570547] __kmalloc+0x16e/0x390 [ 2657.571301] ext4_find_extent+0xa77/0xd70 [ 2657.572192] ext4_ext_map_blocks+0x1c8/0x5880 [ 2657.573158] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2657.574255] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2657.575358] ? ext4_ext_release+0x10/0x10 [ 2657.576230] ? ext4_map_blocks+0x5cd/0x1910 [ 2657.577147] ? lock_release+0x680/0x680 [ 2657.577991] ? ext4_es_lookup_extent+0x485/0xa80 [ 2657.578973] ? lock_downgrade+0x6d0/0x6d0 [ 2657.579860] ? down_write+0xe0/0x160 [ 2657.580644] ? down_write_killable+0x180/0x180 [ 2657.581629] ext4_map_blocks+0x63f/0x1910 [ 2657.582506] ? kmem_cache_alloc+0x2a6/0x310 [ 2657.583417] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2657.584353] ? jbd2__journal_start+0xf3/0x7e0 [ 2657.585335] ? __ext4_journal_start_sb+0x214/0x390 [ 2657.586353] ? __ext4_journal_start_sb+0x1db/0x390 [ 2657.587387] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2657.588495] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2657.589512] ? down_write_killable+0x180/0x180 [ 2657.590484] ext4_fallocate+0x415/0x3850 [ 2657.591328] ? ioctl_preallocate+0x192/0x210 [ 2657.592248] ? lock_release+0x680/0x680 [ 2657.593090] ? ext4_ext_truncate+0x250/0x250 [ 2657.594002] ? selinux_file_permission+0x92/0x520 [ 2657.595020] ? ext4_ext_truncate+0x250/0x250 [ 2657.595937] vfs_fallocate+0x48f/0xda0 [ 2657.596771] ioctl_preallocate+0x192/0x210 [ 2657.597665] ? fiemap_prep+0x220/0x220 [ 2657.598471] ? find_held_lock+0x2c/0x110 [ 2657.599353] do_vfs_ioctl+0xe59/0x10d0 [ 2657.600175] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2657.601275] ? generic_block_fiemap+0x60/0x60 [ 2657.602209] ? lock_downgrade+0x6d0/0x6d0 [ 2657.603068] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2657.604087] ? wait_for_completion_io+0x270/0x270 [ 2657.605110] ? selinux_file_ioctl+0xb6/0x270 [ 2657.606043] __x64_sys_ioctl+0x10c/0x210 [ 2657.606898] do_syscall_64+0x33/0x40 [ 2657.607687] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2657.608779] RIP: 0033:0x7efc867d9b19 [ 2657.609562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2657.613423] RSP: 002b:00007efc83d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2657.615033] RAX: ffffffffffffffda RBX: 00007efc868ecf60 RCX: 00007efc867d9b19 [ 2657.616529] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2657.618283] RBP: 00007efc83d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2657.620096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2657.621927] R13: 00007ffe71c453af R14: 00007efc83d4f300 R15: 0000000000022000 [ 2657.655255] FAULT_INJECTION: forcing a failure. [ 2657.655255] name failslab, interval 1, probability 0, space 0, times 0 [ 2657.657544] CPU: 1 PID: 22549 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2657.658870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2657.660455] Call Trace: [ 2657.660975] dump_stack+0x107/0x167 [ 2657.661675] should_fail.cold+0x5/0xa [ 2657.662404] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2657.663368] should_failslab+0x5/0x20 [ 2657.664093] kmem_cache_alloc_trace+0x55/0x320 [ 2657.664972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2657.665941] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2657.666887] __list_lru_init+0x44d/0x890 [ 2657.667680] alloc_super+0x8b8/0xa90 [ 2657.668394] sget_fc+0x110/0x860 [ 2657.669047] ? set_anon_super+0xc0/0xc0 [ 2657.669810] ? pseudo_fs_get_tree+0x20/0x20 [ 2657.670629] get_tree_nodev+0x24/0x1d0 [ 2657.671364] vfs_get_tree+0x8e/0x300 [ 2657.672087] path_mount+0x14ab/0x2200 [ 2657.672844] ? strncpy_from_user+0x9e/0x470 [ 2657.673667] ? finish_automount+0xa90/0xa90 [ 2657.674488] ? getname_flags.part.0+0x1dd/0x4f0 [ 2657.675389] __x64_sys_mount+0x282/0x300 [ 2657.676168] ? copy_mnt_ns+0xa00/0xa00 [ 2657.676920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2657.677920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2657.678897] do_syscall_64+0x33/0x40 [ 2657.679610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2657.680590] RIP: 0033:0x7f575796fb19 [ 2657.681293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2657.684777] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2657.686204] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2657.687551] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 15:56:00 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:56:00 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000da4daa5254234af7"], 0x14}}, 0x0) [ 2657.688916] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2657.690515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2657.691861] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:56:00 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x80087601, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:56:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x80000}, 0x0) 15:56:00 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x80000000}) 15:56:00 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0045878, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:56:00 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc020660b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:56:00 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) 15:56:00 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 22) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:56:00 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 52) fallocate(r0, 0x0, 0x0, 0x8000) 15:56:00 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc, 0x0, 0x0, 0x80000000}) 15:56:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) 15:56:00 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0045878, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2658.034146] FAULT_INJECTION: forcing a failure. [ 2658.034146] name failslab, interval 1, probability 0, space 0, times 0 [ 2658.035934] CPU: 1 PID: 22584 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2658.036993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2658.038209] Call Trace: [ 2658.038622] dump_stack+0x107/0x167 [ 2658.039176] should_fail.cold+0x5/0xa [ 2658.039760] ? create_object.isra.0+0x3a/0xa30 [ 2658.040450] should_failslab+0x5/0x20 [ 2658.041043] kmem_cache_alloc+0x5b/0x310 [ 2658.041654] ? mark_held_locks+0x9e/0xe0 [ 2658.042273] create_object.isra.0+0x3a/0xa30 [ 2658.042915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2658.043674] kmem_cache_alloc_trace+0x151/0x320 [ 2658.044377] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2658.045126] __list_lru_init+0x44d/0x890 [ 2658.045738] alloc_super+0x8b8/0xa90 [ 2658.046302] sget_fc+0x110/0x860 [ 2658.046801] ? set_anon_super+0xc0/0xc0 [ 2658.046909] FAULT_INJECTION: forcing a failure. [ 2658.046909] name failslab, interval 1, probability 0, space 0, times 0 [ 2658.047437] ? pseudo_fs_get_tree+0x20/0x20 [ 2658.050423] get_tree_nodev+0x24/0x1d0 [ 2658.051007] vfs_get_tree+0x8e/0x300 [ 2658.051549] path_mount+0x14ab/0x2200 [ 2658.052114] ? strncpy_from_user+0x9e/0x470 [ 2658.052752] ? finish_automount+0xa90/0xa90 [ 2658.053392] ? getname_flags.part.0+0x1dd/0x4f0 [ 2658.054078] __x64_sys_mount+0x282/0x300 [ 2658.054668] ? copy_mnt_ns+0xa00/0xa00 [ 2658.055236] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2658.055998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2658.056776] do_syscall_64+0x33/0x40 [ 2658.057319] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2658.058065] RIP: 0033:0x7f575796fb19 [ 2658.058614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2658.061292] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2658.062402] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2658.063444] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2658.064490] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2658.065539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2658.066577] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2658.067676] CPU: 0 PID: 22585 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2658.069209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2658.070940] Call Trace: [ 2658.071505] dump_stack+0x107/0x167 [ 2658.072272] should_fail.cold+0x5/0xa [ 2658.073087] ? ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2658.074067] should_failslab+0x5/0x20 [ 2658.074863] kmem_cache_alloc+0x5b/0x310 [ 2658.075725] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2658.076682] ? trace_hardirqs_on+0x5b/0x180 [ 2658.077604] ? ext4_cache_extents+0x148/0x2d0 [ 2658.078543] ? ext4_discard_preallocations+0xd80/0xd80 [ 2658.079650] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2658.080661] ext4_ext_map_blocks+0x1a55/0x5880 [ 2658.081638] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2658.082748] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2658.083863] ? ext4_ext_release+0x10/0x10 [ 2658.084739] ? ext4_map_blocks+0x5cd/0x1910 [ 2658.085650] ? lock_release+0x680/0x680 [ 2658.086492] ? ext4_es_lookup_extent+0x485/0xa80 [ 2658.087490] ? lock_downgrade+0x6d0/0x6d0 [ 2658.088380] ? down_write_killable+0x180/0x180 [ 2658.089402] ext4_map_blocks+0x63f/0x1910 [ 2658.090278] ? kmem_cache_alloc+0x2a6/0x310 [ 2658.091191] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2658.092132] ? jbd2__journal_start+0xf3/0x7e0 [ 2658.093088] ? __ext4_journal_start_sb+0x214/0x390 [ 2658.094109] ? __ext4_journal_start_sb+0x1db/0x390 [ 2658.095156] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2658.096253] ? file_remove_privs+0x182/0x520 [ 2658.097194] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2658.098211] ? down_write_killable+0x180/0x180 [ 2658.099195] ext4_fallocate+0x415/0x3850 [ 2658.100053] ? ioctl_preallocate+0x192/0x210 [ 2658.100991] ? lock_release+0x680/0x680 [ 2658.101829] ? ext4_ext_truncate+0x250/0x250 [ 2658.102753] ? selinux_file_permission+0x92/0x520 [ 2658.103763] ? ext4_ext_truncate+0x250/0x250 [ 2658.104706] vfs_fallocate+0x48f/0xda0 [ 2658.105527] ioctl_preallocate+0x192/0x210 [ 2658.106415] ? fiemap_prep+0x220/0x220 [ 2658.107229] ? find_held_lock+0x2c/0x110 [ 2658.108099] do_vfs_ioctl+0xe59/0x10d0 [ 2658.108927] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2658.110028] ? generic_block_fiemap+0x60/0x60 [ 2658.110964] ? lock_downgrade+0x6d0/0x6d0 [ 2658.111832] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2658.112856] ? wait_for_completion_io+0x270/0x270 [ 2658.113884] ? selinux_file_ioctl+0xb6/0x270 [ 2658.114816] __x64_sys_ioctl+0x10c/0x210 [ 2658.115671] do_syscall_64+0x33/0x40 [ 2658.116454] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2658.117540] RIP: 0033:0x7efc867d9b19 [ 2658.118321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2658.122223] RSP: 002b:00007efc83d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2658.124316] RAX: ffffffffffffffda RBX: 00007efc868ecf60 RCX: 00007efc867d9b19 [ 2658.126287] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2658.128248] RBP: 00007efc83d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2658.129949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2658.131485] R13: 00007ffe71c453af R14: 00007efc83d4f300 R15: 0000000000022000 15:56:00 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:56:15 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xd, 0x0, 0x0, 0x80000000}) 15:56:15 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x80000000}) 15:56:15 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x80000000}) 15:56:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="000427bd7000ffdbdf250a0000000600090003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 15:56:15 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc020660b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:56:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 15:56:15 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 23) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:56:15 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 53) fallocate(r0, 0x0, 0x0, 0x8000) 15:56:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x3000000}, 0x0) 15:56:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000425bd7100fddbdf252e00000006000400ffff0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x8000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devlog_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:iptables_initrc_exec_t:s0\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4001}, 0x0) [ 2672.480848] FAULT_INJECTION: forcing a failure. [ 2672.480848] name failslab, interval 1, probability 0, space 0, times 0 [ 2672.482276] CPU: 0 PID: 22618 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2672.483100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2672.484088] Call Trace: [ 2672.484410] dump_stack+0x107/0x167 [ 2672.484855] should_fail.cold+0x5/0xa [ 2672.485317] ? create_object.isra.0+0x3a/0xa30 [ 2672.485862] should_failslab+0x5/0x20 [ 2672.486316] kmem_cache_alloc+0x5b/0x310 [ 2672.486807] create_object.isra.0+0x3a/0xa30 [ 2672.487336] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2672.487946] kmem_cache_alloc+0x159/0x310 [ 2672.488449] ext4_mb_new_blocks+0x698/0x45c0 [ 2672.488999] ? trace_hardirqs_on+0x5b/0x180 [ 2672.489520] ? ext4_cache_extents+0x148/0x2d0 [ 2672.490059] ? ext4_discard_preallocations+0xd80/0xd80 [ 2672.490690] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2672.491267] ext4_ext_map_blocks+0x1a55/0x5880 [ 2672.491822] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2672.492449] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2672.493094] ? ext4_ext_release+0x10/0x10 [ 2672.493591] ? ext4_map_blocks+0x5cd/0x1910 [ 2672.494112] ? lock_release+0x680/0x680 [ 2672.494590] ? ext4_es_lookup_extent+0x485/0xa80 [ 2672.495155] ? lock_downgrade+0x6d0/0x6d0 [ 2672.495661] ? down_write_killable+0x180/0x180 [ 2672.496213] ext4_map_blocks+0x63f/0x1910 [ 2672.496718] ? kmem_cache_alloc+0x2a6/0x310 [ 2672.497230] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2672.497765] ? jbd2__journal_start+0xf3/0x7e0 [ 2672.498302] ? __ext4_journal_start_sb+0x214/0x390 [ 2672.498883] ? __ext4_journal_start_sb+0x1db/0x390 [ 2672.499465] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2672.500097] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2672.500672] ? down_write_killable+0x180/0x180 [ 2672.501236] ext4_fallocate+0x415/0x3850 [ 2672.501719] ? ioctl_preallocate+0x192/0x210 [ 2672.502245] ? lock_release+0x680/0x680 [ 2672.502726] ? ext4_ext_truncate+0x250/0x250 [ 2672.503251] ? selinux_file_permission+0x92/0x520 [ 2672.503824] ? ext4_ext_truncate+0x250/0x250 [ 2672.504345] vfs_fallocate+0x48f/0xda0 [ 2672.504825] ioctl_preallocate+0x192/0x210 [ 2672.505327] ? fiemap_prep+0x220/0x220 [ 2672.505790] ? find_held_lock+0x2c/0x110 [ 2672.506290] do_vfs_ioctl+0xe59/0x10d0 [ 2672.506754] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2672.507379] ? generic_block_fiemap+0x60/0x60 [ 2672.507910] ? lock_downgrade+0x6d0/0x6d0 [ 2672.508401] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2672.508984] ? wait_for_completion_io+0x270/0x270 [ 2672.509569] ? selinux_file_ioctl+0xb6/0x270 [ 2672.510101] __x64_sys_ioctl+0x10c/0x210 [ 2672.510586] do_syscall_64+0x33/0x40 [ 2672.511037] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2672.511646] RIP: 0033:0x7efc867d9b19 [ 2672.512087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2672.514263] RSP: 002b:00007efc83d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2672.515162] RAX: ffffffffffffffda RBX: 00007efc868ecf60 RCX: 00007efc867d9b19 [ 2672.516003] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2672.516860] RBP: 00007efc83d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2672.517696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2672.518541] R13: 00007ffe71c453af R14: 00007efc83d4f300 R15: 0000000000022000 [ 2672.529252] FAULT_INJECTION: forcing a failure. [ 2672.529252] name failslab, interval 1, probability 0, space 0, times 0 [ 2672.532695] CPU: 1 PID: 22619 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2672.534613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2672.536930] Call Trace: [ 2672.537620] dump_stack+0x107/0x167 [ 2672.538609] should_fail.cold+0x5/0xa [ 2672.539644] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2672.541067] should_failslab+0x5/0x20 [ 2672.542099] kmem_cache_alloc_trace+0x55/0x320 [ 2672.543375] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2672.544818] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2672.546155] __list_lru_init+0x44d/0x890 [ 2672.547309] alloc_super+0x8b8/0xa90 [ 2672.548372] sget_fc+0x110/0x860 [ 2672.549317] ? set_anon_super+0xc0/0xc0 [ 2672.550423] ? pseudo_fs_get_tree+0x20/0x20 [ 2672.551378] get_tree_nodev+0x24/0x1d0 [ 2672.552242] vfs_get_tree+0x8e/0x300 [ 2672.553082] path_mount+0x14ab/0x2200 [ 2672.553931] ? strncpy_from_user+0x9e/0x470 [ 2672.554887] ? finish_automount+0xa90/0xa90 [ 2672.555848] ? getname_flags.part.0+0x1dd/0x4f0 [ 2672.556907] __x64_sys_mount+0x282/0x300 [ 2672.557809] ? copy_mnt_ns+0xa00/0xa00 [ 2672.558694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2672.559869] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2672.561031] do_syscall_64+0x33/0x40 [ 2672.561860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2672.562996] RIP: 0033:0x7f575796fb19 [ 2672.563823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2672.567920] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2672.569618] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2672.571208] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2672.572799] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2672.574382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2672.575965] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:56:15 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:56:15 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x80000000}) 15:56:15 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc, 0x0, 0x0, 0x80000000}) 15:56:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x9000000}, 0x0) 15:56:15 executing program 4: dup(0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, r1, 0x300, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c8d0}, 0x0) 15:56:15 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xe, 0x0, 0x0, 0x80000000}) 15:56:15 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 54) fallocate(r0, 0x0, 0x0, 0x8000) [ 2673.023708] FAULT_INJECTION: forcing a failure. [ 2673.023708] name failslab, interval 1, probability 0, space 0, times 0 [ 2673.025072] CPU: 0 PID: 22652 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2673.025865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2673.026808] Call Trace: [ 2673.027160] dump_stack+0x107/0x167 [ 2673.027683] should_fail.cold+0x5/0xa [ 2673.028120] ? create_object.isra.0+0x3a/0xa30 [ 2673.028640] should_failslab+0x5/0x20 [ 2673.029084] kmem_cache_alloc+0x5b/0x310 [ 2673.029548] create_object.isra.0+0x3a/0xa30 [ 2673.030048] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2673.030629] kmem_cache_alloc_trace+0x151/0x320 [ 2673.031164] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2673.031722] __list_lru_init+0x44d/0x890 [ 2673.032186] alloc_super+0x8b8/0xa90 [ 2673.032611] sget_fc+0x110/0x860 [ 2673.033006] ? set_anon_super+0xc0/0xc0 [ 2673.033462] ? pseudo_fs_get_tree+0x20/0x20 [ 2673.033950] get_tree_nodev+0x24/0x1d0 [ 2673.034392] vfs_get_tree+0x8e/0x300 [ 2673.034813] path_mount+0x14ab/0x2200 [ 2673.035253] ? strncpy_from_user+0x9e/0x470 [ 2673.035743] ? finish_automount+0xa90/0xa90 [ 2673.036231] ? getname_flags.part.0+0x1dd/0x4f0 [ 2673.036769] __x64_sys_mount+0x282/0x300 [ 2673.037229] ? copy_mnt_ns+0xa00/0xa00 [ 2673.037676] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2673.038271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2673.038854] do_syscall_64+0x33/0x40 [ 2673.039276] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2673.039859] RIP: 0033:0x7f575796fb19 [ 2673.040279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2673.042363] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2673.043224] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2673.044025] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2673.044837] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2673.045643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2673.046446] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2677.674779] Bluetooth: hci5: command 0x0409 tx timeout [ 2679.722764] Bluetooth: hci5: command 0x041b tx timeout [ 2681.770709] Bluetooth: hci5: command 0x040f tx timeout [ 2682.675475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2682.677713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2682.681179] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2682.743620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2682.745707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2682.748996] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2683.818715] Bluetooth: hci5: command 0x0419 tx timeout 15:56:42 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 24) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:56:42 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0xf000000}, 0x0) 15:56:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)={0x184, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x16, 0xfff8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x16, 0x87}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6db}, {0x6, 0x16, 0x49}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0xe4ae}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xf751}, {0x5, 0x12, 0x1}}]}, 0x184}, 0x1, 0x0, 0x0, 0x44000014}, 0x884) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r4) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001740), r7) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x84, r8, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xa304185ec41533dd}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000010}, 0x80) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="e65f760ad989eb122c3b31b5236c34789278c3b0a8cb907a5c147613d495ab79d4f00463a56d0a945233ed4a0e621f5b14d7b80753cc41834b5010ad5101e32cacf80f792e6102ccf0fe697a952036a225d7a3381e862bf0d22ffa388b9fb3c8f78d0aec05d5aade6a9c72d4e25a1958", @ANYRES16=r8, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0xb0, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3d, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0x1c}}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8408008a}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r10, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4084) 15:56:42 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 55) fallocate(r0, 0x0, 0x0, 0x8000) 15:56:42 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2699.915922] FAULT_INJECTION: forcing a failure. [ 2699.915922] name failslab, interval 1, probability 0, space 0, times 0 [ 2699.918467] CPU: 1 PID: 23118 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2699.920126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2699.921905] Call Trace: [ 2699.922475] dump_stack+0x107/0x167 [ 2699.923252] should_fail.cold+0x5/0xa [ 2699.924070] ? ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2699.925063] should_failslab+0x5/0x20 [ 2699.925879] kmem_cache_alloc+0x5b/0x310 [ 2699.926755] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2699.927722] ? trace_hardirqs_on+0x5b/0x180 [ 2699.928641] ? ext4_cache_extents+0x148/0x2d0 [ 2699.929601] ? ext4_discard_preallocations+0xd80/0xd80 [ 2699.930712] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2699.931722] ext4_ext_map_blocks+0x1a55/0x5880 [ 2699.932707] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2699.933827] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2699.934944] ? ext4_ext_release+0x10/0x10 [ 2699.935827] ? ext4_map_blocks+0x5cd/0x1910 [ 2699.936744] ? lock_release+0x680/0x680 [ 2699.937603] ? ext4_es_lookup_extent+0x485/0xa80 [ 2699.938617] ? lock_downgrade+0x6d0/0x6d0 [ 2699.939573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2699.940749] ? down_write_killable+0x180/0x180 [ 2699.941778] ext4_map_blocks+0x63f/0x1910 15:56:42 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc, 0x0, 0x0, 0x80000000}) 15:56:42 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xf, 0x0, 0x0, 0x80000000}) 15:56:42 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x80000000}) [ 2699.942673] ? kmem_cache_alloc+0x2a6/0x310 [ 2699.943657] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2699.944627] ? jbd2__journal_start+0xf3/0x7e0 [ 2699.945631] ? __ext4_journal_start_sb+0x214/0x390 [ 2699.946688] ? __ext4_journal_start_sb+0x1db/0x390 [ 2699.947728] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2699.948843] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2699.949880] ? down_write_killable+0x180/0x180 [ 2699.950854] ext4_fallocate+0x415/0x3850 [ 2699.951713] ? ioctl_preallocate+0x192/0x210 [ 2699.952826] ? lock_release+0x680/0x680 [ 2699.953678] ? ext4_ext_truncate+0x250/0x250 [ 2699.954607] ? selinux_file_permission+0x92/0x520 [ 2699.955629] ? ext4_ext_truncate+0x250/0x250 [ 2699.956561] vfs_fallocate+0x48f/0xda0 [ 2699.957398] ioctl_preallocate+0x192/0x210 [ 2699.958287] ? fiemap_prep+0x220/0x220 [ 2699.959105] ? find_held_lock+0x2c/0x110 [ 2699.959980] do_vfs_ioctl+0xe59/0x10d0 [ 2699.960800] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2699.961908] ? generic_block_fiemap+0x60/0x60 [ 2699.962852] ? lock_downgrade+0x6d0/0x6d0 [ 2699.963723] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2699.964740] ? wait_for_completion_io+0x270/0x270 [ 2699.965791] ? selinux_file_ioctl+0xb6/0x270 [ 2699.966729] __x64_sys_ioctl+0x10c/0x210 [ 2699.967589] do_syscall_64+0x33/0x40 [ 2699.968372] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2699.969460] RIP: 0033:0x7efc867d9b19 [ 2699.970252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2699.974182] RSP: 002b:00007efc83d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2699.975776] RAX: ffffffffffffffda RBX: 00007efc868ecf60 RCX: 00007efc867d9b19 [ 2699.977304] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2699.978799] RBP: 00007efc83d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2699.980292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2699.981800] R13: 00007ffe71c453af R14: 00007efc83d4f300 R15: 0000000000022000 [ 2700.056954] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23134 comm=syz-executor.4 [ 2700.076765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23134 comm=syz-executor.4 [ 2700.096513] FAULT_INJECTION: forcing a failure. [ 2700.096513] name failslab, interval 1, probability 0, space 0, times 0 [ 2700.098767] CPU: 0 PID: 23138 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2700.100131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2700.101771] Call Trace: [ 2700.102294] dump_stack+0x107/0x167 [ 2700.103007] should_fail.cold+0x5/0xa [ 2700.103758] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2700.104749] should_failslab+0x5/0x20 [ 2700.105507] kmem_cache_alloc_trace+0x55/0x320 [ 2700.106400] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2700.107399] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2700.108365] __list_lru_init+0x44d/0x890 [ 2700.109172] alloc_super+0x8b8/0xa90 [ 2700.109920] sget_fc+0x110/0x860 [ 2700.110582] ? set_anon_super+0xc0/0xc0 [ 2700.111369] ? pseudo_fs_get_tree+0x20/0x20 [ 2700.112385] get_tree_nodev+0x24/0x1d0 [ 2700.113157] vfs_get_tree+0x8e/0x300 [ 2700.113892] path_mount+0x14ab/0x2200 [ 2700.114649] ? strncpy_from_user+0x9e/0x470 [ 2700.115494] ? finish_automount+0xa90/0xa90 [ 2700.116345] ? getname_flags.part.0+0x1dd/0x4f0 [ 2700.117272] __x64_sys_mount+0x282/0x300 [ 2700.118076] ? copy_mnt_ns+0xa00/0xa00 [ 2700.118852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2700.119893] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2700.120907] do_syscall_64+0x33/0x40 [ 2700.121644] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2700.122646] RIP: 0033:0x7f575796fb19 [ 2700.123382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2700.126995] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2700.128516] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2700.129938] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2700.131352] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2700.132759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2700.134178] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2700.183324] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23140 comm=syz-executor.4 [ 2700.186527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23141 comm=syz-executor.4 15:56:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}) 15:56:57 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x80000000}) 15:56:57 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 25) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:56:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) 15:56:57 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x80000000}) 15:56:57 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 56) fallocate(r0, 0x0, 0x0, 0x8000) 15:56:57 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:56:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x100}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0x50, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r8) sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r10, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r10, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) [ 2714.591963] FAULT_INJECTION: forcing a failure. [ 2714.591963] name failslab, interval 1, probability 0, space 0, times 0 [ 2714.594627] CPU: 0 PID: 23162 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2714.596152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2714.597908] Call Trace: [ 2714.598472] dump_stack+0x107/0x167 [ 2714.599247] should_fail.cold+0x5/0xa [ 2714.599746] FAULT_INJECTION: forcing a failure. [ 2714.599746] name failslab, interval 1, probability 0, space 0, times 0 [ 2714.600055] ? create_object.isra.0+0x3a/0xa30 [ 2714.600078] should_failslab+0x5/0x20 [ 2714.603213] kmem_cache_alloc+0x5b/0x310 [ 2714.604078] create_object.isra.0+0x3a/0xa30 [ 2714.604998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2714.606077] kmem_cache_alloc+0x159/0x310 [ 2714.606948] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2714.607916] ? ext4_cache_extents+0x148/0x2d0 [ 2714.608858] ? ext4_discard_preallocations+0xd80/0xd80 [ 2714.609980] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2714.610998] ext4_ext_map_blocks+0x1a55/0x5880 [ 2714.611971] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2714.613069] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2714.614206] ? ext4_ext_release+0x10/0x10 [ 2714.615089] ? ext4_map_blocks+0x5cd/0x1910 [ 2714.616004] ? lock_release+0x680/0x680 [ 2714.616841] ? ext4_es_lookup_extent+0x485/0xa80 [ 2714.618073] ? lock_downgrade+0x6d0/0x6d0 [ 2714.619196] ? down_write_killable+0x180/0x180 [ 2714.620241] ext4_map_blocks+0x63f/0x1910 [ 2714.621269] ? kmem_cache_alloc+0x2a6/0x310 [ 2714.622414] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2714.623598] ? jbd2__journal_start+0xf3/0x7e0 [ 2714.624815] ? __ext4_journal_start_sb+0x214/0x390 [ 2714.626166] ? __ext4_journal_start_sb+0x1db/0x390 [ 2714.627426] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2714.628845] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2714.630172] ? down_write_killable+0x180/0x180 [ 2714.631405] ext4_fallocate+0x415/0x3850 [ 2714.632478] ? ioctl_preallocate+0x192/0x210 [ 2714.633635] ? lock_release+0x680/0x680 [ 2714.634539] ? ext4_ext_truncate+0x250/0x250 [ 2714.635452] ? selinux_file_permission+0x92/0x520 [ 2714.636456] ? ext4_ext_truncate+0x250/0x250 [ 2714.637397] vfs_fallocate+0x48f/0xda0 [ 2714.638230] ioctl_preallocate+0x192/0x210 [ 2714.639115] ? fiemap_prep+0x220/0x220 [ 2714.639937] ? find_held_lock+0x2c/0x110 [ 2714.640805] do_vfs_ioctl+0xe59/0x10d0 [ 2714.641640] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2714.642730] ? generic_block_fiemap+0x60/0x60 [ 2714.643677] ? lock_downgrade+0x6d0/0x6d0 [ 2714.644543] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2714.645573] ? wait_for_completion_io+0x270/0x270 [ 2714.646613] ? selinux_file_ioctl+0xb6/0x270 [ 2714.647565] __x64_sys_ioctl+0x10c/0x210 [ 2714.648423] do_syscall_64+0x33/0x40 [ 2714.649214] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2714.650288] RIP: 0033:0x7efc867d9b19 [ 2714.651070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2714.654988] RSP: 002b:00007efc83d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2714.656591] RAX: ffffffffffffffda RBX: 00007efc868ecf60 RCX: 00007efc867d9b19 [ 2714.658105] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2714.659621] RBP: 00007efc83d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2714.661118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2714.662634] R13: 00007ffe71c453af R14: 00007efc83d4f300 R15: 0000000000022000 [ 2714.664189] CPU: 1 PID: 23159 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2714.665069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2714.666100] Call Trace: [ 2714.666430] dump_stack+0x107/0x167 [ 2714.666885] should_fail.cold+0x5/0xa [ 2714.667359] ? create_object.isra.0+0x3a/0xa30 [ 2714.667919] should_failslab+0x5/0x20 [ 2714.668385] kmem_cache_alloc+0x5b/0x310 [ 2714.668872] ? mark_held_locks+0x9e/0xe0 [ 2714.669379] create_object.isra.0+0x3a/0xa30 [ 2714.669919] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2714.670554] kmem_cache_alloc_trace+0x151/0x320 [ 2714.671130] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2714.671744] __list_lru_init+0x44d/0x890 [ 2714.672247] alloc_super+0x8b8/0xa90 [ 2714.672706] sget_fc+0x110/0x860 [ 2714.673108] ? set_anon_super+0xc0/0xc0 [ 2714.673605] ? pseudo_fs_get_tree+0x20/0x20 [ 2714.674134] get_tree_nodev+0x24/0x1d0 [ 2714.674609] vfs_get_tree+0x8e/0x300 [ 2714.675064] path_mount+0x14ab/0x2200 [ 2714.675511] ? strncpy_from_user+0x9e/0x470 [ 2714.676046] ? finish_automount+0xa90/0xa90 [ 2714.676576] ? getname_flags.part.0+0x1dd/0x4f0 [ 2714.677127] __x64_sys_mount+0x282/0x300 [ 2714.677644] ? copy_mnt_ns+0xa00/0xa00 [ 2714.678114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2714.678744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2714.679354] do_syscall_64+0x33/0x40 [ 2714.679790] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2714.680394] RIP: 0033:0x7f575796fb19 [ 2714.680831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2714.683035] RSP: 002b:00007f5754ee5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2714.683945] RAX: ffffffffffffffda RBX: 00007f5757a82f60 RCX: 00007f575796fb19 [ 2714.684782] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2714.685667] RBP: 00007f5754ee51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2714.686515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2714.687338] R13: 00007ffc26ef80cf R14: 00007f5754ee5300 R15: 0000000000022000 [ 2714.729820] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23163 comm=syz-executor.4 [ 2714.753374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23163 comm=syz-executor.4 [ 2714.833247] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23166 comm=syz-executor.4 [ 2714.851890] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23173 comm=syz-executor.4 15:56:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x3000000000000}, 0x0) 15:56:57 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:56:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x12, 0x0, 0x0, 0x80000000}) 15:56:57 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 57) fallocate(r0, 0x0, 0x0, 0x8000) 15:56:57 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x80000000}) 15:56:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x6000000000000}, 0x0) [ 2715.021220] FAULT_INJECTION: forcing a failure. [ 2715.021220] name failslab, interval 1, probability 0, space 0, times 0 [ 2715.022562] CPU: 1 PID: 23191 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2715.023355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2715.024281] Call Trace: [ 2715.024592] dump_stack+0x107/0x167 [ 2715.024990] should_fail.cold+0x5/0xa [ 2715.025441] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2715.026018] should_failslab+0x5/0x20 [ 2715.026456] kmem_cache_alloc_trace+0x55/0x320 [ 2715.026979] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2715.027562] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2715.028123] __list_lru_init+0x44d/0x890 [ 2715.028589] alloc_super+0x8b8/0xa90 [ 2715.029022] sget_fc+0x110/0x860 [ 2715.029416] ? set_anon_super+0xc0/0xc0 [ 2715.029875] ? pseudo_fs_get_tree+0x20/0x20 [ 2715.030366] get_tree_nodev+0x24/0x1d0 [ 2715.030815] vfs_get_tree+0x8e/0x300 [ 2715.031240] path_mount+0x14ab/0x2200 [ 2715.031677] ? strncpy_from_user+0x9e/0x470 [ 2715.032185] ? finish_automount+0xa90/0xa90 [ 2715.032679] ? getname_flags.part.0+0x1dd/0x4f0 [ 2715.033192] __x64_sys_mount+0x282/0x300 [ 2715.033628] ? copy_mnt_ns+0xa00/0xa00 [ 2715.034077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2715.034679] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2715.035273] do_syscall_64+0x33/0x40 [ 2715.035700] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2715.036284] RIP: 0033:0x7f575796fb19 [ 2715.036711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2715.038838] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2715.039710] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2715.040536] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2715.041331] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2715.042132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2715.042912] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:57:10 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:57:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x8000000000000}, 0x0) 15:57:10 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 58) fallocate(r0, 0x0, 0x0, 0x8000) 15:57:10 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x12, 0x0, 0x0, 0x80000000}) 15:57:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x80000000}) 15:57:10 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x64, 0x0, 0x0, 0x80000000}) 15:57:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 26) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:57:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x94, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x20008081) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x4c, r5, 0x1, 0x70bd25, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x20}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) [ 2727.967716] FAULT_INJECTION: forcing a failure. [ 2727.967716] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.969055] CPU: 0 PID: 23207 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2727.969943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2727.970867] Call Trace: [ 2727.971167] dump_stack+0x107/0x167 [ 2727.971577] should_fail.cold+0x5/0xa [ 2727.972008] ? create_object.isra.0+0x3a/0xa30 [ 2727.972519] should_failslab+0x5/0x20 [ 2727.972947] kmem_cache_alloc+0x5b/0x310 [ 2727.973413] create_object.isra.0+0x3a/0xa30 [ 2727.973901] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2727.974471] kmem_cache_alloc+0x159/0x310 [ 2727.974939] ext4_mb_new_blocks+0x1fd8/0x45c0 [ 2727.975448] ? trace_hardirqs_on+0x5b/0x180 [ 2727.975940] ? ext4_cache_extents+0x148/0x2d0 [ 2727.976443] ? ext4_discard_preallocations+0xd80/0xd80 [ 2727.977029] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2727.977572] ext4_ext_map_blocks+0x1a55/0x5880 [ 2727.978095] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2727.978684] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2727.979272] ? ext4_ext_release+0x10/0x10 [ 2727.979737] ? ext4_map_blocks+0x5cd/0x1910 [ 2727.980230] ? lock_release+0x680/0x680 [ 2727.980677] ? ext4_es_lookup_extent+0x485/0xa80 [ 2727.981207] ? lock_downgrade+0x6d0/0x6d0 [ 2727.981691] ? down_write_killable+0x180/0x180 [ 2727.982211] ext4_map_blocks+0x63f/0x1910 [ 2727.982679] ? kmem_cache_alloc+0x2a6/0x310 [ 2727.983162] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2727.983666] ? jbd2__journal_start+0xf3/0x7e0 [ 2727.984168] ? __ext4_journal_start_sb+0x214/0x390 [ 2727.984714] ? __ext4_journal_start_sb+0x1db/0x390 [ 2727.985266] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2727.985862] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2727.986400] ? down_write_killable+0x180/0x180 [ 2727.986915] ext4_fallocate+0x415/0x3850 [ 2727.987372] ? ioctl_preallocate+0x192/0x210 [ 2727.987865] ? lock_release+0x680/0x680 [ 2727.988312] ? ext4_ext_truncate+0x250/0x250 [ 2727.988809] ? selinux_file_permission+0x92/0x520 [ 2727.989355] ? ext4_ext_truncate+0x250/0x250 [ 2727.989850] vfs_fallocate+0x48f/0xda0 [ 2727.990290] ioctl_preallocate+0x192/0x210 [ 2727.990762] ? fiemap_prep+0x220/0x220 [ 2727.991196] ? find_held_lock+0x2c/0x110 [ 2727.991666] do_vfs_ioctl+0xe59/0x10d0 [ 2727.992104] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2727.992692] ? generic_block_fiemap+0x60/0x60 [ 2727.993193] ? lock_downgrade+0x6d0/0x6d0 [ 2727.993659] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2727.994200] ? wait_for_completion_io+0x270/0x270 [ 2727.994749] ? selinux_file_ioctl+0xb6/0x270 [ 2727.995251] __x64_sys_ioctl+0x10c/0x210 [ 2727.995712] do_syscall_64+0x33/0x40 [ 2727.996133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2727.996710] RIP: 0033:0x7efc867d9b19 [ 2727.997130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2727.999196] RSP: 002b:00007efc83d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2728.000052] RAX: ffffffffffffffda RBX: 00007efc868ecf60 RCX: 00007efc867d9b19 [ 2728.000851] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2728.001651] RBP: 00007efc83d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2728.002444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2728.003239] R13: 00007ffe71c453af R14: 00007efc83d4f300 R15: 0000000000022000 [ 2728.017465] FAULT_INJECTION: forcing a failure. [ 2728.017465] name failslab, interval 1, probability 0, space 0, times 0 [ 2728.018841] CPU: 0 PID: 23218 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2728.019614] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2728.020546] Call Trace: [ 2728.020842] dump_stack+0x107/0x167 [ 2728.021253] should_fail.cold+0x5/0xa [ 2728.021734] ? create_object.isra.0+0x3a/0xa30 [ 2728.022304] should_failslab+0x5/0x20 [ 2728.022729] kmem_cache_alloc+0x5b/0x310 [ 2728.023183] ? mark_held_locks+0x9e/0xe0 [ 2728.023638] create_object.isra.0+0x3a/0xa30 [ 2728.024127] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2728.024697] kmem_cache_alloc_trace+0x151/0x320 [ 2728.025220] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2728.025779] __list_lru_init+0x44d/0x890 [ 2728.026238] alloc_super+0x8b8/0xa90 [ 2728.026655] sget_fc+0x110/0x860 [ 2728.027039] ? set_anon_super+0xc0/0xc0 [ 2728.027488] ? pseudo_fs_get_tree+0x20/0x20 [ 2728.027967] get_tree_nodev+0x24/0x1d0 [ 2728.028402] vfs_get_tree+0x8e/0x300 [ 2728.028816] path_mount+0x14ab/0x2200 [ 2728.029244] ? strncpy_from_user+0x9e/0x470 [ 2728.029733] ? finish_automount+0xa90/0xa90 [ 2728.030215] ? getname_flags.part.0+0x1dd/0x4f0 [ 2728.030741] __x64_sys_mount+0x282/0x300 [ 2728.031190] ? copy_mnt_ns+0xa00/0xa00 [ 2728.031627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2728.032212] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2728.032787] do_syscall_64+0x33/0x40 [ 2728.033204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2728.033780] RIP: 0033:0x7f575796fb19 [ 2728.034194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2728.036256] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2728.037104] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2728.037905] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2728.038698] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2728.039490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2728.040285] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:57:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) 15:57:10 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x70, 0x0, 0x0, 0x80000000}) 15:57:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 27) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:57:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x8, 0x0, 0x0, 0x80000000}) 15:57:10 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:57:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) 15:57:10 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 59) fallocate(r0, 0x0, 0x0, 0x8000) [ 2728.178009] FAULT_INJECTION: forcing a failure. [ 2728.178009] name failslab, interval 1, probability 0, space 0, times 0 [ 2728.179306] CPU: 0 PID: 23230 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2728.180084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2728.181009] Call Trace: [ 2728.181318] dump_stack+0x107/0x167 [ 2728.181732] should_fail.cold+0x5/0xa [ 2728.182163] ? create_object.isra.0+0x3a/0xa30 [ 2728.182678] should_failslab+0x5/0x20 [ 2728.183108] kmem_cache_alloc+0x5b/0x310 [ 2728.183574] create_object.isra.0+0x3a/0xa30 [ 2728.184069] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2728.184646] kmem_cache_alloc+0x159/0x310 [ 2728.185119] __es_insert_extent+0xed1/0x1370 [ 2728.185640] ext4_es_insert_extent+0x45d/0xf10 [ 2728.186160] ? ext4_es_is_delayed+0x38/0x50 [ 2728.186645] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 2728.187133] ? do_raw_read_unlock+0x3b/0x70 [ 2728.187620] ? _raw_read_unlock+0x1a/0x30 [ 2728.188088] ? ext4_es_scan_range+0x116/0x240 [ 2728.188599] ? ext4_es_find_extent_range+0x460/0x460 [ 2728.189177] ? down_write_killable+0x180/0x180 [ 2728.189704] ext4_map_blocks+0x80b/0x1910 [ 2728.190181] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2728.190691] ? jbd2__journal_start+0xf3/0x7e0 [ 2728.191199] ? __ext4_journal_start_sb+0x214/0x390 [ 2728.191752] ? __ext4_journal_start_sb+0x1db/0x390 [ 2728.192306] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2728.192903] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2728.193457] ? down_write_killable+0x180/0x180 [ 2728.193975] ext4_fallocate+0x415/0x3850 [ 2728.194440] ? ioctl_preallocate+0x192/0x210 [ 2728.194938] ? lock_release+0x680/0x680 [ 2728.195389] ? ext4_ext_truncate+0x250/0x250 [ 2728.195890] ? selinux_file_permission+0x92/0x520 [ 2728.196435] ? ext4_ext_truncate+0x250/0x250 [ 2728.196933] vfs_fallocate+0x48f/0xda0 [ 2728.197387] ioctl_preallocate+0x192/0x210 [ 2728.197858] ? fiemap_prep+0x220/0x220 [ 2728.198302] ? find_held_lock+0x2c/0x110 [ 2728.198775] do_vfs_ioctl+0xe59/0x10d0 [ 2728.199216] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2728.199805] ? generic_block_fiemap+0x60/0x60 [ 2728.200308] ? lock_downgrade+0x6d0/0x6d0 [ 2728.200773] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2728.201334] ? wait_for_completion_io+0x270/0x270 [ 2728.201883] ? selinux_file_ioctl+0xb6/0x270 [ 2728.202385] __x64_sys_ioctl+0x10c/0x210 [ 2728.202845] do_syscall_64+0x33/0x40 [ 2728.203266] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2728.203842] RIP: 0033:0x7efc867d9b19 [ 2728.204267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2728.206340] RSP: 002b:00007efc83d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2728.207196] RAX: ffffffffffffffda RBX: 00007efc868ecf60 RCX: 00007efc867d9b19 [ 2728.208001] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2728.208803] RBP: 00007efc83d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2728.209611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2728.210420] R13: 00007ffe71c453af R14: 00007efc83d4f300 R15: 0000000000022000 15:57:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="0900b342", @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x20008004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x1e, 0x2, 0x5) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000000) 15:57:11 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x80000000}) [ 2728.296735] FAULT_INJECTION: forcing a failure. [ 2728.296735] name failslab, interval 1, probability 0, space 0, times 0 [ 2728.299273] CPU: 1 PID: 23246 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2728.300828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2728.302706] Call Trace: [ 2728.303310] dump_stack+0x107/0x167 [ 2728.304127] should_fail.cold+0x5/0xa [ 2728.304985] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2728.306124] should_failslab+0x5/0x20 [ 2728.306978] kmem_cache_alloc_trace+0x55/0x320 [ 2728.308001] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2728.309148] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2728.310253] __list_lru_init+0x44d/0x890 [ 2728.311170] alloc_super+0x8b8/0xa90 [ 2728.312018] sget_fc+0x110/0x860 [ 2728.312775] ? set_anon_super+0xc0/0xc0 [ 2728.313676] ? pseudo_fs_get_tree+0x20/0x20 [ 2728.314648] get_tree_nodev+0x24/0x1d0 [ 2728.315520] vfs_get_tree+0x8e/0x300 [ 2728.316357] path_mount+0x14ab/0x2200 [ 2728.317210] ? strncpy_from_user+0x9e/0x470 [ 2728.318183] ? finish_automount+0xa90/0xa90 [ 2728.319158] ? getname_flags.part.0+0x1dd/0x4f0 [ 2728.320208] __x64_sys_mount+0x282/0x300 [ 2728.321115] ? copy_mnt_ns+0xa00/0xa00 [ 2728.322001] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2728.323180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2728.324346] do_syscall_64+0x33/0x40 [ 2728.325183] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2728.326329] RIP: 0033:0x7f575796fb19 [ 2728.327160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2728.331336] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2728.333034] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2728.334657] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2728.336249] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2728.337859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2728.339467] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:57:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x300000000000000}, 0x0) 15:57:24 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 60) fallocate(r0, 0x0, 0x0, 0x8000) 15:57:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20040006) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) 15:57:24 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:57:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x8, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:57:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x900000000000000}, 0x0) 15:57:24 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 28) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:57:24 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc, 0x0, 0x0, 0x80000000}) 15:57:24 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x78, 0x0, 0x0, 0x80000000}) [ 2741.307461] FAULT_INJECTION: forcing a failure. [ 2741.307461] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.310063] CPU: 1 PID: 23274 Comm: syz-executor.2 Not tainted 5.10.248 #1 [ 2741.311599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.313481] Call Trace: [ 2741.314096] dump_stack+0x107/0x167 [ 2741.314933] should_fail.cold+0x5/0xa [ 2741.315830] ? ext4_find_extent+0xa77/0xd70 [ 2741.316830] should_failslab+0x5/0x20 [ 2741.317704] __kmalloc+0x72/0x390 [ 2741.318493] ext4_find_extent+0xa77/0xd70 [ 2741.319443] ext4_ext_map_blocks+0x1c8/0x5880 [ 2741.320480] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2741.321713] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2741.322937] ? ext4_ext_release+0x10/0x10 [ 2741.323909] ? ext4_map_blocks+0x5cd/0x1910 [ 2741.324916] ? lock_release+0x680/0x680 [ 2741.325849] ? ext4_es_lookup_extent+0x485/0xa80 [ 2741.326946] ? lock_downgrade+0x6d0/0x6d0 [ 2741.327925] ? down_write+0xe0/0x160 [ 2741.328795] ? down_write_killable+0x180/0x180 [ 2741.329882] ext4_map_blocks+0x63f/0x1910 [ 2741.330858] ? kmem_cache_alloc+0x2a6/0x310 [ 2741.331860] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 2741.332907] ? jbd2__journal_start+0xf3/0x7e0 [ 2741.333963] ? __ext4_journal_start_sb+0x214/0x390 [ 2741.335091] ? __ext4_journal_start_sb+0x1db/0x390 [ 2741.336245] ext4_alloc_file_blocks.isra.0+0x2eb/0xb40 [ 2741.337486] ? ext4_iomap_xattr_begin+0x530/0x530 [ 2741.338612] ? down_write_killable+0x180/0x180 [ 2741.339678] ext4_fallocate+0x415/0x3850 [ 2741.340623] ? ioctl_preallocate+0x192/0x210 [ 2741.341658] ? lock_release+0x680/0x680 [ 2741.342586] ? ext4_ext_truncate+0x250/0x250 [ 2741.343606] ? selinux_file_permission+0x92/0x520 [ 2741.344719] ? ext4_ext_truncate+0x250/0x250 [ 2741.345743] vfs_fallocate+0x48f/0xda0 [ 2741.346646] ioctl_preallocate+0x192/0x210 [ 2741.347620] ? fiemap_prep+0x220/0x220 [ 2741.348517] ? find_held_lock+0x2c/0x110 [ 2741.349545] do_vfs_ioctl+0xe59/0x10d0 [ 2741.350438] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2741.351645] ? generic_block_fiemap+0x60/0x60 [ 2741.352674] ? lock_downgrade+0x6d0/0x6d0 [ 2741.353645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2741.354753] ? wait_for_completion_io+0x270/0x270 [ 2741.355874] ? selinux_file_ioctl+0xb6/0x270 [ 2741.356904] __x64_sys_ioctl+0x10c/0x210 [ 2741.357852] do_syscall_64+0x33/0x40 [ 2741.358708] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2741.359879] RIP: 0033:0x7efc867d9b19 [ 2741.360731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.364939] RSP: 002b:00007efc83d4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2741.366689] RAX: ffffffffffffffda RBX: 00007efc868ecf60 RCX: 00007efc867d9b19 [ 2741.366848] FAULT_INJECTION: forcing a failure. [ 2741.366848] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.368315] RDX: 0000000020000640 RSI: 0000000040305828 RDI: 0000000000000004 [ 2741.368327] RBP: 00007efc83d4f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.368338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2741.368357] R13: 00007ffe71c453af R14: 00007efc83d4f300 R15: 0000000000022000 [ 2741.377250] CPU: 0 PID: 23279 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2741.378755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.380538] Call Trace: [ 2741.381107] dump_stack+0x107/0x167 [ 2741.381901] should_fail.cold+0x5/0xa [ 2741.382720] ? create_object.isra.0+0x3a/0xa30 [ 2741.383697] should_failslab+0x5/0x20 [ 2741.384617] kmem_cache_alloc+0x5b/0x310 [ 2741.385573] ? mark_held_locks+0x9e/0xe0 [ 2741.386449] create_object.isra.0+0x3a/0xa30 [ 2741.387387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2741.388475] kmem_cache_alloc_trace+0x151/0x320 [ 2741.389483] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2741.390539] __list_lru_init+0x44d/0x890 [ 2741.391413] alloc_super+0x8b8/0xa90 [ 2741.392213] sget_fc+0x110/0x860 [ 2741.392935] ? set_anon_super+0xc0/0xc0 [ 2741.393793] ? pseudo_fs_get_tree+0x20/0x20 [ 2741.394712] get_tree_nodev+0x24/0x1d0 [ 2741.395550] vfs_get_tree+0x8e/0x300 [ 2741.396344] path_mount+0x14ab/0x2200 [ 2741.397162] ? strncpy_from_user+0x9e/0x470 [ 2741.398091] ? finish_automount+0xa90/0xa90 [ 2741.399009] ? getname_flags.part.0+0x1dd/0x4f0 [ 2741.400015] __x64_sys_mount+0x282/0x300 [ 2741.400879] ? copy_mnt_ns+0xa00/0xa00 [ 2741.401729] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2741.402851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.403957] do_syscall_64+0x33/0x40 [ 2741.404749] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2741.405853] RIP: 0033:0x7f575796fb19 [ 2741.406651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.410593] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2741.412229] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2741.413753] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2741.415278] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.416805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2741.418331] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:57:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x20040000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x1}, 0x14}}, 0x0) 15:57:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0xf00000000000000}, 0x0) 15:57:24 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) (fail_nth: 29) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:57:24 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x80000000}) 15:57:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 15:57:24 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 61) fallocate(r0, 0x0, 0x0, 0x8000) 15:57:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:57:24 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x102, 0x0, 0x0, 0x80000000}) 15:57:24 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:57:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r4) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40040) 15:57:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) [ 2741.913309] FAULT_INJECTION: forcing a failure. [ 2741.913309] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.915828] CPU: 0 PID: 23313 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2741.917284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.919028] Call Trace: [ 2741.919585] dump_stack+0x107/0x167 [ 2741.920355] should_fail.cold+0x5/0xa [ 2741.921157] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2741.922232] should_failslab+0x5/0x20 [ 2741.923034] kmem_cache_alloc_trace+0x55/0x320 [ 2741.923992] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2741.925065] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2741.926105] __list_lru_init+0x44d/0x890 [ 2741.926959] alloc_super+0x8b8/0xa90 [ 2741.927739] sget_fc+0x110/0x860 [ 2741.928447] ? set_anon_super+0xc0/0xc0 [ 2741.929287] ? pseudo_fs_get_tree+0x20/0x20 [ 2741.930201] get_tree_nodev+0x24/0x1d0 [ 2741.931014] vfs_get_tree+0x8e/0x300 [ 2741.931795] path_mount+0x14ab/0x2200 [ 2741.932602] ? strncpy_from_user+0x9e/0x470 [ 2741.933518] ? finish_automount+0xa90/0xa90 [ 2741.934424] ? getname_flags.part.0+0x1dd/0x4f0 [ 2741.935409] __x64_sys_mount+0x282/0x300 [ 2741.936259] ? copy_mnt_ns+0xa00/0xa00 [ 2741.937079] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2741.938196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.939280] do_syscall_64+0x33/0x40 [ 2741.940064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2741.941145] RIP: 0033:0x7f575796fb19 [ 2741.941934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.945805] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2741.947393] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2741.948887] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2741.950388] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.951886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2741.953385] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:57:24 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}) 15:57:24 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x80000000}) 15:57:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 15:57:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xd, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:57:24 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x109, 0x0, 0x0, 0x80000000}) 15:57:24 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:57:41 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 62) fallocate(r0, 0x0, 0x0, 0x8000) 15:57:41 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x12, 0x0, 0x0, 0x80000000}) 15:57:41 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x10a, 0x0, 0x0, 0x80000000}) 15:57:41 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:57:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 15:57:41 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4b47, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:57:41 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xd, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:57:41 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40830) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24005000}, 0x2000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x1}, 0x14}}, 0x0) [ 2758.620853] FAULT_INJECTION: forcing a failure. [ 2758.620853] name failslab, interval 1, probability 0, space 0, times 0 [ 2758.622586] CPU: 1 PID: 23361 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2758.623601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2758.624811] Call Trace: [ 2758.625213] dump_stack+0x107/0x167 [ 2758.625762] should_fail.cold+0x5/0xa [ 2758.626325] ? create_object.isra.0+0x3a/0xa30 [ 2758.626991] should_failslab+0x5/0x20 [ 2758.627547] kmem_cache_alloc+0x5b/0x310 [ 2758.628155] ? mark_held_locks+0x9e/0xe0 [ 2758.628752] create_object.isra.0+0x3a/0xa30 [ 2758.629392] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2758.630147] kmem_cache_alloc_trace+0x151/0x320 [ 2758.630836] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2758.631558] __list_lru_init+0x44d/0x890 [ 2758.632161] alloc_super+0x8b8/0xa90 [ 2758.632728] sget_fc+0x110/0x860 [ 2758.633224] ? set_anon_super+0xc0/0xc0 [ 2758.633821] ? pseudo_fs_get_tree+0x20/0x20 15:57:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x428c1}, 0x810) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000002b0000000a0001007770616e34000000"], 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x1, 0x1000, 0x25dfdbfc}, 0x14}}, 0x4008880) [ 2758.634450] get_tree_nodev+0x24/0x1d0 [ 2758.635309] vfs_get_tree+0x8e/0x300 [ 2758.635872] path_mount+0x14ab/0x2200 [ 2758.636431] ? strncpy_from_user+0x9e/0x470 [ 2758.637066] ? finish_automount+0xa90/0xa90 [ 2758.637702] ? getname_flags.part.0+0x1dd/0x4f0 [ 2758.638387] __x64_sys_mount+0x282/0x300 [ 2758.638985] ? copy_mnt_ns+0xa00/0xa00 [ 2758.639549] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2758.640309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2758.641070] do_syscall_64+0x33/0x40 [ 2758.641624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2758.642368] RIP: 0033:0x7f575796fb19 [ 2758.642908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2758.645583] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2758.646704] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2758.647731] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2758.648763] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2758.649798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2758.650827] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2760.042660] Bluetooth: hci2: command 0x0406 tx timeout 15:57:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 15:57:53 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x12, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:57:53 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x201, 0x0, 0x0, 0x80000000}) 15:57:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 63) fallocate(r0, 0x0, 0x0, 0x8000) 15:57:53 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x102, 0x0, 0x0, 0x80000000}) 15:57:53 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x64, 0x0, 0x0, 0x80000000}) 15:57:53 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4b49, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:57:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) 15:57:53 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x541b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 2770.406291] FAULT_INJECTION: forcing a failure. [ 2770.406291] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.408858] CPU: 1 PID: 23395 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2770.410324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2770.412056] Call Trace: [ 2770.412622] dump_stack+0x107/0x167 [ 2770.413392] should_fail.cold+0x5/0xa [ 2770.414206] ? create_object.isra.0+0x3a/0xa30 [ 2770.415162] should_failslab+0x5/0x20 [ 2770.415956] kmem_cache_alloc+0x5b/0x310 [ 2770.416813] ? mark_held_locks+0x9e/0xe0 [ 2770.417665] create_object.isra.0+0x3a/0xa30 [ 2770.418601] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2770.419669] kmem_cache_alloc_trace+0x151/0x320 [ 2770.420644] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2770.421674] __list_lru_init+0x44d/0x890 [ 2770.422547] alloc_super+0x8b8/0xa90 [ 2770.423333] sget_fc+0x110/0x860 [ 2770.424041] ? set_anon_super+0xc0/0xc0 [ 2770.424875] ? pseudo_fs_get_tree+0x20/0x20 [ 2770.425779] get_tree_nodev+0x24/0x1d0 [ 2770.426590] vfs_get_tree+0x8e/0x300 [ 2770.427364] path_mount+0x14ab/0x2200 [ 2770.428159] ? strncpy_from_user+0x9e/0x470 [ 2770.429065] ? finish_automount+0xa90/0xa90 [ 2770.429975] ? getname_flags.part.0+0x1dd/0x4f0 [ 2770.430966] __x64_sys_mount+0x282/0x300 [ 2770.431814] ? copy_mnt_ns+0xa00/0xa00 [ 2770.432632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2770.433727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2770.434819] do_syscall_64+0x33/0x40 [ 2770.435596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2770.436670] RIP: 0033:0x7f575796fb19 [ 2770.437446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2770.441294] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2770.442905] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2770.444397] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2770.445902] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2770.447393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2770.448880] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:57:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x0) 15:57:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x000\x00\x00\x00'], 0x14}}, 0x880) 15:57:53 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x102, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:57:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) 15:57:53 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5421, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:57:53 executing program 7: perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x75, 0xc, 0xa9, 0x0, 0x0, 0x3, 0x9042, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3}, 0x450, 0x1da, 0x0, 0x4, 0x7fff, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x8000004}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = epoll_create(0xffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002ec466696c65312f66696c653000"]) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000f1df7b746a47793f42f1539f37bf3535c11a85cd1373c986acf2a85d6d5996c089277f7cc372211d2099484ed87fb62a01ccc1597f84053fcfa29d7cb1d8d9fcf7e35c5ba9c8939f572972a242b31831b9bf7c241e93b16e", @ANYRES16=0x0, @ANYBLOB="4000000000000000000017000000"], 0x14}}, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) r4 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f00000001c0)=""/88) shmget$private(0x0, 0x6000, 0x540000a0, &(0x7f0000ffa000/0x6000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0xad27c3b60dcf16e0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) 15:57:53 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x281, 0x0, 0x0, 0x80000000}) 15:57:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x1090}, 0x48004) [ 2770.865340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57329 sclass=netlink_tcpdiag_socket pid=23420 comm=syz-executor.7 15:58:06 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x300, 0x0, 0x0, 0x80000000}) 15:58:06 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x109, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:58:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x300, 0x0, 0x0, 0x80000000}) 15:58:06 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 1) fallocate(r0, 0x0, 0x0, 0x8000) 15:58:06 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 64) fallocate(r0, 0x0, 0x0, 0x8000) 15:58:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x9}, 0x0) 15:58:06 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5450, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:58:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x442000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, r4, 0x200, 0x70bd29, 0x35dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40c4) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x1) [ 2783.577511] FAULT_INJECTION: forcing a failure. [ 2783.577511] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.579398] CPU: 1 PID: 23441 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2783.580444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2783.581475] Call Trace: [ 2783.581877] dump_stack+0x107/0x167 [ 2783.582442] should_fail.cold+0x5/0xa [ 2783.583029] should_failslab+0x5/0x20 [ 2783.583598] __kmalloc_track_caller+0x79/0x370 [ 2783.584280] ? strndup_user+0x74/0xe0 [ 2783.584858] memdup_user+0x22/0xd0 [ 2783.585394] strndup_user+0x74/0xe0 [ 2783.585956] __x64_sys_mount+0x133/0x300 [ 2783.586570] ? copy_mnt_ns+0xa00/0xa00 [ 2783.587156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2783.587955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2783.588733] do_syscall_64+0x33/0x40 [ 2783.589296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2783.590067] RIP: 0033:0x7fe94c52fb19 [ 2783.590626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2783.593383] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2783.594545] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 2783.595607] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2783.596687] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2783.597759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2783.598841] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 [ 2783.607559] FAULT_INJECTION: forcing a failure. [ 2783.607559] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.609324] CPU: 1 PID: 23449 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2783.610374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2783.611387] Call Trace: [ 2783.611790] dump_stack+0x107/0x167 [ 2783.612330] should_fail.cold+0x5/0xa [ 2783.612893] ? create_object.isra.0+0x3a/0xa30 [ 2783.613573] should_failslab+0x5/0x20 [ 2783.614143] kmem_cache_alloc+0x5b/0x310 [ 2783.614745] ? mark_held_locks+0x9e/0xe0 [ 2783.615346] create_object.isra.0+0x3a/0xa30 [ 2783.615998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2783.616752] kmem_cache_alloc_trace+0x151/0x320 [ 2783.617446] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2783.618197] __list_lru_init+0x44d/0x890 [ 2783.618801] alloc_super+0x8b8/0xa90 [ 2783.619357] sget_fc+0x110/0x860 [ 2783.619852] ? set_anon_super+0xc0/0xc0 [ 2783.620444] ? pseudo_fs_get_tree+0x20/0x20 [ 2783.621080] get_tree_nodev+0x24/0x1d0 [ 2783.621653] vfs_get_tree+0x8e/0x300 [ 2783.622218] path_mount+0x14ab/0x2200 [ 2783.622786] ? strncpy_from_user+0x9e/0x470 [ 2783.623428] ? finish_automount+0xa90/0xa90 [ 2783.624070] ? getname_flags.part.0+0x1dd/0x4f0 [ 2783.624764] __x64_sys_mount+0x282/0x300 [ 2783.625367] ? copy_mnt_ns+0xa00/0xa00 [ 2783.625955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2783.626734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2783.627499] do_syscall_64+0x33/0x40 [ 2783.628048] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2783.628816] RIP: 0033:0x7f575796fb19 [ 2783.629366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2783.632086] RSP: 002b:00007f5754ee5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2783.633201] RAX: ffffffffffffffda RBX: 00007f5757a82f60 RCX: 00007f575796fb19 [ 2783.634258] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2783.635119] RBP: 00007f5754ee51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2783.636170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2783.637209] R13: 00007ffc26ef80cf R14: 00007f5754ee5300 R15: 0000000000022000 15:58:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0) 15:58:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0) 15:58:06 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5451, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:58:06 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 2) fallocate(r0, 0x0, 0x0, 0x8000) 15:58:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x600}, 0x0) 15:58:06 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 65) fallocate(r0, 0x0, 0x0, 0x8000) 15:58:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x321, 0x0, 0x0, 0x80000000}) 15:58:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x0, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x40) [ 2783.913595] FAULT_INJECTION: forcing a failure. [ 2783.913595] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.915072] CPU: 1 PID: 23480 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2783.916046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2783.917205] Call Trace: [ 2783.917578] dump_stack+0x107/0x167 [ 2783.918101] should_fail.cold+0x5/0xa [ 2783.918633] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2783.919342] should_failslab+0x5/0x20 [ 2783.919795] kmem_cache_alloc_trace+0x55/0x320 [ 2783.920435] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2783.921146] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2783.921835] __list_lru_init+0x44d/0x890 [ 2783.922419] alloc_super+0x8b8/0xa90 [ 2783.922947] sget_fc+0x110/0x860 [ 2783.923419] ? set_anon_super+0xc0/0xc0 [ 2783.923974] ? pseudo_fs_get_tree+0x20/0x20 [ 2783.924576] get_tree_nodev+0x24/0x1d0 [ 2783.925119] vfs_get_tree+0x8e/0x300 [ 2783.925562] path_mount+0x14ab/0x2200 [ 2783.926111] ? strncpy_from_user+0x9e/0x470 [ 2783.926714] ? finish_automount+0xa90/0xa90 [ 2783.927216] ? getname_flags.part.0+0x1dd/0x4f0 [ 2783.927878] __x64_sys_mount+0x282/0x300 [ 2783.928446] ? copy_mnt_ns+0xa00/0xa00 [ 2783.928910] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2783.929649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2783.930383] do_syscall_64+0x33/0x40 [ 2783.930905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2783.931620] RIP: 0033:0x7f575796fb19 [ 2783.932055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2783.934642] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2783.935713] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2783.936551] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2783.937554] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2783.939091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2783.940852] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2783.959516] FAULT_INJECTION: forcing a failure. [ 2783.959516] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.961360] CPU: 0 PID: 23484 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2783.962464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2783.963718] Call Trace: [ 2783.964141] dump_stack+0x107/0x167 [ 2783.964726] should_fail.cold+0x5/0xa [ 2783.965337] ? create_object.isra.0+0x3a/0xa30 [ 2783.966066] should_failslab+0x5/0x20 [ 2783.966674] kmem_cache_alloc+0x5b/0x310 [ 2783.967322] create_object.isra.0+0x3a/0xa30 [ 2783.968020] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2783.968824] __kmalloc_track_caller+0x177/0x370 [ 2783.969559] ? strndup_user+0x74/0xe0 [ 2783.970171] memdup_user+0x22/0xd0 [ 2783.970736] strndup_user+0x74/0xe0 [ 2783.971315] __x64_sys_mount+0x133/0x300 [ 2783.971959] ? copy_mnt_ns+0xa00/0xa00 [ 2783.972587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2783.973436] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2783.974265] do_syscall_64+0x33/0x40 [ 2783.974858] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2783.975672] RIP: 0033:0x7fe94c52fb19 [ 2783.976263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2783.979175] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2783.980375] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2783.981444] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2783.982517] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2783.983644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2783.984767] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 15:58:19 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 66) fallocate(r0, 0x0, 0x0, 0x8000) 15:58:19 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x500, 0x0, 0x0, 0x80000000}) 15:58:19 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x10a, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:58:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x900}, 0x0) 15:58:19 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x321, 0x0, 0x0, 0x80000000}) 15:58:19 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5452, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:58:19 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 3) fallocate(r0, 0x0, 0x0, 0x8000) 15:58:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000055f4aa0b4636af9da5a1c4f5576c09adfb0e8e40588a2c8e53520a080a42eddf0debf9b3366cbbd96f67f5c80b68f1abda3c8c60a0274ee3fbb4c718241e3e5d45874d530fe5e7dd38fb2fa2d1e9c648cb07ee5250e6d0b2da8d3e", @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) 15:58:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 2797.024256] FAULT_INJECTION: forcing a failure. [ 2797.024256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2797.026323] CPU: 1 PID: 23514 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2797.027490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2797.028653] Call Trace: [ 2797.028972] dump_stack+0x107/0x167 [ 2797.029480] should_fail.cold+0x5/0xa [ 2797.029932] _copy_from_user+0x2e/0x1b0 [ 2797.030514] memdup_user+0x65/0xd0 [ 2797.031004] strndup_user+0x74/0xe0 [ 2797.031427] __x64_sys_mount+0x133/0x300 [ 2797.031988] ? copy_mnt_ns+0xa00/0xa00 [ 2797.032532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2797.033141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2797.033869] do_syscall_64+0x33/0x40 [ 2797.034311] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2797.035022] RIP: 0033:0x7fe94c52fb19 [ 2797.035543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2797.038126] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2797.039013] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2797.040017] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2797.040851] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2797.041838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2797.042681] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 2797.052258] FAULT_INJECTION: forcing a failure. [ 2797.052258] name failslab, interval 1, probability 0, space 0, times 0 [ 2797.053818] CPU: 1 PID: 23516 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2797.054784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2797.055742] Call Trace: [ 2797.056111] dump_stack+0x107/0x167 [ 2797.056540] should_fail.cold+0x5/0xa [ 2797.057077] ? create_object.isra.0+0x3a/0xa30 [ 2797.057716] should_failslab+0x5/0x20 [ 2797.058173] kmem_cache_alloc+0x5b/0x310 [ 2797.058743] ? mark_held_locks+0x9e/0xe0 [ 2797.059219] create_object.isra.0+0x3a/0xa30 [ 2797.059836] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2797.060438] kmem_cache_alloc_trace+0x151/0x320 [ 2797.061089] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2797.061778] __list_lru_init+0x44d/0x890 [ 2797.062272] alloc_super+0x8b8/0xa90 [ 2797.062793] sget_fc+0x110/0x860 [ 2797.063186] ? set_anon_super+0xc0/0xc0 [ 2797.063744] ? pseudo_fs_get_tree+0x20/0x20 [ 2797.064243] get_tree_nodev+0x24/0x1d0 [ 2797.064790] vfs_get_tree+0x8e/0x300 [ 2797.065310] path_mount+0x14ab/0x2200 [ 2797.065841] ? strncpy_from_user+0x9e/0x470 [ 2797.066457] ? finish_automount+0xa90/0xa90 [ 2797.067069] ? getname_flags.part.0+0x1dd/0x4f0 [ 2797.067732] __x64_sys_mount+0x282/0x300 [ 2797.068301] ? copy_mnt_ns+0xa00/0xa00 [ 2797.068850] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2797.069580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2797.070318] do_syscall_64+0x33/0x40 [ 2797.070836] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2797.071556] RIP: 0033:0x7f575796fb19 [ 2797.072078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2797.074654] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2797.075713] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2797.076750] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2797.077922] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2797.079091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2797.080175] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:58:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 15:58:20 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x10b, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:58:20 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 67) fallocate(r0, 0x0, 0x0, 0x8000) 15:58:20 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x600, 0x0, 0x0, 0x80000000}) 15:58:20 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x5460, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:58:20 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 4) fallocate(r0, 0x0, 0x0, 0x8000) [ 2797.411281] FAULT_INJECTION: forcing a failure. [ 2797.411281] name failslab, interval 1, probability 0, space 0, times 0 [ 2797.413688] CPU: 0 PID: 23540 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2797.415153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2797.416894] Call Trace: [ 2797.417454] dump_stack+0x107/0x167 [ 2797.418227] should_fail.cold+0x5/0xa [ 2797.419032] ? getname_flags.part.0+0x50/0x4f0 [ 2797.419992] should_failslab+0x5/0x20 [ 2797.420796] kmem_cache_alloc+0x5b/0x310 [ 2797.421659] getname_flags.part.0+0x50/0x4f0 [ 2797.422599] user_path_at_empty+0xa1/0x100 [ 2797.423493] __x64_sys_mount+0x1e9/0x300 [ 2797.424342] ? copy_mnt_ns+0xa00/0xa00 [ 2797.425156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2797.426271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2797.427352] do_syscall_64+0x33/0x40 [ 2797.428129] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2797.429204] RIP: 0033:0x7fe94c52fb19 [ 2797.429980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2797.433819] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2797.435403] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 2797.436882] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2797.438389] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2797.439881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2797.441377] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 [ 2797.448121] FAULT_INJECTION: forcing a failure. [ 2797.448121] name failslab, interval 1, probability 0, space 0, times 0 [ 2797.450500] CPU: 0 PID: 23541 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2797.451960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2797.453691] Call Trace: [ 2797.454252] dump_stack+0x107/0x167 [ 2797.455025] should_fail.cold+0x5/0xa [ 2797.455829] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2797.456882] should_failslab+0x5/0x20 [ 2797.457685] kmem_cache_alloc_trace+0x55/0x320 [ 2797.458645] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2797.459724] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2797.460756] __list_lru_init+0x44d/0x890 [ 2797.461613] alloc_super+0x8b8/0xa90 [ 2797.462396] sget_fc+0x110/0x860 [ 2797.463102] ? set_anon_super+0xc0/0xc0 [ 2797.463943] ? pseudo_fs_get_tree+0x20/0x20 15:58:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x60000}, 0x0) 15:58:20 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40049409, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 2797.464836] get_tree_nodev+0x24/0x1d0 [ 2797.465799] vfs_get_tree+0x8e/0x300 [ 2797.466618] path_mount+0x14ab/0x2200 [ 2797.467442] ? strncpy_from_user+0x9e/0x470 [ 2797.468375] ? finish_automount+0xa90/0xa90 [ 2797.469309] ? getname_flags.part.0+0x1dd/0x4f0 [ 2797.470337] __x64_sys_mount+0x282/0x300 [ 2797.471212] ? copy_mnt_ns+0xa00/0xa00 [ 2797.472061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2797.473190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2797.474314] do_syscall_64+0x33/0x40 [ 2797.475119] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2797.476229] RIP: 0033:0x7f575796fb19 [ 2797.477028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2797.481006] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2797.482660] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2797.484202] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2797.485722] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2797.487203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2797.488739] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:58:20 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x500, 0x0, 0x0, 0x80000000}) 15:58:20 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 68) fallocate(r0, 0x0, 0x0, 0x8000) 15:58:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 15:58:20 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc00, 0x0, 0x0, 0x80000000}) [ 2797.651045] FAULT_INJECTION: forcing a failure. [ 2797.651045] name failslab, interval 1, probability 0, space 0, times 0 [ 2797.652650] CPU: 1 PID: 23560 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2797.653619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2797.654779] Call Trace: [ 2797.655152] dump_stack+0x107/0x167 [ 2797.655663] should_fail.cold+0x5/0xa [ 2797.656197] ? create_object.isra.0+0x3a/0xa30 [ 2797.656838] should_failslab+0x5/0x20 [ 2797.657373] kmem_cache_alloc+0x5b/0x310 [ 2797.657937] ? mark_held_locks+0x9e/0xe0 [ 2797.658513] create_object.isra.0+0x3a/0xa30 [ 2797.659118] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2797.659830] kmem_cache_alloc_trace+0x151/0x320 [ 2797.660488] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2797.661179] __list_lru_init+0x44d/0x890 [ 2797.661749] alloc_super+0x8b8/0xa90 [ 2797.662279] sget_fc+0x110/0x860 [ 2797.662713] ? set_anon_super+0xc0/0xc0 [ 2797.663194] ? pseudo_fs_get_tree+0x20/0x20 [ 2797.663717] get_tree_nodev+0x24/0x1d0 [ 2797.664344] vfs_get_tree+0x8e/0x300 [ 2797.664956] path_mount+0x14ab/0x2200 [ 2797.665416] ? strncpy_from_user+0x9e/0x470 [ 2797.666095] ? finish_automount+0xa90/0xa90 [ 2797.666801] ? getname_flags.part.0+0x1dd/0x4f0 [ 2797.667555] __x64_sys_mount+0x282/0x300 [ 2797.668252] ? copy_mnt_ns+0xa00/0xa00 [ 2797.668904] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2797.669800] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2797.670751] do_syscall_64+0x33/0x40 [ 2797.671376] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2797.672306] RIP: 0033:0x7f575796fb19 [ 2797.672917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2797.676121] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2797.677407] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2797.678588] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2797.679612] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2797.680529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2797.681510] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2801.002664] Bluetooth: hci5: command 0x0406 tx timeout 15:58:32 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x600, 0x0, 0x0, 0x80000000}) 15:58:32 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x1200, 0x0, 0x0, 0x80000000}) 15:58:32 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 5) fallocate(r0, 0x0, 0x0, 0x8000) 15:58:32 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:58:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 15:58:32 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 69) fallocate(r0, 0x0, 0x0, 0x8000) 15:58:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40040) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0xfffffffc, {0x25}}, 0x14}}, 0x20000000) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000d441c13c387c47d374c5ba64be5a01d786ecc9a5b9e54788ed3c58e0393c0cdb72427cff5de61b1b300b521f3718d914e40f2bed8bd5f81c53315b2604ea539fe5a952049a4706b84a652509ba0b9cf9b9ef8bfa0f369476b0d3805a99f280377ca2d1f2", @ANYRES16=r1, @ANYBLOB="000128bd7000fbdbdf251f00000008000200", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r9, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x25}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r9, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x40) 15:58:32 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x10c, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2809.654085] FAULT_INJECTION: forcing a failure. [ 2809.654085] name failslab, interval 1, probability 0, space 0, times 0 [ 2809.656861] CPU: 1 PID: 23584 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2809.658296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2809.660042] Call Trace: [ 2809.660584] dump_stack+0x107/0x167 [ 2809.661357] should_fail.cold+0x5/0xa [ 2809.662164] ? create_object.isra.0+0x3a/0xa30 [ 2809.663142] should_failslab+0x5/0x20 [ 2809.663947] kmem_cache_alloc+0x5b/0x310 [ 2809.664809] ? __might_fault+0xd3/0x180 [ 2809.665652] create_object.isra.0+0x3a/0xa30 [ 2809.666586] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2809.667663] kmem_cache_alloc+0x159/0x310 [ 2809.668542] getname_flags.part.0+0x50/0x4f0 [ 2809.669475] user_path_at_empty+0xa1/0x100 [ 2809.670374] __x64_sys_mount+0x1e9/0x300 [ 2809.671228] ? copy_mnt_ns+0xa00/0xa00 [ 2809.672056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2809.673169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2809.674272] do_syscall_64+0x33/0x40 [ 2809.675064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2809.676122] RIP: 0033:0x7fe94c52fb19 [ 2809.676888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2809.680641] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2809.682200] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2809.683658] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2809.685123] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2809.686591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2809.688048] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 2809.699734] FAULT_INJECTION: forcing a failure. [ 2809.699734] name failslab, interval 1, probability 0, space 0, times 0 [ 2809.702585] CPU: 1 PID: 23585 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2809.704444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2809.706629] Call Trace: [ 2809.707357] dump_stack+0x107/0x167 [ 2809.708347] should_fail.cold+0x5/0xa [ 2809.709295] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2809.710691] should_failslab+0x5/0x20 [ 2809.711789] kmem_cache_alloc_trace+0x55/0x320 [ 2809.712948] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2809.714123] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2809.715463] __list_lru_init+0x44d/0x890 [ 2809.716349] alloc_super+0x8b8/0xa90 [ 2809.717337] sget_fc+0x110/0x860 [ 2809.718132] ? set_anon_super+0xc0/0xc0 [ 2809.719141] ? pseudo_fs_get_tree+0x20/0x20 [ 2809.720232] get_tree_nodev+0x24/0x1d0 [ 2809.721166] vfs_get_tree+0x8e/0x300 [ 2809.722067] path_mount+0x14ab/0x2200 [ 2809.722866] ? strncpy_from_user+0x9e/0x470 [ 2809.723774] ? finish_automount+0xa90/0xa90 [ 2809.724807] ? getname_flags.part.0+0x1dd/0x4f0 [ 2809.725791] __x64_sys_mount+0x282/0x300 [ 2809.726652] ? copy_mnt_ns+0xa00/0xa00 [ 2809.727468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2809.728573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2809.729654] do_syscall_64+0x33/0x40 [ 2809.730625] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2809.731864] RIP: 0033:0x7f575796fb19 [ 2809.732793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2809.736846] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2809.738826] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2809.740460] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2809.741959] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2809.743471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2809.745252] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:58:32 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40087602, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:58:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 2809.816054] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 2809.849443] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. 15:58:32 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x2103, 0x0, 0x0, 0x80000000}) 15:58:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 15:58:32 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x700, 0x0, 0x0, 0x80000000}) 15:58:32 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 6) fallocate(r0, 0x0, 0x0, 0x8000) 15:58:32 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4020940d, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 2810.134954] FAULT_INJECTION: forcing a failure. [ 2810.134954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2810.137753] CPU: 0 PID: 23606 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2810.139437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2810.141288] Call Trace: [ 2810.141885] dump_stack+0x107/0x167 [ 2810.142714] should_fail.cold+0x5/0xa [ 2810.143575] strncpy_from_user+0x34/0x470 [ 2810.144519] getname_flags.part.0+0x95/0x4f0 [ 2810.145520] user_path_at_empty+0xa1/0x100 [ 2810.146479] __x64_sys_mount+0x1e9/0x300 [ 2810.147384] ? copy_mnt_ns+0xa00/0xa00 [ 2810.148261] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2810.149432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2810.150600] do_syscall_64+0x33/0x40 [ 2810.151452] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2810.152595] RIP: 0033:0x7fe94c52fb19 [ 2810.153450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2810.157567] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2810.159337] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 2810.160978] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2810.162633] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2810.164283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2810.165930] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 15:58:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 15:58:33 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:58:33 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x201, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 2814.762691] Bluetooth: hci4: command 0x0409 tx timeout [ 2816.810703] Bluetooth: hci4: command 0x041b tx timeout [ 2818.858688] Bluetooth: hci4: command 0x040f tx timeout [ 2819.647165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2819.649408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2819.652883] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2819.707495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2819.709064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2819.711300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2824.298708] Bluetooth: hci4: command 0x0409 tx timeout [ 2826.346789] Bluetooth: hci4: command 0x041b tx timeout [ 2828.394686] Bluetooth: hci4: command 0x040f tx timeout [ 2829.029329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2829.031618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2829.038873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2829.084030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2829.085794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2829.088460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2830.442751] Bluetooth: hci4: command 0x0419 tx timeout 15:59:05 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 70) fallocate(r0, 0x0, 0x0, 0x8000) 15:59:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 15:59:05 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x20000001}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x1}, 0x14}}, 0x0) 15:59:05 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x281, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:59:05 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:59:05 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3f00, 0x0, 0x0, 0x80000000}) 15:59:05 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x900, 0x0, 0x0, 0x80000000}) 15:59:05 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 7) fallocate(r0, 0x0, 0x0, 0x8000) [ 2842.902322] FAULT_INJECTION: forcing a failure. [ 2842.902322] name failslab, interval 1, probability 0, space 0, times 0 [ 2842.904727] CPU: 0 PID: 24563 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2842.906276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2842.908236] Call Trace: [ 2842.908864] dump_stack+0x107/0x167 [ 2842.909756] should_fail.cold+0x5/0xa [ 2842.910665] ? create_object.isra.0+0x3a/0xa30 [ 2842.911745] should_failslab+0x5/0x20 [ 2842.912651] kmem_cache_alloc+0x5b/0x310 [ 2842.913618] create_object.isra.0+0x3a/0xa30 [ 2842.914669] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2842.915884] kmem_cache_alloc_trace+0x151/0x320 [ 2842.917005] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2842.917817] FAULT_INJECTION: forcing a failure. [ 2842.917817] name failslab, interval 1, probability 0, space 0, times 0 [ 2842.918171] __list_lru_init+0x44d/0x890 [ 2842.920501] alloc_super+0x8b8/0xa90 [ 2842.921411] sget_fc+0x110/0x860 [ 2842.922235] ? set_anon_super+0xc0/0xc0 [ 2842.923215] ? pseudo_fs_get_tree+0x20/0x20 [ 2842.924255] get_tree_nodev+0x24/0x1d0 [ 2842.925195] vfs_get_tree+0x8e/0x300 [ 2842.926092] path_mount+0x14ab/0x2200 [ 2842.927021] ? strncpy_from_user+0x9e/0x470 [ 2842.928061] ? finish_automount+0xa90/0xa90 [ 2842.929101] ? getname_flags.part.0+0x1dd/0x4f0 [ 2842.930233] __x64_sys_mount+0x282/0x300 [ 2842.931214] ? copy_mnt_ns+0xa00/0xa00 [ 2842.932157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2842.933422] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2842.934678] do_syscall_64+0x33/0x40 [ 2842.935578] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2842.936811] RIP: 0033:0x7f575796fb19 [ 2842.937707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2842.942137] RSP: 002b:00007f5754ee5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2842.943964] RAX: ffffffffffffffda RBX: 00007f5757a82f60 RCX: 00007f575796fb19 [ 2842.945670] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2842.947380] RBP: 00007f5754ee51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2842.949083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2842.950795] R13: 00007ffc26ef80cf R14: 00007f5754ee5300 R15: 0000000000022000 [ 2842.952522] CPU: 1 PID: 24567 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2842.953379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2842.954357] Call Trace: [ 2842.954690] dump_stack+0x107/0x167 [ 2842.955118] should_fail.cold+0x5/0xa [ 2842.955581] ? alloc_fs_context+0x58/0x870 [ 2842.956082] should_failslab+0x5/0x20 [ 2842.956548] kmem_cache_alloc_trace+0x55/0x320 [ 2842.957086] alloc_fs_context+0x58/0x870 [ 2842.957586] path_mount+0xac3/0x2200 [ 2842.958047] ? strncpy_from_user+0x9e/0x470 [ 2842.958585] ? finish_automount+0xa90/0xa90 [ 2842.959114] ? getname_flags.part.0+0x1dd/0x4f0 [ 2842.959690] __x64_sys_mount+0x282/0x300 [ 2842.960177] ? copy_mnt_ns+0xa00/0xa00 [ 2842.960640] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2842.961278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2842.961886] do_syscall_64+0x33/0x40 [ 2842.962335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2842.963040] RIP: 0033:0x7fe94c52fb19 [ 2842.963657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2842.965814] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2842.966736] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2842.967572] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2842.968440] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2842.969303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2842.970159] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 15:59:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 15:59:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0200000000000000000030000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20002000}, 0x4004000) 15:59:05 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4000, 0x0, 0x0, 0x80000000}) 15:59:05 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 71) fallocate(r0, 0x0, 0x0, 0x8000) 15:59:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x2) 15:59:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) 15:59:05 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x901, 0x0, 0x0, 0x80000000}) [ 2843.224991] FAULT_INJECTION: forcing a failure. [ 2843.224991] name failslab, interval 1, probability 0, space 0, times 0 [ 2843.227712] CPU: 0 PID: 24587 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2843.229304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2843.231213] Call Trace: [ 2843.231823] dump_stack+0x107/0x167 [ 2843.232662] should_fail.cold+0x5/0xa [ 2843.233543] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2843.234713] should_failslab+0x5/0x20 [ 2843.235594] kmem_cache_alloc_trace+0x55/0x320 [ 2843.236649] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2843.237821] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2843.238964] __list_lru_init+0x44d/0x890 [ 2843.239908] alloc_super+0x8b8/0xa90 [ 2843.240773] sget_fc+0x110/0x860 [ 2843.241549] ? set_anon_super+0xc0/0xc0 [ 2843.242471] ? pseudo_fs_get_tree+0x20/0x20 [ 2843.243466] get_tree_nodev+0x24/0x1d0 [ 2843.244369] vfs_get_tree+0x8e/0x300 [ 2843.245227] path_mount+0x14ab/0x2200 [ 2843.246106] ? strncpy_from_user+0x9e/0x470 [ 2843.247104] ? finish_automount+0xa90/0xa90 [ 2843.248097] ? getname_flags.part.0+0x1dd/0x4f0 [ 2843.249177] __x64_sys_mount+0x282/0x300 [ 2843.250110] ? copy_mnt_ns+0xa00/0xa00 [ 2843.251025] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2843.252242] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2843.253433] do_syscall_64+0x33/0x40 [ 2843.254301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2843.255500] RIP: 0033:0x7f575796fb19 [ 2843.256360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2843.260640] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2843.262415] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2843.264081] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2843.265735] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2843.267401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2843.269055] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:59:06 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 8) fallocate(r0, 0x0, 0x0, 0x8000) [ 2843.433390] FAULT_INJECTION: forcing a failure. [ 2843.433390] name failslab, interval 1, probability 0, space 0, times 0 [ 2843.434823] CPU: 1 PID: 24597 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2843.435654] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2843.436596] Call Trace: [ 2843.436917] dump_stack+0x107/0x167 [ 2843.437345] should_fail.cold+0x5/0xa [ 2843.437788] ? create_object.isra.0+0x3a/0xa30 [ 2843.438332] should_failslab+0x5/0x20 [ 2843.438795] kmem_cache_alloc+0x5b/0x310 [ 2843.439278] create_object.isra.0+0x3a/0xa30 [ 2843.439795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2843.440400] kmem_cache_alloc_trace+0x151/0x320 [ 2843.440954] alloc_fs_context+0x58/0x870 [ 2843.441438] path_mount+0xac3/0x2200 [ 2843.441886] ? strncpy_from_user+0x9e/0x470 [ 2843.442397] ? finish_automount+0xa90/0xa90 [ 2843.442918] ? getname_flags.part.0+0x1dd/0x4f0 [ 2843.443472] __x64_sys_mount+0x282/0x300 [ 2843.443956] ? copy_mnt_ns+0xa00/0xa00 [ 2843.444419] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2843.445036] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2843.445655] do_syscall_64+0x33/0x40 [ 2843.446096] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2843.446719] RIP: 0033:0x7fe94c52fb19 [ 2843.447162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2843.449343] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2843.450248] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2843.451117] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2843.451976] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2843.452793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2843.453644] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 2847.914881] Bluetooth: hci5: command 0x0409 tx timeout [ 2849.962782] Bluetooth: hci5: command 0x041b tx timeout [ 2852.010726] Bluetooth: hci5: command 0x040f tx timeout [ 2852.850893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2852.853026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2852.856435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2852.903239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2852.905035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2852.907896] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2854.058697] Bluetooth: hci5: command 0x0419 tx timeout 15:59:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x3) 15:59:31 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 9) fallocate(r0, 0x0, 0x0, 0x8000) 15:59:31 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x300, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:59:31 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xa00, 0x0, 0x0, 0x80000000}) 15:59:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd2605d68c0ff7937}]}]}, 0x20}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r7, 0x3, 0x6, @random="e84d67fd941f"}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @multicast2}, &(0x7f00000001c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x1d0, r3, 0x110, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 15:59:31 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:59:31 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6400, 0x0, 0x0, 0x80000000}) 15:59:31 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 72) fallocate(r0, 0x0, 0x0, 0x8000) [ 2868.716013] device lo entered promiscuous mode [ 2868.724035] device lo left promiscuous mode [ 2868.734555] device lo entered promiscuous mode [ 2868.735517] device lo left promiscuous mode [ 2868.757875] FAULT_INJECTION: forcing a failure. [ 2868.757875] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.759640] CPU: 0 PID: 25085 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2868.760740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.761878] Call Trace: [ 2868.762255] dump_stack+0x107/0x167 [ 2868.762784] should_fail.cold+0x5/0xa [ 2868.763323] ? init_pseudo+0x44/0x180 [ 2868.763848] should_failslab+0x5/0x20 [ 2868.764374] kmem_cache_alloc_trace+0x55/0x320 [ 2868.765021] init_pseudo+0x44/0x180 [ 2868.765529] ? pipe_read+0xfd0/0xfd0 [ 2868.766046] pipefs_init_fs_context+0x19/0xa0 [ 2868.766685] ? pipe_read+0xfd0/0xfd0 [ 2868.767207] alloc_fs_context+0x518/0x870 [ 2868.767791] path_mount+0xac3/0x2200 [ 2868.768323] ? strncpy_from_user+0x9e/0x470 [ 2868.768917] ? finish_automount+0xa90/0xa90 [ 2868.769515] ? getname_flags.part.0+0x1dd/0x4f0 [ 2868.770165] __x64_sys_mount+0x282/0x300 [ 2868.770748] ? copy_mnt_ns+0xa00/0xa00 [ 2868.771317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.772041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.772753] do_syscall_64+0x33/0x40 [ 2868.773274] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.773979] RIP: 0033:0x7fe94c52fb19 [ 2868.774504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.777125] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2868.778194] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2868.779193] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2868.780201] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.781206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2868.782209] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 2868.787208] FAULT_INJECTION: forcing a failure. [ 2868.787208] name failslab, interval 1, probability 0, space 0, times 0 [ 2868.788865] CPU: 0 PID: 25086 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2868.790132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.791618] Call Trace: [ 2868.792102] dump_stack+0x107/0x167 [ 2868.792714] should_fail.cold+0x5/0xa [ 2868.793248] ? create_object.isra.0+0x3a/0xa30 [ 2868.793900] should_failslab+0x5/0x20 [ 2868.794450] kmem_cache_alloc+0x5b/0x310 [ 2868.795032] ? mark_held_locks+0x9e/0xe0 [ 2868.795671] create_object.isra.0+0x3a/0xa30 [ 2868.796297] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2868.797092] kmem_cache_alloc_trace+0x151/0x320 [ 2868.797772] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2868.798476] __list_lru_init+0x44d/0x890 [ 2868.799055] alloc_super+0x8b8/0xa90 [ 2868.799591] sget_fc+0x110/0x860 [ 2868.800059] ? set_anon_super+0xc0/0xc0 [ 2868.800624] ? pseudo_fs_get_tree+0x20/0x20 [ 2868.801214] get_tree_nodev+0x24/0x1d0 [ 2868.801776] vfs_get_tree+0x8e/0x300 [ 2868.802302] path_mount+0x14ab/0x2200 [ 2868.802865] ? strncpy_from_user+0x9e/0x470 [ 2868.803465] ? finish_automount+0xa90/0xa90 [ 2868.804062] ? getname_flags.part.0+0x1dd/0x4f0 [ 2868.804711] __x64_sys_mount+0x282/0x300 [ 2868.805268] ? copy_mnt_ns+0xa00/0xa00 [ 2868.805804] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2868.806547] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2868.807272] do_syscall_64+0x33/0x40 [ 2868.807787] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2868.808498] RIP: 0033:0x7f575796fb19 [ 2868.809011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.811534] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2868.812568] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2868.813544] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2868.814521] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2868.815506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2868.816480] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:59:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) 15:59:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x6) 15:59:31 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 10) fallocate(r0, 0x0, 0x0, 0x8000) 15:59:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x8) 15:59:31 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:59:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 15:59:31 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 73) fallocate(r0, 0x0, 0x0, 0x8000) [ 2869.067700] FAULT_INJECTION: forcing a failure. [ 2869.067700] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.069361] CPU: 0 PID: 25106 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2869.070379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2869.071468] Call Trace: [ 2869.071822] dump_stack+0x107/0x167 [ 2869.072298] should_fail.cold+0x5/0xa [ 2869.072803] ? create_object.isra.0+0x3a/0xa30 [ 2869.073393] should_failslab+0x5/0x20 [ 2869.073893] kmem_cache_alloc+0x5b/0x310 [ 2869.074417] create_object.isra.0+0x3a/0xa30 [ 2869.074995] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2869.075659] kmem_cache_alloc_trace+0x151/0x320 [ 2869.076265] init_pseudo+0x44/0x180 [ 2869.076734] ? pipe_read+0xfd0/0xfd0 [ 2869.077220] pipefs_init_fs_context+0x19/0xa0 [ 2869.077791] ? pipe_read+0xfd0/0xfd0 [ 2869.078273] alloc_fs_context+0x518/0x870 [ 2869.078812] path_mount+0xac3/0x2200 [ 2869.079300] ? strncpy_from_user+0x9e/0x470 [ 2869.079855] ? finish_automount+0xa90/0xa90 [ 2869.080412] ? getname_flags.part.0+0x1dd/0x4f0 [ 2869.081011] __x64_sys_mount+0x282/0x300 [ 2869.081543] ? copy_mnt_ns+0xa00/0xa00 [ 2869.082048] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2869.082723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2869.083400] do_syscall_64+0x33/0x40 [ 2869.083880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2869.084545] RIP: 0033:0x7fe94c52fb19 [ 2869.085028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2869.087404] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2869.088396] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2869.089324] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2869.090246] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2869.091164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2869.092069] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 15:59:31 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) [ 2869.189054] FAULT_INJECTION: forcing a failure. [ 2869.189054] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.190660] CPU: 1 PID: 25116 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2869.191585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2869.192675] Call Trace: [ 2869.193021] dump_stack+0x107/0x167 [ 2869.193510] should_fail.cold+0x5/0xa [ 2869.194010] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2869.194668] should_failslab+0x5/0x20 [ 2869.195191] kmem_cache_alloc_trace+0x55/0x320 [ 2869.195781] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2869.196457] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2869.197103] __list_lru_init+0x44d/0x890 [ 2869.197651] alloc_super+0x8b8/0xa90 [ 2869.198143] sget_fc+0x110/0x860 [ 2869.198580] ? set_anon_super+0xc0/0xc0 [ 2869.199110] ? pseudo_fs_get_tree+0x20/0x20 [ 2869.199678] get_tree_nodev+0x24/0x1d0 [ 2869.200189] vfs_get_tree+0x8e/0x300 [ 2869.200671] path_mount+0x14ab/0x2200 [ 2869.201171] ? strncpy_from_user+0x9e/0x470 [ 2869.201740] ? finish_automount+0xa90/0xa90 [ 2869.202280] ? getname_flags.part.0+0x1dd/0x4f0 [ 2869.202910] __x64_sys_mount+0x282/0x300 [ 2869.203446] ? copy_mnt_ns+0xa00/0xa00 [ 2869.203962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2869.204647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2869.205319] do_syscall_64+0x33/0x40 [ 2869.205807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2869.206487] RIP: 0033:0x7f575796fb19 [ 2869.206963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2869.209372] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2869.210356] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2869.211295] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2869.212230] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2869.213162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2869.214038] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 15:59:43 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 74) fallocate(r0, 0x0, 0x0, 0x8000) 15:59:43 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xa01, 0x0, 0x0, 0x80000000}) 15:59:43 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x80086601, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:59:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r4) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES16=r6, @ANYRESOCT=r1, @ANYRESOCT=r4, @ANYBLOB="42521700568b17c831f4b8ef39f9ade153220541090025febf1fa734ecfdf373088718d59a74530257f73c311e9b2c78074f824a3b3ab535d82302a3f831d8cca48fc54bc2d2f6bab452a5a00000f448bf5799c79882271d04ab04c0b30e91"], 0x40}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0d1) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0x800}, 0x14}}, 0x0) 15:59:43 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x321, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:59:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x9) 15:59:43 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 11) fallocate(r0, 0x0, 0x0, 0x8000) 15:59:43 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x2, 0x0, 0x80000000}) [ 2881.141242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=25125 comm=syz-executor.4 [ 2881.179548] FAULT_INJECTION: forcing a failure. [ 2881.179548] name failslab, interval 1, probability 0, space 0, times 0 [ 2881.182748] CPU: 1 PID: 25138 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2881.184576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2881.186882] Call Trace: [ 2881.187614] dump_stack+0x107/0x167 [ 2881.188677] should_fail.cold+0x5/0xa [ 2881.189786] ? create_object.isra.0+0x3a/0xa30 [ 2881.191033] should_failslab+0x5/0x20 [ 2881.192105] kmem_cache_alloc+0x5b/0x310 [ 2881.193190] ? mark_held_locks+0x9e/0xe0 [ 2881.194277] create_object.isra.0+0x3a/0xa30 [ 2881.195273] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2881.196412] kmem_cache_alloc_trace+0x151/0x320 [ 2881.197457] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2881.198553] __list_lru_init+0x44d/0x890 [ 2881.199473] alloc_super+0x8b8/0xa90 [ 2881.200311] sget_fc+0x110/0x860 [ 2881.201065] ? set_anon_super+0xc0/0xc0 [ 2881.201957] ? pseudo_fs_get_tree+0x20/0x20 [ 2881.202918] get_tree_nodev+0x24/0x1d0 [ 2881.203792] vfs_get_tree+0x8e/0x300 [ 2881.204627] path_mount+0x14ab/0x2200 [ 2881.205480] ? strncpy_from_user+0x9e/0x470 [ 2881.206444] ? finish_automount+0xa90/0xa90 [ 2881.207417] ? getname_flags.part.0+0x1dd/0x4f0 [ 2881.208478] __x64_sys_mount+0x282/0x300 [ 2881.209391] ? copy_mnt_ns+0xa00/0xa00 [ 2881.210271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2881.211457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2881.212612] do_syscall_64+0x33/0x40 [ 2881.213443] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2881.214590] RIP: 0033:0x7f575796fb19 [ 2881.215436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2881.219571] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2881.221269] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2881.222854] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2881.224459] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2881.226056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2881.227662] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2881.233476] FAULT_INJECTION: forcing a failure. [ 2881.233476] name failslab, interval 1, probability 0, space 0, times 0 [ 2881.236036] CPU: 1 PID: 25143 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2881.237586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2881.239456] Call Trace: [ 2881.240052] dump_stack+0x107/0x167 [ 2881.240883] should_fail.cold+0x5/0xa [ 2881.241742] ? alloc_super+0x52/0xa90 [ 2881.242597] should_failslab+0x5/0x20 [ 2881.243462] kmem_cache_alloc_trace+0x55/0x320 [ 2881.244487] ? do_raw_spin_lock+0x121/0x260 [ 2881.245466] alloc_super+0x52/0xa90 [ 2881.246295] sget_fc+0x110/0x860 [ 2881.247069] ? set_anon_super+0xc0/0xc0 [ 2881.247972] ? pseudo_fs_get_tree+0x20/0x20 [ 2881.248940] get_tree_nodev+0x24/0x1d0 [ 2881.249823] vfs_get_tree+0x8e/0x300 [ 2881.250660] path_mount+0x14ab/0x2200 [ 2881.251524] ? strncpy_from_user+0x9e/0x470 [ 2881.252487] ? finish_automount+0xa90/0xa90 [ 2881.253455] ? getname_flags.part.0+0x1dd/0x4f0 [ 2881.254506] __x64_sys_mount+0x282/0x300 [ 2881.255422] ? copy_mnt_ns+0xa00/0xa00 [ 2881.256297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2881.257472] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2881.258629] do_syscall_64+0x33/0x40 [ 2881.259473] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2881.260621] RIP: 0033:0x7fe94c52fb19 [ 2881.261457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2881.265590] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2881.267316] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2881.268926] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2881.270529] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2881.272145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2881.273742] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 2881.290982] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=25125 comm=syz-executor.4 15:59:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0xf) 15:59:44 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x80087601, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:59:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x300) 15:59:56 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x3, 0x0, 0x80000000}) 15:59:56 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xb00, 0x0, 0x0, 0x80000000}) 15:59:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x600) 15:59:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x1}, 0x14}}, 0x0) 15:59:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0045878, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 15:59:56 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 12) fallocate(r0, 0x0, 0x0, 0x8000) 15:59:56 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 75) fallocate(r0, 0x0, 0x0, 0x8000) 15:59:56 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x500, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 15:59:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000008030000000"], 0x14}}, 0x0) [ 2893.785881] FAULT_INJECTION: forcing a failure. [ 2893.785881] name failslab, interval 1, probability 0, space 0, times 0 [ 2893.787285] CPU: 0 PID: 25182 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2893.788125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2893.789133] Call Trace: [ 2893.789462] dump_stack+0x107/0x167 [ 2893.789914] should_fail.cold+0x5/0xa [ 2893.790388] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2893.790999] should_failslab+0x5/0x20 [ 2893.791470] kmem_cache_alloc_trace+0x55/0x320 [ 2893.792024] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2893.792645] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2893.793239] __list_lru_init+0x44d/0x890 [ 2893.793740] alloc_super+0x8b8/0xa90 [ 2893.794197] sget_fc+0x110/0x860 [ 2893.794606] ? set_anon_super+0xc0/0xc0 [ 2893.795090] ? pseudo_fs_get_tree+0x20/0x20 [ 2893.795624] get_tree_nodev+0x24/0x1d0 [ 2893.796095] vfs_get_tree+0x8e/0x300 [ 2893.796544] path_mount+0x14ab/0x2200 [ 2893.797007] ? strncpy_from_user+0x9e/0x470 [ 2893.797532] ? finish_automount+0xa90/0xa90 [ 2893.798059] ? getname_flags.part.0+0x1dd/0x4f0 [ 2893.798630] __x64_sys_mount+0x282/0x300 [ 2893.799122] ? copy_mnt_ns+0xa00/0xa00 [ 2893.799595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2893.800225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2893.800847] do_syscall_64+0x33/0x40 [ 2893.801295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2893.801915] RIP: 0033:0x7f575796fb19 [ 2893.802363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2893.803391] FAULT_INJECTION: forcing a failure. [ 2893.803391] name failslab, interval 1, probability 0, space 0, times 0 [ 2893.804578] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2893.804592] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2893.804600] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2893.804607] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2893.804614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2893.804621] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2893.816887] CPU: 1 PID: 25183 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2893.818386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2893.820187] Call Trace: [ 2893.820768] dump_stack+0x107/0x167 [ 2893.821560] should_fail.cold+0x5/0xa [ 2893.822390] ? create_object.isra.0+0x3a/0xa30 [ 2893.823391] should_failslab+0x5/0x20 [ 2893.824217] kmem_cache_alloc+0x5b/0x310 [ 2893.825105] create_object.isra.0+0x3a/0xa30 [ 2893.826058] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2893.827171] kmem_cache_alloc_trace+0x151/0x320 [ 2893.828188] alloc_super+0x52/0xa90 [ 2893.828984] sget_fc+0x110/0x860 [ 2893.829718] ? set_anon_super+0xc0/0xc0 [ 2893.830586] ? pseudo_fs_get_tree+0x20/0x20 [ 2893.831530] get_tree_nodev+0x24/0x1d0 [ 2893.832377] vfs_get_tree+0x8e/0x300 [ 2893.833187] path_mount+0x14ab/0x2200 [ 2893.834017] ? strncpy_from_user+0x9e/0x470 [ 2893.834954] ? finish_automount+0xa90/0xa90 [ 2893.835898] ? getname_flags.part.0+0x1dd/0x4f0 [ 2893.836919] __x64_sys_mount+0x282/0x300 [ 2893.837795] ? copy_mnt_ns+0xa00/0xa00 [ 2893.838644] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2893.839788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2893.840909] do_syscall_64+0x33/0x40 [ 2893.841713] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2893.842798] RIP: 0033:0x7fe94c52fb19 [ 2893.843574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2893.847505] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2893.849149] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2893.850690] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2893.852243] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2893.853791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2893.855341] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 15:59:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x900) 15:59:56 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x4, 0x0, 0x80000000}) 15:59:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0045878, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:00:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd2d}, 0x14}}, 0x24005840) 16:00:09 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc00, 0x0, 0x0, 0x80000000}) 16:00:09 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 13) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:09 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:00:09 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x600, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:00:09 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x5, 0x0, 0x80000000}) 16:00:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0xf00) 16:00:09 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 76) fallocate(r0, 0x0, 0x0, 0x8000) [ 2907.048308] FAULT_INJECTION: forcing a failure. [ 2907.048308] name failslab, interval 1, probability 0, space 0, times 0 [ 2907.051369] CPU: 1 PID: 25222 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2907.053155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2907.055290] Call Trace: [ 2907.055958] dump_stack+0x107/0x167 [ 2907.056862] should_fail.cold+0x5/0xa [ 2907.057860] ? alloc_super+0x52/0xa90 [ 2907.058848] should_failslab+0x5/0x20 [ 2907.059763] kmem_cache_alloc_trace+0x55/0x320 [ 2907.060950] ? do_raw_spin_lock+0x121/0x260 [ 2907.062084] alloc_super+0x52/0xa90 [ 2907.062857] sget_fc+0x110/0x860 [ 2907.063589] ? set_anon_super+0xc0/0xc0 [ 2907.064435] ? pseudo_fs_get_tree+0x20/0x20 [ 2907.065345] get_tree_nodev+0x24/0x1d0 [ 2907.066275] vfs_get_tree+0x8e/0x300 [ 2907.067066] path_mount+0x14ab/0x2200 [ 2907.067936] ? strncpy_from_user+0x9e/0x470 [ 2907.069021] ? finish_automount+0xa90/0xa90 [ 2907.070148] ? getname_flags.part.0+0x1dd/0x4f0 [ 2907.071209] __x64_sys_mount+0x282/0x300 [ 2907.072291] ? copy_mnt_ns+0xa00/0xa00 [ 2907.073269] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2907.074674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2907.075994] do_syscall_64+0x33/0x40 [ 2907.076877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2907.078075] RIP: 0033:0x7fe94c52fb19 [ 2907.078960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2907.083300] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2907.085246] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2907.087036] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2907.088686] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2907.090485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2907.091992] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:00:09 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x6, 0x0, 0x80000000}) 16:00:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x30000) [ 2907.173439] FAULT_INJECTION: forcing a failure. [ 2907.173439] name failslab, interval 1, probability 0, space 0, times 0 [ 2907.175929] CPU: 1 PID: 25224 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2907.177384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2907.179138] Call Trace: [ 2907.179705] dump_stack+0x107/0x167 [ 2907.180484] should_fail.cold+0x5/0xa [ 2907.181289] ? create_object.isra.0+0x3a/0xa30 [ 2907.182243] should_failslab+0x5/0x20 [ 2907.183038] kmem_cache_alloc+0x5b/0x310 [ 2907.183900] ? mark_held_locks+0x9e/0xe0 [ 2907.184751] create_object.isra.0+0x3a/0xa30 [ 2907.185658] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2907.186722] kmem_cache_alloc_trace+0x151/0x320 [ 2907.187701] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2907.188730] __list_lru_init+0x44d/0x890 [ 2907.189583] alloc_super+0x8b8/0xa90 [ 2907.190365] sget_fc+0x110/0x860 [ 2907.191075] ? set_anon_super+0xc0/0xc0 [ 2907.191915] ? pseudo_fs_get_tree+0x20/0x20 [ 2907.192814] get_tree_nodev+0x24/0x1d0 [ 2907.193625] vfs_get_tree+0x8e/0x300 [ 2907.194397] path_mount+0x14ab/0x2200 [ 2907.195199] ? strncpy_from_user+0x9e/0x470 [ 2907.196105] ? finish_automount+0xa90/0xa90 [ 2907.196998] ? getname_flags.part.0+0x1dd/0x4f0 [ 2907.197973] __x64_sys_mount+0x282/0x300 [ 2907.198811] ? copy_mnt_ns+0xa00/0xa00 [ 2907.199634] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2907.200729] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2907.201805] do_syscall_64+0x33/0x40 [ 2907.202583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2907.203649] RIP: 0033:0x7f575796fb19 [ 2907.204428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2907.208264] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2907.209847] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2907.211343] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2907.212824] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2907.214304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2907.215800] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:00:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x8, 0x0, 0x80000000}) 16:00:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x60000) 16:00:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0xc020660b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:00:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x80000000}) 16:00:10 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xd00, 0x0, 0x0, 0x80000000}) 16:00:10 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 77) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:10 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 14) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x10, 0x0, 0x80000000}) [ 2907.768743] FAULT_INJECTION: forcing a failure. [ 2907.768743] name failslab, interval 1, probability 0, space 0, times 0 [ 2907.770607] CPU: 1 PID: 25249 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2907.771655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2907.772919] Call Trace: [ 2907.773330] dump_stack+0x107/0x167 [ 2907.773873] should_fail.cold+0x5/0xa [ 2907.774445] ? create_object.isra.0+0x3a/0xa30 [ 2907.775122] should_failslab+0x5/0x20 [ 2907.775700] kmem_cache_alloc+0x5b/0x310 [ 2907.776297] ? mark_held_locks+0x9e/0xe0 [ 2907.776898] create_object.isra.0+0x3a/0xa30 [ 2907.777548] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2907.778298] kmem_cache_alloc_trace+0x151/0x320 [ 2907.778990] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2907.779734] __list_lru_init+0x44d/0x890 [ 2907.780342] alloc_super+0x8b8/0xa90 [ 2907.780904] sget_fc+0x110/0x860 [ 2907.781401] ? set_anon_super+0xc0/0xc0 [ 2907.781990] ? pseudo_fs_get_tree+0x20/0x20 [ 2907.782625] get_tree_nodev+0x24/0x1d0 [ 2907.783199] vfs_get_tree+0x8e/0x300 [ 2907.783755] path_mount+0x14ab/0x2200 [ 2907.784318] ? strncpy_from_user+0x9e/0x470 [ 2907.784958] ? finish_automount+0xa90/0xa90 [ 2907.785602] ? getname_flags.part.0+0x1dd/0x4f0 [ 2907.786299] __x64_sys_mount+0x282/0x300 [ 2907.786900] ? copy_mnt_ns+0xa00/0xa00 [ 2907.787484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2907.788272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2907.789039] do_syscall_64+0x33/0x40 [ 2907.789590] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2907.790347] RIP: 0033:0x7f575796fb19 [ 2907.790894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2907.793602] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2907.794717] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2907.795786] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2907.796823] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2907.797884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2907.798943] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2907.833223] FAULT_INJECTION: forcing a failure. [ 2907.833223] name failslab, interval 1, probability 0, space 0, times 0 [ 2907.835261] CPU: 1 PID: 25256 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2907.836327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2907.837507] Call Trace: [ 2907.837888] dump_stack+0x107/0x167 [ 2907.838405] should_fail.cold+0x5/0xa [ 2907.838954] ? create_object.isra.0+0x3a/0xa30 [ 2907.839612] should_failslab+0x5/0x20 [ 2907.840151] kmem_cache_alloc+0x5b/0x310 [ 2907.840730] create_object.isra.0+0x3a/0xa30 [ 2907.841349] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2907.842079] kmem_cache_alloc_trace+0x151/0x320 [ 2907.842733] alloc_super+0x52/0xa90 [ 2907.843252] sget_fc+0x110/0x860 [ 2907.843752] ? set_anon_super+0xc0/0xc0 [ 2907.844313] ? pseudo_fs_get_tree+0x20/0x20 [ 2907.844924] get_tree_nodev+0x24/0x1d0 [ 2907.845471] vfs_get_tree+0x8e/0x300 [ 2907.845991] path_mount+0x14ab/0x2200 [ 2907.846527] ? strncpy_from_user+0x9e/0x470 [ 2907.847140] ? finish_automount+0xa90/0xa90 [ 2907.847753] ? getname_flags.part.0+0x1dd/0x4f0 [ 2907.848413] __x64_sys_mount+0x282/0x300 [ 2907.848986] ? copy_mnt_ns+0xa00/0xa00 [ 2907.849534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2907.850270] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2907.850992] do_syscall_64+0x33/0x40 [ 2907.851531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2907.852250] RIP: 0033:0x7fe94c52fb19 [ 2907.852773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2907.855344] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2907.856411] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2907.857397] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2907.858384] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2907.859387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2907.860372] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:00:10 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x681, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:00:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x12, 0x0, 0x80000000}) 16:00:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x64, 0x0, 0x80000000}) 16:00:10 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xe00, 0x0, 0x0, 0x80000000}) 16:00:10 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 15) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x300, 0x0, 0x80000000}) 16:00:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x321, 0x0, 0x80000000}) [ 2908.257826] FAULT_INJECTION: forcing a failure. [ 2908.257826] name failslab, interval 1, probability 0, space 0, times 0 [ 2908.260080] CPU: 0 PID: 25279 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2908.261429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2908.263040] Call Trace: [ 2908.263572] dump_stack+0x107/0x167 [ 2908.264297] should_fail.cold+0x5/0xa [ 2908.265037] ? create_object.isra.0+0x3a/0xa30 [ 2908.265932] should_failslab+0x5/0x20 [ 2908.266677] kmem_cache_alloc+0x5b/0x310 [ 2908.267494] create_object.isra.0+0x3a/0xa30 [ 2908.268365] kmemleak_alloc_percpu+0xa0/0x100 [ 2908.269240] pcpu_alloc+0x4e2/0x1240 [ 2908.269991] __percpu_init_rwsem+0x22/0x150 [ 2908.270834] alloc_super+0x232/0xa90 [ 2908.271631] sget_fc+0x110/0x860 [ 2908.272299] ? set_anon_super+0xc0/0xc0 [ 2908.273092] ? pseudo_fs_get_tree+0x20/0x20 [ 2908.273928] get_tree_nodev+0x24/0x1d0 [ 2908.274686] vfs_get_tree+0x8e/0x300 [ 2908.275428] path_mount+0x14ab/0x2200 [ 2908.276174] ? strncpy_from_user+0x9e/0x470 [ 2908.277016] ? finish_automount+0xa90/0xa90 [ 2908.277860] ? getname_flags.part.0+0x1dd/0x4f0 [ 2908.278793] __x64_sys_mount+0x282/0x300 [ 2908.279597] ? copy_mnt_ns+0xa00/0xa00 [ 2908.280375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2908.281400] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2908.282411] do_syscall_64+0x33/0x40 [ 2908.283141] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2908.284159] RIP: 0033:0x7fe94c52fb19 [ 2908.284891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2908.288500] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2908.289968] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2908.291362] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2908.292743] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2908.294136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2908.295530] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:00:11 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 78) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:11 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x500, 0x0, 0x80000000}) [ 2908.557845] FAULT_INJECTION: forcing a failure. [ 2908.557845] name failslab, interval 1, probability 0, space 0, times 0 [ 2908.559182] CPU: 1 PID: 25287 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2908.559991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2908.560930] Call Trace: [ 2908.561242] dump_stack+0x107/0x167 [ 2908.561660] should_fail.cold+0x5/0xa [ 2908.562095] ? create_object.isra.0+0x3a/0xa30 [ 2908.562609] should_failslab+0x5/0x20 [ 2908.563041] kmem_cache_alloc+0x5b/0x310 [ 2908.563512] ? mark_held_locks+0x9e/0xe0 [ 2908.563975] create_object.isra.0+0x3a/0xa30 [ 2908.564475] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2908.565048] kmem_cache_alloc_trace+0x151/0x320 [ 2908.565577] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2908.566136] __list_lru_init+0x44d/0x890 [ 2908.566603] alloc_super+0x8b8/0xa90 [ 2908.567030] sget_fc+0x110/0x860 [ 2908.567433] ? set_anon_super+0xc0/0xc0 [ 2908.567886] ? pseudo_fs_get_tree+0x20/0x20 [ 2908.568378] get_tree_nodev+0x24/0x1d0 [ 2908.568821] vfs_get_tree+0x8e/0x300 [ 2908.569242] path_mount+0x14ab/0x2200 [ 2908.569682] ? strncpy_from_user+0x9e/0x470 [ 2908.570173] ? finish_automount+0xa90/0xa90 [ 2908.570664] ? getname_flags.part.0+0x1dd/0x4f0 [ 2908.571197] __x64_sys_mount+0x282/0x300 [ 2908.571672] ? copy_mnt_ns+0xa00/0xa00 [ 2908.572114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2908.572708] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2908.573290] do_syscall_64+0x33/0x40 [ 2908.573711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2908.574289] RIP: 0033:0x7f575796fb19 [ 2908.574712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2908.576824] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2908.577691] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2908.578502] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2908.579317] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2908.580127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2908.580935] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2912.618654] Bluetooth: hci2: command 0x0409 tx timeout [ 2912.682667] Bluetooth: hci5: command 0x0409 tx timeout [ 2914.666649] Bluetooth: hci2: command 0x041b tx timeout [ 2914.730665] Bluetooth: hci5: command 0x041b tx timeout [ 2915.636436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2915.637582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2915.639421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2915.651217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2915.652293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2915.653468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2915.697655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2915.698686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2915.700320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2915.726907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2915.728236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2915.729887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2916.715271] Bluetooth: hci2: command 0x040f tx timeout [ 2916.778661] Bluetooth: hci5: command 0x040f tx timeout [ 2918.762670] Bluetooth: hci2: command 0x0419 tx timeout [ 2918.826668] Bluetooth: hci5: command 0x0419 tx timeout 16:00:29 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:00:29 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x600, 0x0, 0x80000000}) 16:00:29 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xf00, 0x0, 0x0, 0x80000000}) 16:00:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000118}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:00:29 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x901, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:00:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x80000) 16:00:29 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 79) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:29 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 16) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x1000000) [ 2927.123506] FAULT_INJECTION: forcing a failure. [ 2927.123506] name failslab, interval 1, probability 0, space 0, times 0 [ 2927.124544] FAULT_INJECTION: forcing a failure. [ 2927.124544] name failslab, interval 1, probability 0, space 0, times 0 [ 2927.124896] CPU: 1 PID: 26225 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2927.128023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2927.128979] Call Trace: [ 2927.129289] dump_stack+0x107/0x167 [ 2927.129708] should_fail.cold+0x5/0xa [ 2927.130148] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2927.130726] should_failslab+0x5/0x20 [ 2927.131161] kmem_cache_alloc_trace+0x55/0x320 [ 2927.131698] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2927.132280] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2927.132848] __list_lru_init+0x44d/0x890 [ 2927.133319] alloc_super+0x8b8/0xa90 [ 2927.133750] sget_fc+0x110/0x860 [ 2927.134139] ? set_anon_super+0xc0/0xc0 [ 2927.134597] ? pseudo_fs_get_tree+0x20/0x20 [ 2927.135092] get_tree_nodev+0x24/0x1d0 [ 2927.135574] vfs_get_tree+0x8e/0x300 [ 2927.136002] path_mount+0x14ab/0x2200 [ 2927.136467] ? strncpy_from_user+0x9e/0x470 [ 2927.136964] ? finish_automount+0xa90/0xa90 [ 2927.137487] ? getname_flags.part.0+0x1dd/0x4f0 [ 2927.138050] __x64_sys_mount+0x282/0x300 [ 2927.138536] ? copy_mnt_ns+0xa00/0xa00 [ 2927.139008] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2927.139650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2927.140271] do_syscall_64+0x33/0x40 [ 2927.140718] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2927.141329] RIP: 0033:0x7f575796fb19 [ 2927.141778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2927.143885] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2927.144791] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2927.145641] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2927.146494] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2927.147340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2927.148198] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2927.149080] CPU: 0 PID: 26226 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2927.150544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2927.152293] Call Trace: [ 2927.152851] dump_stack+0x107/0x167 [ 2927.153613] should_fail.cold+0x5/0xa [ 2927.154411] ? create_object.isra.0+0x3a/0xa30 [ 2927.155365] should_failslab+0x5/0x20 [ 2927.156169] kmem_cache_alloc+0x5b/0x310 [ 2927.157023] create_object.isra.0+0x3a/0xa30 [ 2927.157935] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2927.158999] kmem_cache_alloc_trace+0x151/0x320 [ 2927.159977] ? down_write_nested+0xe4/0x160 [ 2927.160884] selinux_sb_alloc_security+0x41/0x220 [ 2927.161890] security_sb_alloc+0x46/0xa0 [ 2927.162747] alloc_super+0x1ed/0xa90 [ 2927.163541] sget_fc+0x110/0x860 [ 2927.164252] ? set_anon_super+0xc0/0xc0 [ 2927.165087] ? pseudo_fs_get_tree+0x20/0x20 [ 2927.165983] get_tree_nodev+0x24/0x1d0 [ 2927.166794] vfs_get_tree+0x8e/0x300 [ 2927.167585] path_mount+0x14ab/0x2200 [ 2927.168382] ? strncpy_from_user+0x9e/0x470 [ 2927.169281] ? finish_automount+0xa90/0xa90 [ 2927.170183] ? getname_flags.part.0+0x1dd/0x4f0 [ 2927.171165] __x64_sys_mount+0x282/0x300 [ 2927.172022] ? copy_mnt_ns+0xa00/0xa00 [ 2927.172844] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2927.173956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2927.175040] do_syscall_64+0x33/0x40 [ 2927.175848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2927.176916] RIP: 0033:0x7fe94c52fb19 [ 2927.177691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2927.181519] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2927.183100] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2927.184602] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2927.186095] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2927.187817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2927.189339] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:00:42 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xa01, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:00:42 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0xc00, 0x0, 0x80000000}) 16:00:42 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x1200, 0x0, 0x0, 0x80000000}) 16:00:42 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 17) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x2000000) 16:00:43 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 80) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:43 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:00:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) 16:00:43 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x3000000) [ 2940.314121] FAULT_INJECTION: forcing a failure. [ 2940.314121] name failslab, interval 1, probability 0, space 0, times 0 [ 2940.317134] CPU: 1 PID: 26261 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2940.318783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2940.320700] Call Trace: [ 2940.321314] dump_stack+0x107/0x167 [ 2940.322156] should_fail.cold+0x5/0xa [ 2940.323036] ? create_object.isra.0+0x3a/0xa30 [ 2940.324092] should_failslab+0x5/0x20 [ 2940.324969] kmem_cache_alloc+0x5b/0x310 [ 2940.325910] create_object.isra.0+0x3a/0xa30 [ 2940.326931] kmemleak_alloc_percpu+0xa0/0x100 [ 2940.327977] pcpu_alloc+0x4e2/0x1240 [ 2940.328853] __percpu_init_rwsem+0x22/0x150 [ 2940.329845] alloc_super+0x232/0xa90 [ 2940.330704] sget_fc+0x110/0x860 [ 2940.331487] ? set_anon_super+0xc0/0xc0 [ 2940.332415] ? pseudo_fs_get_tree+0x20/0x20 [ 2940.333405] get_tree_nodev+0x24/0x1d0 [ 2940.334295] vfs_get_tree+0x8e/0x300 [ 2940.335148] path_mount+0x14ab/0x2200 [ 2940.336003] ? strncpy_from_user+0x9e/0x470 [ 2940.336991] ? finish_automount+0xa90/0xa90 [ 2940.338018] ? getname_flags.part.0+0x1dd/0x4f0 [ 2940.339114] __x64_sys_mount+0x282/0x300 [ 2940.340068] ? copy_mnt_ns+0xa00/0xa00 [ 2940.340971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2940.342173] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2940.343360] do_syscall_64+0x33/0x40 [ 2940.344226] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2940.345407] RIP: 0033:0x7fe94c52fb19 [ 2940.346269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2940.350510] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2940.352324] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2940.353743] FAULT_INJECTION: forcing a failure. [ 2940.353743] name failslab, interval 1, probability 0, space 0, times 0 [ 2940.353959] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2940.353977] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2940.358600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2940.360249] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 2940.361909] CPU: 0 PID: 26262 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2940.362755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2940.363779] Call Trace: [ 2940.364112] dump_stack+0x107/0x167 [ 2940.364560] should_fail.cold+0x5/0xa [ 2940.365024] ? create_object.isra.0+0x3a/0xa30 [ 2940.365580] should_failslab+0x5/0x20 [ 2940.366044] kmem_cache_alloc+0x5b/0x310 [ 2940.366548] ? mark_held_locks+0x9e/0xe0 [ 2940.367099] create_object.isra.0+0x3a/0xa30 [ 2940.367820] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 16:00:43 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x1200, 0x0, 0x80000000}) [ 2940.368438] kmem_cache_alloc_trace+0x151/0x320 [ 2940.369130] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2940.369725] __list_lru_init+0x44d/0x890 [ 2940.370221] alloc_super+0x8b8/0xa90 [ 2940.370671] sget_fc+0x110/0x860 [ 2940.371081] ? set_anon_super+0xc0/0xc0 [ 2940.371560] ? pseudo_fs_get_tree+0x20/0x20 [ 2940.372094] get_tree_nodev+0x24/0x1d0 [ 2940.372562] vfs_get_tree+0x8e/0x300 [ 2940.373009] path_mount+0x14ab/0x2200 [ 2940.373469] ? strncpy_from_user+0x9e/0x470 [ 2940.373991] ? finish_automount+0xa90/0xa90 [ 2940.374513] ? getname_flags.part.0+0x1dd/0x4f0 [ 2940.375077] __x64_sys_mount+0x282/0x300 [ 2940.375571] ? copy_mnt_ns+0xa00/0xa00 [ 2940.376055] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2940.376694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2940.377320] do_syscall_64+0x33/0x40 [ 2940.377773] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2940.378390] RIP: 0033:0x7f575796fb19 [ 2940.378841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2940.381072] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2940.381990] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2940.382849] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2940.383715] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2940.384558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2940.385407] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:00:43 executing program 4: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000f00", @ANYRES16=r1, @ANYBLOB="45364d130cf16434935292d22f960ef401000d000000fff916ecbb2247087b83da7d0944440f088419beb8334eb11b346e78ec180bef57db98616294b8ff02ed18"], 0x14}}, 0x0) 16:00:43 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xb01, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:00:43 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x2000, 0x0, 0x0, 0x80000000}) [ 2944.362731] Bluetooth: hci4: command 0x0406 tx timeout 16:00:55 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 81) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:55 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc00, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:00:55 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x2103, 0x0, 0x0, 0x80000000}) 16:00:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x9000000) 16:00:55 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 18) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x2103, 0x0, 0x80000000}) 16:00:55 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:00:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8081}, 0x400c080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x40001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r8, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r8, 0x1, 0xfffffffe, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x0, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x0, 0x34, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x220400c0}, 0x0) [ 2952.927723] FAULT_INJECTION: forcing a failure. [ 2952.927723] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.929164] CPU: 0 PID: 26304 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2952.929990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.930971] Call Trace: [ 2952.931289] dump_stack+0x107/0x167 [ 2952.931725] should_fail.cold+0x5/0xa [ 2952.932192] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2952.932792] should_failslab+0x5/0x20 [ 2952.933249] kmem_cache_alloc_trace+0x55/0x320 [ 2952.933792] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2952.934400] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2952.934987] __list_lru_init+0x44d/0x890 [ 2952.935477] alloc_super+0x8b8/0xa90 [ 2952.935933] sget_fc+0x110/0x860 [ 2952.936335] ? set_anon_super+0xc0/0xc0 [ 2952.936813] ? pseudo_fs_get_tree+0x20/0x20 [ 2952.937469] get_tree_nodev+0x24/0x1d0 [ 2952.937973] vfs_get_tree+0x8e/0x300 [ 2952.938413] path_mount+0x14ab/0x2200 [ 2952.938871] ? strncpy_from_user+0x9e/0x470 [ 2952.939384] ? finish_automount+0xa90/0xa90 [ 2952.939910] ? getname_flags.part.0+0x1dd/0x4f0 [ 2952.940468] __x64_sys_mount+0x282/0x300 [ 2952.940953] ? copy_mnt_ns+0xa00/0xa00 [ 2952.941418] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2952.942042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2952.942653] do_syscall_64+0x33/0x40 [ 2952.943098] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2952.943706] RIP: 0033:0x7f575796fb19 [ 2952.944148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.946336] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2952.947240] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2952.948099] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2952.948941] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.949792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.950634] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:00:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x3f00, 0x0, 0x80000000}) [ 2952.971131] FAULT_INJECTION: forcing a failure. [ 2952.971131] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.972687] CPU: 0 PID: 26296 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2952.973636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.974597] Call Trace: [ 2952.974911] dump_stack+0x107/0x167 [ 2952.975337] should_fail.cold+0x5/0xa [ 2952.975793] ? create_object.isra.0+0x3a/0xa30 [ 2952.976337] should_failslab+0x5/0x20 [ 2952.976780] kmem_cache_alloc+0x5b/0x310 [ 2952.977251] ? mark_held_locks+0x9e/0xe0 [ 2952.977730] create_object.isra.0+0x3a/0xa30 [ 2952.978244] kmemleak_alloc_percpu+0xa0/0x100 [ 2952.978767] pcpu_alloc+0x4e2/0x1240 [ 2952.979208] __percpu_init_rwsem+0x22/0x150 [ 2952.979709] alloc_super+0x232/0xa90 [ 2952.980155] sget_fc+0x110/0x860 [ 2952.980551] ? set_anon_super+0xc0/0xc0 [ 2952.981014] ? pseudo_fs_get_tree+0x20/0x20 [ 2952.981520] get_tree_nodev+0x24/0x1d0 [ 2952.981972] vfs_get_tree+0x8e/0x300 [ 2952.982401] path_mount+0x14ab/0x2200 [ 2952.982846] ? strncpy_from_user+0x9e/0x470 [ 2952.983353] ? finish_automount+0xa90/0xa90 [ 2952.983864] ? getname_flags.part.0+0x1dd/0x4f0 [ 2952.984407] __x64_sys_mount+0x282/0x300 [ 2952.984878] ? copy_mnt_ns+0xa00/0xa00 [ 2952.985332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2952.985946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2952.986555] do_syscall_64+0x33/0x40 [ 2952.986990] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2952.987584] RIP: 0033:0x7fe94c52fb19 [ 2952.988026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.990143] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2952.991017] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 2952.991841] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2952.992666] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.993485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.994304] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 16:00:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0xf000000) 16:00:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x4000, 0x0, 0x80000000}) 16:00:55 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc01, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:00:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0xffffff7f) 16:00:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x20040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004000}, 0x8014) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7b}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xb8, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1000, 0x31}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x75}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x20}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x8001}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffe2}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x400}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x77}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0xe14eeb09b8cac358) 16:00:55 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:00:55 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x6400, 0x0, 0x80000000}) 16:00:55 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 82) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:55 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 19) fallocate(r0, 0x0, 0x0, 0x8000) [ 2953.286031] FAULT_INJECTION: forcing a failure. [ 2953.286031] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.288587] CPU: 1 PID: 26343 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2953.290142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2953.292008] Call Trace: [ 2953.292603] dump_stack+0x107/0x167 [ 2953.293417] should_fail.cold+0x5/0xa [ 2953.294271] ? create_object.isra.0+0x3a/0xa30 [ 2953.295293] should_failslab+0x5/0x20 [ 2953.296151] kmem_cache_alloc+0x5b/0x310 [ 2953.297060] ? mark_held_locks+0x9e/0xe0 [ 2953.297975] create_object.isra.0+0x3a/0xa30 [ 2953.298958] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2953.300116] kmem_cache_alloc_trace+0x151/0x320 [ 2953.301171] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2953.302271] __list_lru_init+0x44d/0x890 [ 2953.303184] alloc_super+0x8b8/0xa90 [ 2953.304032] sget_fc+0x110/0x860 [ 2953.304790] ? set_anon_super+0xc0/0xc0 [ 2953.305687] ? pseudo_fs_get_tree+0x20/0x20 [ 2953.306645] get_tree_nodev+0x24/0x1d0 [ 2953.307516] vfs_get_tree+0x8e/0x300 [ 2953.308354] path_mount+0x14ab/0x2200 [ 2953.309331] ? strncpy_from_user+0x9e/0x470 [ 2953.310491] ? finish_automount+0xa90/0xa90 [ 2953.311458] ? getname_flags.part.0+0x1dd/0x4f0 [ 2953.312522] __x64_sys_mount+0x282/0x300 [ 2953.313428] ? copy_mnt_ns+0xa00/0xa00 [ 2953.314301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2953.315478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2953.316647] do_syscall_64+0x33/0x40 [ 2953.317479] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2953.318616] RIP: 0033:0x7f575796fb19 [ 2953.319445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2953.323542] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2953.325239] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2953.326825] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2953.328419] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2953.330008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2953.331598] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:00:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x3000000000000) 16:00:56 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x2, 0x80000000}) [ 2953.352165] FAULT_INJECTION: forcing a failure. [ 2953.352165] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.354954] CPU: 1 PID: 26342 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2953.356622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2953.358609] Call Trace: [ 2953.359389] dump_stack+0x107/0x167 [ 2953.360221] should_fail.cold+0x5/0xa [ 2953.361078] ? create_object.isra.0+0x3a/0xa30 [ 2953.362095] should_failslab+0x5/0x20 [ 2953.362946] kmem_cache_alloc+0x5b/0x310 [ 2953.363874] create_object.isra.0+0x3a/0xa30 [ 2953.364868] kmemleak_alloc_percpu+0xa0/0x100 [ 2953.365871] pcpu_alloc+0x4e2/0x1240 [ 2953.366731] __percpu_init_rwsem+0x22/0x150 [ 2953.367705] alloc_super+0x232/0xa90 [ 2953.368557] sget_fc+0x110/0x860 [ 2953.369316] ? set_anon_super+0xc0/0xc0 [ 2953.370215] ? pseudo_fs_get_tree+0x20/0x20 [ 2953.371176] get_tree_nodev+0x24/0x1d0 [ 2953.372067] vfs_get_tree+0x8e/0x300 [ 2953.372903] path_mount+0x14ab/0x2200 [ 2953.373755] ? strncpy_from_user+0x9e/0x470 [ 2953.374713] ? finish_automount+0xa90/0xa90 [ 2953.375675] ? getname_flags.part.0+0x1dd/0x4f0 [ 2953.376738] __x64_sys_mount+0x282/0x300 [ 2953.377645] ? copy_mnt_ns+0xa00/0xa00 [ 2953.378518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2953.379688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2953.380854] do_syscall_64+0x33/0x40 [ 2953.381685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2953.382829] RIP: 0033:0x7fe94c52fb19 [ 2953.383658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2953.387791] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2953.389489] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2953.391080] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2953.392691] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2953.394281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2953.395900] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:00:56 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3748, 0x0, 0x0, 0x80000000}) 16:00:56 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 83) fallocate(r0, 0x0, 0x0, 0x8000) 16:00:56 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:00:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x6000000000000) [ 2953.573127] FAULT_INJECTION: forcing a failure. [ 2953.573127] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.574484] CPU: 0 PID: 26365 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2953.575265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2953.576213] Call Trace: [ 2953.576515] dump_stack+0x107/0x167 [ 2953.576927] should_fail.cold+0x5/0xa [ 2953.577361] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 2953.577926] should_failslab+0x5/0x20 [ 2953.578363] kmem_cache_alloc_trace+0x55/0x320 [ 2953.578874] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2953.579449] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2953.580006] __list_lru_init+0x44d/0x890 [ 2953.580466] alloc_super+0x8b8/0xa90 [ 2953.580886] sget_fc+0x110/0x860 [ 2953.581266] ? set_anon_super+0xc0/0xc0 [ 2953.581714] ? pseudo_fs_get_tree+0x20/0x20 [ 2953.582198] get_tree_nodev+0x24/0x1d0 [ 2953.582634] vfs_get_tree+0x8e/0x300 [ 2953.583054] path_mount+0x14ab/0x2200 [ 2953.583483] ? strncpy_from_user+0x9e/0x470 [ 2953.583976] ? finish_automount+0xa90/0xa90 [ 2953.584460] ? getname_flags.part.0+0x1dd/0x4f0 [ 2953.584988] __x64_sys_mount+0x282/0x300 [ 2953.585443] ? copy_mnt_ns+0xa00/0xa00 [ 2953.585884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2953.586472] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2953.587050] do_syscall_64+0x33/0x40 [ 2953.587470] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2953.588053] RIP: 0033:0x7f575796fb19 [ 2953.588474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2953.590544] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2953.591399] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2953.592213] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2953.593016] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2953.593820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2953.594628] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:00:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:00:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x8000000000000) 16:01:10 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xd00, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:01:10 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3f00, 0x0, 0x0, 0x80000000}) 16:01:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x3, 0x80000000}) 16:01:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000280)=0x3) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000100000018000000737b65f2db5b878eb375d2ce38ba038f1edc39e0388a", @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x2, 0x103400) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(r4, &(0x7f0000000680)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f0000000480)=""/47, 0x2f}], 0x2, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x1) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0xa) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) openat(r3, &(0x7f00000006c0)='./file0\x00', 0x100, 0x5b154f9a429a2e03) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x4b8900, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, 0x0, 0x110, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x163c}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x89) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r8, 0x10}, 0x14}, 0x1, 0x0, 0x0, 0x44884}, 0x0) 16:01:10 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 84) fallocate(r0, 0x0, 0x0, 0x8000) 16:01:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x100000000000000) 16:01:10 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:01:10 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 20) fallocate(r0, 0x0, 0x0, 0x8000) [ 2967.608478] FAULT_INJECTION: forcing a failure. [ 2967.608478] name failslab, interval 1, probability 0, space 0, times 0 [ 2967.610538] CPU: 0 PID: 26396 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2967.611805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2967.613305] Call Trace: [ 2967.613784] dump_stack+0x107/0x167 [ 2967.614444] should_fail.cold+0x5/0xa [ 2967.615149] ? create_object.isra.0+0x3a/0xa30 [ 2967.615984] should_failslab+0x5/0x20 [ 2967.616692] kmem_cache_alloc+0x5b/0x310 [ 2967.617434] ? mark_held_locks+0x9e/0xe0 [ 2967.618177] create_object.isra.0+0x3a/0xa30 [ 2967.618980] kmemleak_alloc_percpu+0xa0/0x100 [ 2967.619803] pcpu_alloc+0x4e2/0x1240 [ 2967.620489] __percpu_init_rwsem+0x22/0x150 [ 2967.621264] alloc_super+0x232/0xa90 [ 2967.621943] sget_fc+0x110/0x860 [ 2967.622545] ? set_anon_super+0xc0/0xc0 [ 2967.623272] ? pseudo_fs_get_tree+0x20/0x20 [ 2967.624071] get_tree_nodev+0x24/0x1d0 [ 2967.624769] vfs_get_tree+0x8e/0x300 [ 2967.625447] path_mount+0x14ab/0x2200 [ 2967.626149] ? strncpy_from_user+0x9e/0x470 [ 2967.626941] ? finish_automount+0xa90/0xa90 [ 2967.627708] ? getname_flags.part.0+0x1dd/0x4f0 [ 2967.628543] __x64_sys_mount+0x282/0x300 [ 2967.629278] ? copy_mnt_ns+0xa00/0xa00 [ 2967.629980] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2967.630919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2967.631858] do_syscall_64+0x33/0x40 [ 2967.632534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2967.633450] RIP: 0033:0x7fe94c52fb19 [ 2967.634123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2967.637407] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2967.638773] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 2967.640086] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2967.641368] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2967.642666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2967.643952] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 16:01:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x200000000000000) [ 2967.648590] FAULT_INJECTION: forcing a failure. [ 2967.648590] name failslab, interval 1, probability 0, space 0, times 0 [ 2967.651427] CPU: 1 PID: 26399 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2967.653164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2967.655017] Call Trace: [ 2967.655575] dump_stack+0x107/0x167 [ 2967.656351] should_fail.cold+0x5/0xa [ 2967.657163] ? create_object.isra.0+0x3a/0xa30 [ 2967.658204] should_failslab+0x5/0x20 [ 2967.658225] kmem_cache_alloc+0x5b/0x310 [ 2967.658251] create_object.isra.0+0x3a/0xa30 [ 2967.660677] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2967.661765] kmem_cache_alloc_trace+0x151/0x320 [ 2967.662978] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2967.664020] __list_lru_init+0x44d/0x890 [ 2967.664879] alloc_super+0x8b8/0xa90 [ 2967.665673] sget_fc+0x110/0x860 [ 2967.666379] ? set_anon_super+0xc0/0xc0 [ 2967.667214] ? pseudo_fs_get_tree+0x20/0x20 [ 2967.668116] get_tree_nodev+0x24/0x1d0 [ 2967.669080] vfs_get_tree+0x8e/0x300 [ 2967.669854] path_mount+0x14ab/0x2200 [ 2967.670654] ? strncpy_from_user+0x9e/0x470 [ 2967.671842] ? finish_automount+0xa90/0xa90 [ 2967.672755] ? getname_flags.part.0+0x1dd/0x4f0 [ 2967.673749] __x64_sys_mount+0x282/0x300 [ 2967.674600] ? copy_mnt_ns+0xa00/0xa00 [ 2967.675414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2967.676530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2967.677609] do_syscall_64+0x33/0x40 [ 2967.678388] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2967.679459] RIP: 0033:0x7f575796fb19 [ 2967.680257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2967.684131] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2967.685734] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2967.687219] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2967.688721] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2967.690223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2967.691717] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:01:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x300000000000000) 16:01:24 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3f47, 0x0, 0x0, 0x80000000}) 16:01:24 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x7, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:01:24 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x4, 0x80000000}) 16:01:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x900000000000000) 16:01:24 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 21) fallocate(r0, 0x0, 0x0, 0x8000) 16:01:24 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 85) fallocate(r0, 0x0, 0x0, 0x8000) 16:01:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) 16:01:24 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x1200, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:01:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b33f0dbd9f55104fe97b84883717932ab8fd8a2c4f1155f809fb2dbbdb5b40c2e1419a7f122075ec1e25e16c4d2ae918655f0872f867b152cad950b35aa37c85bcb3f1b31d6c911c2abf14ae8a6632a7dba85f9af26178323280602d1776c2fd792ae62c10ca6da9fc238c572fd72703359e11a207a2036d4b302bc0fc7a2dca589a22e691e2d88c89f420c0ee032606ae196c3f6f5d232208a5d0ca97dab8c94d3577ade1783a76153bda4e10ee0cea3e76c87815014eab9b8d4d0fce3d9379423f15e231d0f4f3b51c7799f1cdbdbe823f325ecb65b93dd001612e183cbd1845ba26803850b5e8b392e030f0001327f2529e3eb0272ba8535693e9b2787965c3813c6bc20af77b6b91ac4a97d7b332839f59cf290df20000000000000000000000000097bb0dc2f9afe217c2b9854852d64f56590c7afc575ef1a306459e13e8e86611f8971ab17ee6f3e105a1296bb7310fae308347afd76b859129060cd2b688534a20d747cda72f3386a9bd2224b82a8a040c7bfb135f059c0bd9f75eafc10b29de9f44fbeb59518ded41c2b882f8dc4aa220bd687fe5810bc74aa82f5e890dad8701073807cbbdb21aaf52c326698b", @ANYRES16=r2, @ANYBLOB="f5d3000000000000000030000000"], 0x14}}, 0x0) [ 2981.607076] FAULT_INJECTION: forcing a failure. [ 2981.607076] name failslab, interval 1, probability 0, space 0, times 0 [ 2981.608841] CPU: 1 PID: 26437 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2981.609799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2981.610953] Call Trace: [ 2981.611326] dump_stack+0x107/0x167 [ 2981.611831] should_fail.cold+0x5/0xa [ 2981.612370] ? create_object.isra.0+0x3a/0xa30 [ 2981.613091] should_failslab+0x5/0x20 [ 2981.613563] kmem_cache_alloc+0x5b/0x310 [ 2981.614125] ? mark_held_locks+0x9e/0xe0 [ 2981.614687] create_object.isra.0+0x3a/0xa30 [ 2981.615195] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2981.615751] kmem_cache_alloc_trace+0x151/0x320 [ 2981.616312] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2981.616843] __list_lru_init+0x44d/0x890 [ 2981.617314] alloc_super+0x8b8/0xa90 [ 2981.617722] sget_fc+0x110/0x860 [ 2981.618109] ? set_anon_super+0xc0/0xc0 [ 2981.618541] ? pseudo_fs_get_tree+0x20/0x20 [ 2981.619033] get_tree_nodev+0x24/0x1d0 [ 2981.619460] vfs_get_tree+0x8e/0x300 [ 2981.619859] path_mount+0x14ab/0x2200 [ 2981.620292] ? strncpy_from_user+0x9e/0x470 [ 2981.620761] ? finish_automount+0xa90/0xa90 [ 2981.621276] ? getname_flags.part.0+0x1dd/0x4f0 [ 2981.621788] __x64_sys_mount+0x282/0x300 [ 2981.622227] ? copy_mnt_ns+0xa00/0xa00 [ 2981.622678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.623243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2981.623796] do_syscall_64+0x33/0x40 [ 2981.624231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2981.624780] RIP: 0033:0x7f575796fb19 [ 2981.625218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2981.627235] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2981.628108] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2981.628882] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2981.629703] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2981.630503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2981.631298] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2981.639740] FAULT_INJECTION: forcing a failure. [ 2981.639740] name failslab, interval 1, probability 0, space 0, times 0 [ 2981.641293] CPU: 1 PID: 26439 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 2981.642088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2981.643026] Call Trace: [ 2981.643329] dump_stack+0x107/0x167 [ 2981.643751] should_fail.cold+0x5/0xa [ 2981.644226] ? create_object.isra.0+0x3a/0xa30 [ 2981.644930] should_failslab+0x5/0x20 [ 2981.645439] kmem_cache_alloc+0x5b/0x310 [ 2981.645908] create_object.isra.0+0x3a/0xa30 [ 2981.646419] kmemleak_alloc_percpu+0xa0/0x100 [ 2981.646941] pcpu_alloc+0x4e2/0x1240 [ 2981.647379] __percpu_init_rwsem+0x22/0x150 [ 2981.647877] alloc_super+0x232/0xa90 [ 2981.648323] sget_fc+0x110/0x860 [ 2981.648710] ? set_anon_super+0xc0/0xc0 [ 2981.649167] ? pseudo_fs_get_tree+0x20/0x20 [ 2981.649634] get_tree_nodev+0x24/0x1d0 [ 2981.650082] vfs_get_tree+0x8e/0x300 [ 2981.650486] path_mount+0x14ab/0x2200 [ 2981.650927] ? strncpy_from_user+0x9e/0x470 [ 2981.651394] ? finish_automount+0xa90/0xa90 [ 2981.651886] ? getname_flags.part.0+0x1dd/0x4f0 [ 2981.652416] __x64_sys_mount+0x282/0x300 [ 2981.652880] ? copy_mnt_ns+0xa00/0xa00 [ 2981.653309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.653911] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2981.654469] do_syscall_64+0x33/0x40 [ 2981.654891] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2981.655445] RIP: 0033:0x7fe94c52fb19 [ 2981.655876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2981.657964] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2981.658836] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 2981.659654] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2981.660483] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 2981.661305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2981.662132] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:01:24 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 86) fallocate(r0, 0x0, 0x0, 0x8000) 16:01:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0xf00000000000000) [ 2981.904454] FAULT_INJECTION: forcing a failure. [ 2981.904454] name failslab, interval 1, probability 0, space 0, times 0 [ 2981.905856] CPU: 1 PID: 26455 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 2981.906659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2981.907623] Call Trace: [ 2981.907931] dump_stack+0x107/0x167 [ 2981.908372] should_fail.cold+0x5/0xa [ 2981.908818] ? create_object.isra.0+0x3a/0xa30 [ 2981.909340] should_failslab+0x5/0x20 [ 2981.909775] kmem_cache_alloc+0x5b/0x310 [ 2981.910246] create_object.isra.0+0x3a/0xa30 [ 2981.910753] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2981.911343] kmem_cache_alloc_trace+0x151/0x320 [ 2981.911882] __memcg_init_list_lru_node+0x7f/0x1e0 [ 2981.912465] __list_lru_init+0x44d/0x890 [ 2981.912942] alloc_super+0x8b8/0xa90 [ 2981.913372] sget_fc+0x110/0x860 [ 2981.913759] ? set_anon_super+0xc0/0xc0 [ 2981.914217] ? pseudo_fs_get_tree+0x20/0x20 [ 2981.914717] get_tree_nodev+0x24/0x1d0 [ 2981.915164] vfs_get_tree+0x8e/0x300 [ 2981.915596] path_mount+0x14ab/0x2200 [ 2981.916033] ? strncpy_from_user+0x9e/0x470 [ 2981.916551] ? finish_automount+0xa90/0xa90 [ 2981.917051] ? getname_flags.part.0+0x1dd/0x4f0 [ 2981.917591] __x64_sys_mount+0x282/0x300 [ 2981.918063] ? copy_mnt_ns+0xa00/0xa00 [ 2981.918515] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2981.919123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2981.919723] do_syscall_64+0x33/0x40 [ 2981.920171] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2981.920765] RIP: 0033:0x7f575796fb19 [ 2981.921196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2981.923321] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2981.924222] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 2981.925046] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2981.925882] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2981.926704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2981.927521] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 2986.474689] Bluetooth: hci4: command 0x0409 tx timeout [ 2988.522717] Bluetooth: hci4: command 0x041b tx timeout [ 2990.570692] Bluetooth: hci4: command 0x040f tx timeout [ 2991.367041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2991.368984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2991.371893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2991.419252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2991.420924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2991.423434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2992.618816] Bluetooth: hci4: command 0x0419 tx timeout 16:01:48 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x2000, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:01:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0xffffff7f00000000) 16:01:48 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x5, 0x80000000}) 16:01:48 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3f48, 0x0, 0x0, 0x80000000}) 16:01:48 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 22) fallocate(r0, 0x0, 0x0, 0x8000) 16:01:48 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 87) fallocate(r0, 0x0, 0x0, 0x8000) 16:01:48 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x8, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:01:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x10000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x2}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x8001}]}, 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x20040012) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40804) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x4000) [ 3006.303981] FAULT_INJECTION: forcing a failure. [ 3006.303981] name failslab, interval 1, probability 0, space 0, times 0 [ 3006.306572] CPU: 1 PID: 26939 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3006.308128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3006.310290] Call Trace: [ 3006.311018] dump_stack+0x107/0x167 [ 3006.311968] should_fail.cold+0x5/0xa [ 3006.312846] ? create_object.isra.0+0x3a/0xa30 [ 3006.313989] should_failslab+0x5/0x20 [ 3006.314847] kmem_cache_alloc+0x5b/0x310 [ 3006.315776] create_object.isra.0+0x3a/0xa30 [ 3006.316770] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3006.317917] __kmalloc+0x16e/0x390 [ 3006.318730] prealloc_shrinker+0xb0/0x2f0 [ 3006.319913] ? __init_rwsem+0x129/0x1b0 [ 3006.320933] alloc_super+0x863/0xa90 [ 3006.321783] sget_fc+0x110/0x860 [ 3006.322583] ? set_anon_super+0xc0/0xc0 [ 3006.323650] ? pseudo_fs_get_tree+0x20/0x20 [ 3006.324644] get_tree_nodev+0x24/0x1d0 [ 3006.325527] vfs_get_tree+0x8e/0x300 [ 3006.326368] path_mount+0x14ab/0x2200 [ 3006.327236] ? strncpy_from_user+0x9e/0x470 [ 3006.328214] ? finish_automount+0xa90/0xa90 [ 3006.329214] ? getname_flags.part.0+0x1dd/0x4f0 [ 3006.330284] __x64_sys_mount+0x282/0x300 [ 3006.331211] ? copy_mnt_ns+0xa00/0xa00 [ 3006.332102] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3006.333299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3006.334466] do_syscall_64+0x33/0x40 [ 3006.335310] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3006.336477] RIP: 0033:0x7fe94c52fb19 [ 3006.337319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3006.341475] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3006.343203] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3006.344813] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3006.346428] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3006.348042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3006.348208] FAULT_INJECTION: forcing a failure. [ 3006.348208] name failslab, interval 1, probability 0, space 0, times 0 [ 3006.349662] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 3006.353638] CPU: 0 PID: 26934 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3006.355101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3006.356857] Call Trace: [ 3006.357419] dump_stack+0x107/0x167 [ 3006.358196] should_fail.cold+0x5/0xa [ 3006.359012] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3006.360079] should_failslab+0x5/0x20 [ 3006.360893] kmem_cache_alloc_trace+0x55/0x320 [ 3006.361858] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3006.362934] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3006.363984] __list_lru_init+0x44d/0x890 [ 3006.364854] alloc_super+0x8b8/0xa90 [ 3006.365641] sget_fc+0x110/0x860 [ 3006.366353] ? set_anon_super+0xc0/0xc0 [ 3006.367202] ? pseudo_fs_get_tree+0x20/0x20 [ 3006.368120] get_tree_nodev+0x24/0x1d0 [ 3006.368959] vfs_get_tree+0x8e/0x300 [ 3006.369748] path_mount+0x14ab/0x2200 [ 3006.370550] ? strncpy_from_user+0x9e/0x470 [ 3006.371459] ? finish_automount+0xa90/0xa90 [ 3006.372383] ? getname_flags.part.0+0x1dd/0x4f0 [ 3006.373376] __x64_sys_mount+0x282/0x300 [ 3006.374237] ? copy_mnt_ns+0xa00/0xa00 [ 3006.375061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3006.376172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3006.377282] do_syscall_64+0x33/0x40 [ 3006.378069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3006.379148] RIP: 0033:0x7f575796fb19 [ 3006.379948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3006.383848] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3006.385466] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3006.386971] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3006.388483] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3006.389987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3006.391488] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:01:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xeb}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "d120e77775073874bbc29c602b976e8ceb8a9335c426f82250b899b521115201"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:01:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x4044001) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xef1678bacaf90358}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYBLOB="000825bd7000fbdbdf250900000008000300", @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="050000ff000000050007001500000005000811ba95d35808000300", @ANYRES32=0x0, @ANYBLOB="050027000c000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x2404c001) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000500)={'wpan1\x00'}) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000428bd7000fbdbdf25040000000500010001000000080005000a01010114000300fe00000000000000ac141431140002000000000000000000000000000000000038721e852702581c739910876edae308badbbfcaf0318a18b4ada0f7eccdecff"], 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 16:01:49 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 23) fallocate(r0, 0x0, 0x0, 0x8000) 16:01:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000d98621d51a38bbc0e05da0d5e7a173ed90cd63bd956dab76a32b4e5513b49ac66f7ecd1b56b5c744b2638b8b6d2c8078a4d2c6077a5a0c47bf0f91133b9a493f42c8dc772a76ab2e19e45099c441297ec637987710ca96474e2fe53f016b810a3b8fc6a2215f9c62753e7d7991aec513742ddb568179f10f0bb22039547d040b388deddc36ef82d1cf46b3c54adf54cd304a2577a31fcbc7b0b9a65f1d09a6f7cfa335bd9be73b06428efa43b8665ccfb8a06c8bdabf", @ANYRES16=r1, @ANYBLOB="010000000000000000002a000000"], 0x14}}, 0x0) [ 3006.715199] FAULT_INJECTION: forcing a failure. [ 3006.715199] name failslab, interval 1, probability 0, space 0, times 0 [ 3006.717812] CPU: 1 PID: 26953 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3006.719704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3006.721702] Call Trace: [ 3006.722301] dump_stack+0x107/0x167 [ 3006.723217] should_fail.cold+0x5/0xa [ 3006.724210] ? __list_lru_init+0xcd/0x890 [ 3006.725160] should_failslab+0x5/0x20 [ 3006.726219] __kmalloc+0x72/0x390 [ 3006.727149] __list_lru_init+0xcd/0x890 [ 3006.728132] alloc_super+0x8b8/0xa90 [ 3006.729002] sget_fc+0x110/0x860 [ 3006.729782] ? set_anon_super+0xc0/0xc0 [ 3006.730794] ? pseudo_fs_get_tree+0x20/0x20 [ 3006.731885] get_tree_nodev+0x24/0x1d0 [ 3006.732791] vfs_get_tree+0x8e/0x300 [ 3006.733642] path_mount+0x14ab/0x2200 [ 3006.734714] ? strncpy_from_user+0x9e/0x470 [ 3006.735703] ? finish_automount+0xa90/0xa90 [ 3006.736690] ? getname_flags.part.0+0x1dd/0x4f0 [ 3006.737764] __x64_sys_mount+0x282/0x300 [ 3006.738688] ? copy_mnt_ns+0xa00/0xa00 [ 3006.739588] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3006.740791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3006.741968] do_syscall_64+0x33/0x40 [ 3006.742823] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3006.743984] RIP: 0033:0x7fe94c52fb19 [ 3006.744841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3006.749020] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3006.750743] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 3006.752368] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3006.754000] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3006.755618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3006.757246] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 16:01:49 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 88) fallocate(r0, 0x0, 0x0, 0x8000) 16:01:49 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x9, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:01:49 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x2103, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:01:49 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x6, 0x80000000}) 16:01:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:01:49 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4000, 0x0, 0x0, 0x80000000}) [ 3006.927487] FAULT_INJECTION: forcing a failure. [ 3006.927487] name failslab, interval 1, probability 0, space 0, times 0 [ 3006.929972] CPU: 0 PID: 26971 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3006.931430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3006.933180] Call Trace: [ 3006.933745] dump_stack+0x107/0x167 [ 3006.934511] should_fail.cold+0x5/0xa [ 3006.935315] ? create_object.isra.0+0x3a/0xa30 [ 3006.936277] should_failslab+0x5/0x20 [ 3006.937086] kmem_cache_alloc+0x5b/0x310 [ 3006.937938] ? mark_held_locks+0x9e/0xe0 [ 3006.938790] create_object.isra.0+0x3a/0xa30 [ 3006.939711] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3006.940788] kmem_cache_alloc_trace+0x151/0x320 [ 3006.941795] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3006.942837] __list_lru_init+0x44d/0x890 [ 3006.943698] alloc_super+0x8b8/0xa90 [ 3006.944492] sget_fc+0x110/0x860 [ 3006.945481] ? set_anon_super+0xc0/0xc0 [ 3006.946320] ? pseudo_fs_get_tree+0x20/0x20 [ 3006.947223] get_tree_nodev+0x24/0x1d0 [ 3006.948038] vfs_get_tree+0x8e/0x300 [ 3006.948826] path_mount+0x14ab/0x2200 [ 3006.949632] ? strncpy_from_user+0x9e/0x470 [ 3006.950536] ? finish_automount+0xa90/0xa90 [ 3006.951438] ? getname_flags.part.0+0x1dd/0x4f0 [ 3006.952426] __x64_sys_mount+0x282/0x300 [ 3006.953276] ? copy_mnt_ns+0xa00/0xa00 [ 3006.954094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3006.955193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3006.956280] do_syscall_64+0x33/0x40 [ 3006.957075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3006.958151] RIP: 0033:0x7f575796fb19 [ 3006.958930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3006.962802] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3006.964404] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3006.965910] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3006.967393] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3006.968883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3006.970364] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:01:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000009b7bb8e2d96d4ceb7835e0cff1dcaa3531751dc1a379dd61b51511e8f217170a5ac0cf49846aa69f7e6a5427fcc3d9efa4caf4a46c938be463b974d7a8e4fdb8379207ffde44b0e364c4e500f45e50282a2db12ac447d39a613e00c5123b193845f724f0189188bb5e1df45e49ddbda756ec87fa62ba90d9011b419435ef0badb08b7da3cd8e243043f53867548baa808d67a5e4474407a4c3f4922bb9b503f4981f9f38dcceedc832fef7c8133a03c250b5ed07253d57c732972b7dd479e1e117cae5af1198307e8a4f70456984cd93c291f22c5662df1068bbf51aa31389f1da455afa4ed86fd9b0a803", @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x10, 0x2, 0xfff, &(0x7f0000000580)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0x2c}}, 0x24000850) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x30, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x8c, r6, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x19, 0x34, @random="c44f5d52867483d94f284d7f87f7cabcc8c27b4163"}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "25561153ea"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "54aa9950c0"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x6, 0x4, "0bed"}]}]]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r10 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r11, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x5, 0xc5, "d6"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) [ 3007.137143] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=26984 comm=syz-executor.4 16:01:49 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 24) fallocate(r0, 0x0, 0x0, 0x8000) [ 3007.179965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=26984 comm=syz-executor.4 [ 3007.270600] FAULT_INJECTION: forcing a failure. [ 3007.270600] name failslab, interval 1, probability 0, space 0, times 0 [ 3007.272702] CPU: 0 PID: 26995 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3007.273941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3007.275425] Call Trace: [ 3007.275909] dump_stack+0x107/0x167 [ 3007.276641] should_fail.cold+0x5/0xa [ 3007.277332] ? create_object.isra.0+0x3a/0xa30 [ 3007.278143] should_failslab+0x5/0x20 [ 3007.278828] kmem_cache_alloc+0x5b/0x310 [ 3007.279558] create_object.isra.0+0x3a/0xa30 [ 3007.280341] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3007.281262] __kmalloc+0x16e/0x390 [ 3007.281890] __list_lru_init+0xcd/0x890 [ 3007.282615] alloc_super+0x8b8/0xa90 [ 3007.283290] sget_fc+0x110/0x860 [ 3007.283915] ? set_anon_super+0xc0/0xc0 [ 3007.284645] ? pseudo_fs_get_tree+0x20/0x20 [ 3007.285407] get_tree_nodev+0x24/0x1d0 [ 3007.286111] vfs_get_tree+0x8e/0x300 [ 3007.286775] path_mount+0x14ab/0x2200 [ 3007.287460] ? strncpy_from_user+0x9e/0x470 [ 3007.288225] ? finish_automount+0xa90/0xa90 [ 3007.289008] ? getname_flags.part.0+0x1dd/0x4f0 [ 3007.289837] __x64_sys_mount+0x282/0x300 [ 3007.290560] ? copy_mnt_ns+0xa00/0xa00 [ 3007.291256] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3007.292199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3007.293132] do_syscall_64+0x33/0x40 [ 3007.293799] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3007.294718] RIP: 0033:0x7fe94c52fb19 [ 3007.295386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3007.298643] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3007.299982] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3007.301253] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3007.302509] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3007.303760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3007.305020] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 3007.321495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=26994 comm=syz-executor.4 16:02:03 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 89) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:03 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x473f, 0x0, 0x0, 0x80000000}) 16:02:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x8, 0x80000000}) 16:02:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x138, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xe4, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x197b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14697c0e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60bd8182}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x75fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda06}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa4e484b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe366}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x612b}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a0d5263}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xacb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4427acfd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bba987a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d357078}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x219e1aa4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb291}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47a1f605}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6654f804}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x126dd83}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6db3e2fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cfb37af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc81}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c7e725e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a2c0e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa309}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1341a900}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3902f31e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f86}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ee5a5f7}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x224, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4040) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:02:03 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 25) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:03 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x3f00, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:02:03 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xa, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:02:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40030c00}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008081}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000002100)={0x4bc, 0x1, 0x5, 0x102, 0x0, 0x0, {0x7, 0x0, 0x8}, [{{0x254, 0x1, {{0x3, 0x3933}, 0x26, 0x6, 0x5, 0x80, 0x3, 'syz1\x00', "e92fb0b31fc263a1250723c5f97cceea147123edf3b97aa9d66587a86536aa03", "fb16593033c0ec7f0a2ce5cc4092af0797b05e97fff237ec2e397130b550c5d1", [{0x9, 0x78, {0x1, 0xf6}}, {0x6, 0x401, {0x1, 0x1}}, {0x3, 0xff94, {0x0, 0x5}}, {0x1ff, 0xfe, {0x0, 0xffffffff}}, {0xfc01, 0x1, {0x1, 0x9}}, {0x6, 0x8, {0x1, 0x7}}, {0x60b, 0x7ff, {0x2, 0x4}}, {0x2c, 0xfffa, {0x2, 0x1}}, {0x9, 0x7, {0x3, 0xb}}, {0x7fff, 0x3f, {0x3, 0x1000}}, {0x7817, 0xfff9, {0x3, 0x1ff}}, {0x800, 0x2, {0x0, 0x9}}, {0x1ff, 0xacb5, {0x1, 0x1}}, {0x6, 0xa0, {0x0, 0x1}}, {0x3, 0x5, {0x1, 0x7}}, {0x401, 0x5, {0x2, 0x659}}, {0x7ff, 0xe5a2, {0x2, 0x7}}, {0x200, 0x8000, {0x1, 0x800}}, {0x9, 0x53e, {0x2, 0x4}}, {0x78, 0x8000, {0x2, 0x8}}, {0x56, 0x8, {0x1, 0x401}}, {0x4, 0x5, {0x3, 0x3f}}, {0x81, 0xdda5, {0x0, 0x3f}}, {0x20, 0x6, {0x0, 0xffff0000}}, {0xcaf, 0x512, {0x1, 0x6}}, {0x101, 0xb0d, {0x1, 0x9}}, {0x1, 0xffff, {0x2, 0x475c}}, {0x9, 0x9}, {0x4, 0x20, {0x0, 0xfff}}, {0x7, 0x7, {0x3}}, {0xfde, 0x778, {0x1, 0x6}}, {0x3f, 0x53d0, {0x2, 0x40}}, {0x1, 0x3f, {0x2, 0x9}}, {0x4138, 0x8000, {0x0, 0x6}}, {0x0, 0x8, {0x3, 0xfffffffe}}, {0x40, 0x4, {0x2, 0x3}}, {0x5, 0x8, {0x2, 0x2}}, {0x4, 0xff9e, {0x1, 0x9}}, {0x4, 0x7, {0x0, 0x80}}, {0xff, 0x1ff, {0x0, 0xfff}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x80, 0x2, 0x7, 0x3, 0x9, 'syz1\x00', "2aa2f2120e8bffd5f728d30d603f664b87ea86a4dc2ccecb04f21649189d1d44", "9bdda2a06b7c5a8aafac61dfc1f64c499320443cc8e3c9e578ec908a57aae35d", [{0x7, 0x40, {0x0, 0x20}}, {0x2, 0xc0f, {0x1, 0x4}}, {0x9, 0x9, {0x3, 0x2}}, {0x0, 0x9, {0x3, 0x2}}, {0xbef, 0x7, {0x2, 0x5}}, {0x9, 0x3ff, {0x3, 0x8305}}, {0x5f, 0x7, {0x3, 0x1}}, {0x0, 0x1, {0x2, 0x10000}}, {0x5670, 0x5, {0x3, 0x3}}, {0x760, 0x2, {0x1, 0x3}}, {0x2, 0xfff7, {0x1, 0xc019}}, {0x6, 0x7, {0x3, 0xfffffe00}}, {0x1, 0x8, {0x0, 0x3c}}, {0x18, 0xf6, {0x3, 0x4}}, {0x40, 0xaa, {0x3, 0x9}}, {0x9d, 0x8, {0x0, 0x80000000}}, {0x8, 0x6b4b, {0x2, 0x200}}, {0x3447, 0x8, {0x3, 0x8}}, {0x3f, 0x0, {0x3, 0x865}}, {0x4, 0x3ff, {0x3, 0x7f}}, {0x4, 0xfe, {0x1, 0x4b}}, {0x5, 0x8, {0x2, 0x8000}}, {0x0, 0x2819, {0x3, 0x3f}}, {0xffff, 0x2, {0x1}}, {0x81, 0x800, {0x2, 0xffffa58b}}, {0x8, 0x0, {0x3, 0x8}}, {0x1, 0x4, {0x1, 0x7}}, {0x1f, 0x81, {0x0, 0x7}}, {0x8000, 0x5, {0x0, 0xfffff800}}, {0x6, 0x7, {0x1, 0x6}}, {0x8, 0x3, {0x0, 0x3}}, {0x1, 0x3, {0x1, 0x71d5}}, {0x7, 0x1, {0x0, 0x956}}, {0xfc00, 0x3, {0x1, 0x61e}}, {0xff, 0x0, {0x5, 0x7}}, {0x4, 0x1}, {0xfff, 0x25, {0x1, 0x575b}}, {0x80, 0x5, {0x0, 0x9}}, {0x6, 0x8, {0x2, 0x7}}, {0x98, 0x5, {0x0, 0x81}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000b00)={0x15e8, r4, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80, 0x8}}}}, [@NL80211_PMSR_ATTR_PEERS={0xde8, 0x5, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}]}]}, {0x2dc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x186}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x297}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x384}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x4e23f49693a6fbf1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x1b0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x57}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xa72}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}, {0x2b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x298}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x79e1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xde}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x324, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe2a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x264}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x357}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x114, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xeb}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x173}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xaf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x36}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0xcc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x82}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffc1}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0x630, 0x5, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x96}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc412}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}]}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x254, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}]}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x107}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ce}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1b0, 0x5, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x160, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x66}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}]}, 0x15e8}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) [ 3020.862682] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=27009 comm=syz-executor.1 [ 3020.865032] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=27009 comm=syz-executor.1 [ 3020.879482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1281 sclass=netlink_tcpdiag_socket pid=27009 comm=syz-executor.1 [ 3020.883850] FAULT_INJECTION: forcing a failure. [ 3020.883850] name failslab, interval 1, probability 0, space 0, times 0 [ 3020.885409] CPU: 1 PID: 27014 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3020.886232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3020.887210] Call Trace: [ 3020.887529] dump_stack+0x107/0x167 [ 3020.888003] should_fail.cold+0x5/0xa [ 3020.888561] ? kvmalloc_node+0x119/0x170 [ 3020.889164] should_failslab+0x5/0x20 [ 3020.889708] __kmalloc_node+0x76/0x420 [ 3020.890308] ? lockdep_init_map_type+0x2c7/0x780 [ 3020.890985] kvmalloc_node+0x119/0x170 [ 3020.891562] __list_lru_init+0x511/0x890 [ 3020.892158] alloc_super+0x8b8/0xa90 [ 3020.892668] sget_fc+0x110/0x860 [ 3020.893174] ? set_anon_super+0xc0/0xc0 [ 3020.893754] ? pseudo_fs_get_tree+0x20/0x20 [ 3020.894442] get_tree_nodev+0x24/0x1d0 [ 3020.894969] vfs_get_tree+0x8e/0x300 [ 3020.895521] path_mount+0x14ab/0x2200 [ 3020.896016] ? strncpy_from_user+0x9e/0x470 [ 3020.896642] ? finish_automount+0xa90/0xa90 [ 3020.897265] ? getname_flags.part.0+0x1dd/0x4f0 [ 3020.897914] __x64_sys_mount+0x282/0x300 [ 3020.898530] ? copy_mnt_ns+0xa00/0xa00 [ 3020.899092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3020.899901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3020.900518] do_syscall_64+0x33/0x40 [ 3020.901005] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3020.901785] RIP: 0033:0x7fe94c52fb19 [ 3020.902223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3020.904654] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3020.905700] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 3020.906784] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3020.907799] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3020.908662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3020.909497] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 [ 3020.942652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=27009 comm=syz-executor.1 [ 3020.943568] FAULT_INJECTION: forcing a failure. [ 3020.943568] name failslab, interval 1, probability 0, space 0, times 0 [ 3020.946775] CPU: 1 PID: 27018 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3020.947579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3020.948551] Call Trace: [ 3020.948867] dump_stack+0x107/0x167 [ 3020.949296] should_fail.cold+0x5/0xa [ 3020.949747] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3020.950336] should_failslab+0x5/0x20 [ 3020.950783] kmem_cache_alloc_trace+0x55/0x320 [ 3020.951313] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3020.951907] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3020.952487] __list_lru_init+0x44d/0x890 [ 3020.952973] alloc_super+0x8b8/0xa90 [ 3020.953414] sget_fc+0x110/0x860 [ 3020.953807] ? set_anon_super+0xc0/0xc0 [ 3020.954273] ? pseudo_fs_get_tree+0x20/0x20 [ 3020.954773] get_tree_nodev+0x24/0x1d0 [ 3020.955229] vfs_get_tree+0x8e/0x300 [ 3020.955656] path_mount+0x14ab/0x2200 [ 3020.956101] ? strncpy_from_user+0x9e/0x470 [ 3020.956611] ? finish_automount+0xa90/0xa90 [ 3020.957112] ? getname_flags.part.0+0x1dd/0x4f0 [ 3020.957658] __x64_sys_mount+0x282/0x300 [ 3020.958128] ? copy_mnt_ns+0xa00/0xa00 [ 3020.958579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3020.959192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3020.959784] do_syscall_64+0x33/0x40 [ 3020.960218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3020.960816] RIP: 0033:0x7f575796fb19 [ 3020.961251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3020.963379] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3020.964259] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3020.965092] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3020.965906] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3020.966734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3020.967561] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 3020.977406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=27009 comm=syz-executor.1 [ 3020.990769] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=27009 comm=syz-executor.1 16:02:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd23, 0xffffffff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x800) [ 3021.036729] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1281 sclass=netlink_tcpdiag_socket pid=27022 comm=syz-executor.1 16:02:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0xc, 0x80000000}) 16:02:03 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 26) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:03 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xb, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:02:03 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x8102, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:02:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000000002a000000bc70b617ac7b27f933e49218518c460900000000000000671537a7941b2d43513b452afb81e11ba0e9f4a8d4d5f7af80d064963fd3"], 0x14}}, 0x0) [ 3021.272368] FAULT_INJECTION: forcing a failure. [ 3021.272368] name failslab, interval 1, probability 0, space 0, times 0 [ 3021.273764] CPU: 1 PID: 27046 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3021.274548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3021.275485] Call Trace: [ 3021.275795] dump_stack+0x107/0x167 [ 3021.276208] should_fail.cold+0x5/0xa [ 3021.276653] ? create_object.isra.0+0x3a/0xa30 [ 3021.277178] should_failslab+0x5/0x20 [ 3021.277607] kmem_cache_alloc+0x5b/0x310 [ 3021.278071] create_object.isra.0+0x3a/0xa30 [ 3021.278564] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3021.279142] __kmalloc+0x16e/0x390 [ 3021.279547] __list_lru_init+0xcd/0x890 [ 3021.280006] alloc_super+0x8b8/0xa90 [ 3021.280427] sget_fc+0x110/0x860 [ 3021.280820] ? set_anon_super+0xc0/0xc0 [ 3021.281272] ? pseudo_fs_get_tree+0x20/0x20 [ 3021.281760] get_tree_nodev+0x24/0x1d0 [ 3021.282202] vfs_get_tree+0x8e/0x300 [ 3021.282623] path_mount+0x14ab/0x2200 [ 3021.283055] ? strncpy_from_user+0x9e/0x470 [ 3021.283545] ? finish_automount+0xa90/0xa90 [ 3021.284035] ? getname_flags.part.0+0x1dd/0x4f0 [ 3021.284576] __x64_sys_mount+0x282/0x300 [ 3021.285035] ? copy_mnt_ns+0xa00/0xa00 [ 3021.285482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3021.286076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3021.286662] do_syscall_64+0x33/0x40 [ 3021.287087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3021.287668] RIP: 0033:0x7fe94c52fb19 [ 3021.288091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3021.290181] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3021.291049] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3021.291861] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3021.292676] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3021.293488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3021.294291] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 3034.474670] Bluetooth: hci2: command 0x0406 tx timeout [ 3034.475356] Bluetooth: hci5: command 0x0406 tx timeout 16:02:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0xffdb, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:02:19 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x8106, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:02:19 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4747, 0x0, 0x0, 0x80000000}) 16:02:19 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x10, 0x80000000}) 16:02:19 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:02:19 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 27) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:19 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 90) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000050) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200100080000fc00df25210000000a0001007770616e3100000009001f00706879320000000009001f0070687933000000000a0001007770616e0400edffffff0000010000000500200000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="40c27caf87251cebc067cf0115a15613000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000030000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) [ 3036.540421] FAULT_INJECTION: forcing a failure. [ 3036.540421] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.542822] CPU: 0 PID: 27070 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3036.544284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.546032] Call Trace: [ 3036.546595] dump_stack+0x107/0x167 [ 3036.547365] should_fail.cold+0x5/0xa [ 3036.548172] ? create_object.isra.0+0x3a/0xa30 [ 3036.549134] should_failslab+0x5/0x20 [ 3036.549935] kmem_cache_alloc+0x5b/0x310 [ 3036.550788] ? mark_held_locks+0x9e/0xe0 [ 3036.551648] create_object.isra.0+0x3a/0xa30 [ 3036.552567] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3036.553651] kmem_cache_alloc_trace+0x151/0x320 [ 3036.554633] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3036.555665] __list_lru_init+0x44d/0x890 [ 3036.556537] alloc_super+0x8b8/0xa90 [ 3036.557329] sget_fc+0x110/0x860 [ 3036.558038] ? set_anon_super+0xc0/0xc0 [ 3036.558873] ? pseudo_fs_get_tree+0x20/0x20 [ 3036.559779] get_tree_nodev+0x24/0x1d0 [ 3036.560595] vfs_get_tree+0x8e/0x300 [ 3036.561390] path_mount+0x14ab/0x2200 [ 3036.562209] ? strncpy_from_user+0x9e/0x470 [ 3036.563125] ? finish_automount+0xa90/0xa90 [ 3036.564024] ? getname_flags.part.0+0x1dd/0x4f0 [ 3036.565030] __x64_sys_mount+0x282/0x300 [ 3036.565891] ? copy_mnt_ns+0xa00/0xa00 [ 3036.566709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.567816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.568914] do_syscall_64+0x33/0x40 [ 3036.569700] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3036.570772] RIP: 0033:0x7f575796fb19 [ 3036.571554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.575442] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3036.577055] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3036.578558] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3036.580048] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3036.581561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3036.583061] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:02:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="0080387ad176920bc4ae8fbb008c00", @ANYRES16=r1, @ANYBLOB="0100fc7fffff0000000030000000"], 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) [ 3036.633617] FAULT_INJECTION: forcing a failure. [ 3036.633617] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.636255] CPU: 0 PID: 27071 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3036.637850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.639594] Call Trace: [ 3036.640154] dump_stack+0x107/0x167 [ 3036.640929] should_fail.cold+0x5/0xa [ 3036.641736] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3036.642798] should_failslab+0x5/0x20 [ 3036.643609] kmem_cache_alloc_trace+0x55/0x320 [ 3036.644575] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3036.645625] __list_lru_init+0x44d/0x890 [ 3036.646490] alloc_super+0x8b8/0xa90 [ 3036.647281] sget_fc+0x110/0x860 [ 3036.647999] ? set_anon_super+0xc0/0xc0 [ 3036.648849] ? pseudo_fs_get_tree+0x20/0x20 [ 3036.649750] get_tree_nodev+0x24/0x1d0 [ 3036.650568] vfs_get_tree+0x8e/0x300 [ 3036.651344] path_mount+0x14ab/0x2200 [ 3036.652148] ? strncpy_from_user+0x9e/0x470 [ 3036.653066] ? finish_automount+0xa90/0xa90 [ 3036.653969] ? getname_flags.part.0+0x1dd/0x4f0 [ 3036.654957] __x64_sys_mount+0x282/0x300 [ 3036.655804] ? copy_mnt_ns+0xa00/0xa00 [ 3036.656627] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.657733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.658824] do_syscall_64+0x33/0x40 [ 3036.659602] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3036.660676] RIP: 0033:0x7fe94c52fb19 [ 3036.661464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.665344] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3036.666927] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3036.668418] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3036.669929] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3036.671417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3036.672926] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:02:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c48c1}, 0x20000800) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@caif=@dgm={0x25, 0xab, 0x20}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="6b48ad1eb0664efa4f4ba038ddf9fc3682707862fb08103e01516cbfebf33fe93f1238", 0x23}], 0x1, &(0x7f00000004c0)=[{0x108, 0x104, 0x80000000, "cf5bbb600462c9ceedb8da537a082327aa1e089c8301dd819836b0402a343f9b52c752c2da2380461bc6b7d7ffe53a15b7f3f7d64ebabbe384d981808d7dc5522fe418d52f7cc20921a980484598a615d1bef1ca02920a254adb6775452159f06a31d92a7db80af1e7c261f57b40b553b4c83866100eb098f9b893b22e927e55519d42769f5f47d705166ed2aa8d8392967a09154d8ca810ce5580c8e05ac1f9ded36cdd8fbe663256e6bcb81d528257d1d384c13f59b5c42deced0d22fb24c6f90dd018ddb3f1976496e67003b94f6c7a2be2d9a704a0ab8273f1cac415419a23f5484ca7f5ae437be792d9f8b21932ef09db8ddf"}, {0xa0, 0x1, 0x9, "c715a9623de8020ace0d9e809e4d35a22ec660a0acc1119493edf3187243f231dc6f9db25c0e4f7f8b057432b044384aecd717c778adea2834a7917271b1724fac273873815a6dd45923e717cc4e318dcfa725d20ef0922271bc8ef861cf0a640fb9ee6fd126e0f65066f0f467f541e4fc0a4972af989ace8817b951a2c7a5cb9ee97501599867a1bb15"}, {0x30, 0x108, 0x1, "ef27e0b6e1251677c2c18fa7a0629d4368767cd5c1ad159afe3b18"}, {0x68, 0x1, 0x4, "d6f8e371b9451193b120a1e17d6cd2b1962ec4173b46b7e736a6b846c062d952dfef8e48c7bcf636b14b85f1a269d0fc926a4335ccb20292dcefd332373f03155c7e6a66c7810a17aef3c93349f54de10f253aaa2a"}, {0x80, 0x116, 0x3, "3c2f6754c5f61f8bc1524a9134463e1dde35399bc596ae3adefa200301575e9b20c4e36d2ee7c6a8c34fd21fd7b7ae3c94f49385b15bf084879880ea45c410ed43a0944282f734265d2b6285d670b960102a97e1736af2320f2dc18bf2d303618e8717311e9c35dd36c35c"}, {0x60, 0x88, 0x4, "8702bb8391e14c5014544a25949638258fecbd173303b04b6be9e9d88ba55fbd5b68a5785f536746fb81a2209c148be0209508a7a203f0483da01c291738ee5fb16e98c65be986b1ef2e05cc6a2ae0f3"}], 0x320}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4014}, 0x20040000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:02:19 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 91) fallocate(r0, 0x0, 0x0, 0x8000) [ 3036.758135] FAULT_INJECTION: forcing a failure. [ 3036.758135] name failslab, interval 1, probability 0, space 0, times 0 [ 3036.759632] CPU: 1 PID: 27079 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3036.760564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3036.761764] Call Trace: [ 3036.762076] dump_stack+0x107/0x167 [ 3036.762498] should_fail.cold+0x5/0xa [ 3036.762957] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3036.763541] should_failslab+0x5/0x20 [ 3036.763979] kmem_cache_alloc_trace+0x55/0x320 [ 3036.764506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3036.765106] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3036.765670] __list_lru_init+0x44d/0x890 [ 3036.766146] alloc_super+0x8b8/0xa90 [ 3036.766575] sget_fc+0x110/0x860 [ 3036.766963] ? set_anon_super+0xc0/0xc0 [ 3036.767420] ? pseudo_fs_get_tree+0x20/0x20 [ 3036.767912] get_tree_nodev+0x24/0x1d0 [ 3036.768360] vfs_get_tree+0x8e/0x300 [ 3036.768793] path_mount+0x14ab/0x2200 [ 3036.769233] ? strncpy_from_user+0x9e/0x470 [ 3036.769723] ? finish_automount+0xa90/0xa90 [ 3036.770220] ? getname_flags.part.0+0x1dd/0x4f0 [ 3036.770756] __x64_sys_mount+0x282/0x300 [ 3036.771218] ? copy_mnt_ns+0xa00/0xa00 [ 3036.771665] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3036.772263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3036.772857] do_syscall_64+0x33/0x40 [ 3036.773281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3036.773864] RIP: 0033:0x7f575796fb19 [ 3036.774289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3036.776384] RSP: 002b:00007f5754ee5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3036.777258] RAX: ffffffffffffffda RBX: 00007f5757a82f60 RCX: 00007f575796fb19 [ 3036.778068] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3036.778876] RBP: 00007f5754ee51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3036.779687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3036.780499] R13: 00007ffc26ef80cf R14: 00007f5754ee5300 R15: 0000000000022000 [ 3036.807411] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=27086 comm=syz-executor.1 [ 3036.816789] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=27086 comm=syz-executor.1 16:02:19 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x87ff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:02:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100005800000000000000300000"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040803}, 0x4000800) 16:02:19 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x12, 0x80000000}) [ 3036.855967] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=27088 comm=syz-executor.1 [ 3036.856270] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=27086 comm=syz-executor.1 16:02:19 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 28) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:19 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r3) 16:02:19 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="4e0000007f000000000000000000311ad464106e00b2725f21fa4ae1edb47dc0696fc1da525b09000000383c6ef934e964bd47aa3482952ac238a584b370b43c86e2b1"], 0x14}}, 0x0) [ 3037.084048] FAULT_INJECTION: forcing a failure. [ 3037.084048] name failslab, interval 1, probability 0, space 0, times 0 [ 3037.085394] CPU: 1 PID: 27103 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3037.086184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3037.087119] Call Trace: [ 3037.087424] dump_stack+0x107/0x167 [ 3037.087840] should_fail.cold+0x5/0xa [ 3037.088273] ? create_object.isra.0+0x3a/0xa30 [ 3037.088800] should_failslab+0x5/0x20 [ 3037.089232] kmem_cache_alloc+0x5b/0x310 [ 3037.089696] create_object.isra.0+0x3a/0xa30 [ 3037.090191] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3037.090766] kmem_cache_alloc_trace+0x151/0x320 [ 3037.091315] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3037.091872] __list_lru_init+0x44d/0x890 [ 3037.092339] alloc_super+0x8b8/0xa90 [ 3037.092775] sget_fc+0x110/0x860 [ 3037.093159] ? set_anon_super+0xc0/0xc0 [ 3037.093613] ? pseudo_fs_get_tree+0x20/0x20 [ 3037.094107] get_tree_nodev+0x24/0x1d0 [ 3037.094549] vfs_get_tree+0x8e/0x300 [ 3037.094972] path_mount+0x14ab/0x2200 [ 3037.095405] ? strncpy_from_user+0x9e/0x470 [ 3037.095897] ? finish_automount+0xa90/0xa90 [ 3037.096387] ? getname_flags.part.0+0x1dd/0x4f0 [ 3037.096934] __x64_sys_mount+0x282/0x300 [ 3037.097396] ? copy_mnt_ns+0xa00/0xa00 [ 3037.097849] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3037.098442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3037.099026] do_syscall_64+0x33/0x40 [ 3037.099451] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3037.100036] RIP: 0033:0x7fe94c52fb19 [ 3037.100461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3037.102750] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3037.103614] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3037.104420] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3037.105235] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3037.106044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3037.106849] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:02:34 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 92) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:34 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x64, 0x80000000}) 16:02:34 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 29) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:34 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xd, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:02:34 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x8fff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:02:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1, 0x0, 0x2, {0x2a}}, 0x14}}, 0x800) 16:02:34 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4748, 0x0, 0x0, 0x80000000}) 16:02:34 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x3, 0x80000000}) [ 3051.767455] FAULT_INJECTION: forcing a failure. [ 3051.767455] name failslab, interval 1, probability 0, space 0, times 0 [ 3051.770142] CPU: 0 PID: 27129 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3051.771751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3051.773688] Call Trace: [ 3051.774326] dump_stack+0x107/0x167 [ 3051.775184] should_fail.cold+0x5/0xa [ 3051.776075] ? create_object.isra.0+0x3a/0xa30 [ 3051.777149] should_failslab+0x5/0x20 [ 3051.778032] kmem_cache_alloc+0x5b/0x310 [ 3051.778978] ? mark_held_locks+0x9e/0xe0 [ 3051.779932] create_object.isra.0+0x3a/0xa30 [ 3051.780966] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3051.782148] kmem_cache_alloc_trace+0x151/0x320 [ 3051.783237] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3051.784424] __list_lru_init+0x44d/0x890 [ 3051.785491] alloc_super+0x8b8/0xa90 [ 3051.786361] sget_fc+0x110/0x860 [ 3051.787152] ? set_anon_super+0xc0/0xc0 [ 3051.788082] ? pseudo_fs_get_tree+0x20/0x20 [ 3051.789086] get_tree_nodev+0x24/0x1d0 [ 3051.789975] vfs_get_tree+0x8e/0x300 [ 3051.790837] path_mount+0x14ab/0x2200 [ 3051.791698] ? strncpy_from_user+0x9e/0x470 [ 3051.792697] ? finish_automount+0xa90/0xa90 [ 3051.793704] ? getname_flags.part.0+0x1dd/0x4f0 [ 3051.794802] __x64_sys_mount+0x282/0x300 [ 3051.795746] ? copy_mnt_ns+0xa00/0xa00 [ 3051.796654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3051.797954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3051.799480] do_syscall_64+0x33/0x40 [ 3051.800579] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3051.802106] RIP: 0033:0x7f575796fb19 [ 3051.803219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3051.808177] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3051.810168] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3051.811848] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3051.813478] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3051.815069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3051.816667] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:02:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="38c15b695c2153d6bf2079000000", @ANYRES16=r1, @ANYBLOB="010000000000000000002a0000000500350063000000050033000600000005003500030000000a0001007770616e30000000"], 0x38}}, 0x0) [ 3051.882864] FAULT_INJECTION: forcing a failure. [ 3051.882864] name failslab, interval 1, probability 0, space 0, times 0 [ 3051.884948] CPU: 1 PID: 27126 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3051.886219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3051.887726] Call Trace: [ 3051.888227] dump_stack+0x107/0x167 [ 3051.888948] should_fail.cold+0x5/0xa [ 3051.889637] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3051.890563] should_failslab+0x5/0x20 [ 3051.891260] kmem_cache_alloc_trace+0x55/0x320 [ 3051.892113] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3051.893048] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3051.893931] __list_lru_init+0x44d/0x890 [ 3051.894676] alloc_super+0x8b8/0xa90 [ 3051.895366] sget_fc+0x110/0x860 [ 3051.895999] ? set_anon_super+0xc0/0xc0 [ 3051.896725] ? pseudo_fs_get_tree+0x20/0x20 [ 3051.897526] get_tree_nodev+0x24/0x1d0 [ 3051.898223] vfs_get_tree+0x8e/0x300 [ 3051.898886] path_mount+0x14ab/0x2200 [ 3051.899570] ? strncpy_from_user+0x9e/0x470 [ 3051.900344] ? finish_automount+0xa90/0xa90 [ 3051.901113] ? getname_flags.part.0+0x1dd/0x4f0 [ 3051.901952] __x64_sys_mount+0x282/0x300 [ 3051.902676] ? copy_mnt_ns+0xa00/0xa00 [ 3051.903394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3051.904334] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3051.905253] do_syscall_64+0x33/0x40 [ 3051.905923] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3051.906833] RIP: 0033:0x7fe94c52fb19 [ 3051.907499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3051.910808] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3051.912160] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 3051.913430] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3051.914708] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3051.915994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3051.917275] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 16:02:34 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x97ff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:02:34 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xe, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:02:34 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x3, 0x80000000}) 16:02:34 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 30) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}}, 0x4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) [ 3052.180371] FAULT_INJECTION: forcing a failure. [ 3052.180371] name failslab, interval 1, probability 0, space 0, times 0 [ 3052.182542] CPU: 1 PID: 27149 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3052.183804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3052.185262] Call Trace: [ 3052.185765] dump_stack+0x107/0x167 [ 3052.186412] should_fail.cold+0x5/0xa [ 3052.187096] ? create_object.isra.0+0x3a/0xa30 [ 3052.187795] should_failslab+0x5/0x20 [ 3052.188527] kmem_cache_alloc+0x5b/0x310 [ 3052.189232] ? mark_held_locks+0x9e/0xe0 [ 3052.189961] create_object.isra.0+0x3a/0xa30 [ 3052.190633] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3052.191401] kmem_cache_alloc_trace+0x151/0x320 [ 3052.192109] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3052.192852] __list_lru_init+0x44d/0x890 [ 3052.193482] alloc_super+0x8b8/0xa90 [ 3052.194054] sget_fc+0x110/0x860 [ 3052.194566] ? set_anon_super+0xc0/0xc0 [ 3052.195179] ? pseudo_fs_get_tree+0x20/0x20 [ 3052.195827] get_tree_nodev+0x24/0x1d0 [ 3052.196413] vfs_get_tree+0x8e/0x300 [ 3052.196982] path_mount+0x14ab/0x2200 [ 3052.197562] ? strncpy_from_user+0x9e/0x470 [ 3052.198220] ? finish_automount+0xa90/0xa90 [ 3052.198868] ? getname_flags.part.0+0x1dd/0x4f0 [ 3052.199578] __x64_sys_mount+0x282/0x300 [ 3052.200192] ? copy_mnt_ns+0xa00/0xa00 [ 3052.200786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3052.201588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3052.202367] do_syscall_64+0x33/0x40 [ 3052.202929] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3052.203696] RIP: 0033:0x7fe94c52fb19 [ 3052.204249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3052.207031] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3052.208180] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3052.209252] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3052.210308] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3052.211368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3052.212432] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:02:35 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc00, 0x0, 0x0, 0x80000000}) 16:02:35 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 93) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008090) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x300, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd70f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) [ 3052.456437] FAULT_INJECTION: forcing a failure. [ 3052.456437] name failslab, interval 1, probability 0, space 0, times 0 [ 3052.459089] CPU: 0 PID: 27165 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3052.460692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3052.462575] Call Trace: [ 3052.463194] dump_stack+0x107/0x167 [ 3052.464043] should_fail.cold+0x5/0xa [ 3052.464938] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3052.466116] should_failslab+0x5/0x20 [ 3052.467024] kmem_cache_alloc_trace+0x55/0x320 [ 3052.468078] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3052.469262] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3052.470408] __list_lru_init+0x44d/0x890 [ 3052.471353] alloc_super+0x8b8/0xa90 [ 3052.472212] sget_fc+0x110/0x860 [ 3052.473002] ? set_anon_super+0xc0/0xc0 [ 3052.473926] ? pseudo_fs_get_tree+0x20/0x20 [ 3052.474924] get_tree_nodev+0x24/0x1d0 [ 3052.475835] vfs_get_tree+0x8e/0x300 [ 3052.476695] path_mount+0x14ab/0x2200 [ 3052.477574] ? strncpy_from_user+0x9e/0x470 [ 3052.478566] ? finish_automount+0xa90/0xa90 [ 3052.479566] ? getname_flags.part.0+0x1dd/0x4f0 [ 3052.480654] __x64_sys_mount+0x282/0x300 [ 3052.481599] ? copy_mnt_ns+0xa00/0xa00 [ 3052.482505] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3052.483715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3052.484917] do_syscall_64+0x33/0x40 [ 3052.485776] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3052.486962] RIP: 0033:0x7f575796fb19 [ 3052.487831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3052.492090] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3052.493852] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3052.495505] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3052.497158] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3052.498954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3052.500610] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:02:49 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc00, 0x0, 0x0, 0x80000000}) 16:02:49 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x9fff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:02:49 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x474f, 0x0, 0x0, 0x80000000}) 16:02:49 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xf, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:02:49 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x300, 0x80000000}) 16:02:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2404082c}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x18ca40801db89cab}, 0x8800) 16:02:49 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 31) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:49 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 94) fallocate(r0, 0x0, 0x0, 0x8000) [ 3067.042607] FAULT_INJECTION: forcing a failure. [ 3067.042607] name failslab, interval 1, probability 0, space 0, times 0 [ 3067.044144] CPU: 1 PID: 27186 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3067.045135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3067.046085] Call Trace: [ 3067.046457] dump_stack+0x107/0x167 [ 3067.046970] should_fail.cold+0x5/0xa [ 3067.047473] FAULT_INJECTION: forcing a failure. [ 3067.047473] name failslab, interval 1, probability 0, space 0, times 0 [ 3067.047513] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3067.050591] should_failslab+0x5/0x20 [ 3067.051121] kmem_cache_alloc_trace+0x55/0x320 [ 3067.051754] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3067.052465] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3067.053158] __list_lru_init+0x44d/0x890 [ 3067.053729] alloc_super+0x8b8/0xa90 [ 3067.054251] sget_fc+0x110/0x860 [ 3067.054720] ? set_anon_super+0xc0/0xc0 [ 3067.055284] ? pseudo_fs_get_tree+0x20/0x20 [ 3067.055885] get_tree_nodev+0x24/0x1d0 [ 3067.056429] vfs_get_tree+0x8e/0x300 [ 3067.056947] path_mount+0x14ab/0x2200 [ 3067.057495] ? strncpy_from_user+0x9e/0x470 [ 3067.058097] ? finish_automount+0xa90/0xa90 [ 3067.058694] ? getname_flags.part.0+0x1dd/0x4f0 [ 3067.059346] __x64_sys_mount+0x282/0x300 [ 3067.059906] ? copy_mnt_ns+0xa00/0xa00 [ 3067.060446] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3067.061180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3067.061902] do_syscall_64+0x33/0x40 [ 3067.062420] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3067.063125] RIP: 0033:0x7f575796fb19 [ 3067.063559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3067.066111] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3067.067171] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3067.067990] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3067.068986] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3067.069968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3067.070788] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 3067.071827] CPU: 0 PID: 27190 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3067.073385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3067.075414] Call Trace: [ 3067.076012] dump_stack+0x107/0x167 [ 3067.076812] should_fail.cold+0x5/0xa [ 3067.077682] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3067.078807] should_failslab+0x5/0x20 [ 3067.079647] kmem_cache_alloc_trace+0x55/0x320 [ 3067.080640] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3067.081764] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3067.082870] __list_lru_init+0x44d/0x890 [ 3067.083786] alloc_super+0x8b8/0xa90 [ 3067.084621] sget_fc+0x110/0x860 [ 3067.085387] ? set_anon_super+0xc0/0xc0 [ 3067.086265] ? pseudo_fs_get_tree+0x20/0x20 [ 3067.087211] get_tree_nodev+0x24/0x1d0 [ 3067.088078] vfs_get_tree+0x8e/0x300 [ 3067.088899] path_mount+0x14ab/0x2200 [ 3067.089737] ? strncpy_from_user+0x9e/0x470 [ 3067.090682] ? finish_automount+0xa90/0xa90 [ 3067.091651] ? getname_flags.part.0+0x1dd/0x4f0 [ 3067.092708] __x64_sys_mount+0x282/0x300 [ 3067.093591] ? copy_mnt_ns+0xa00/0xa00 [ 3067.094438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3067.095567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3067.096683] do_syscall_64+0x33/0x40 [ 3067.097497] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3067.098600] RIP: 0033:0x7fe94c52fb19 [ 3067.099399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3067.103357] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3067.104991] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3067.106536] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3067.108348] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3067.110175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3067.111855] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:02:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100001af760264663c3d1625200c2a4000000000000002a000000"], 0x14}}, 0x0) 16:02:49 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 95) fallocate(r0, 0x0, 0x0, 0x8000) 16:02:49 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xa7ff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:02:49 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4757, 0x0, 0x0, 0x80000000}) [ 3067.311163] FAULT_INJECTION: forcing a failure. [ 3067.311163] name failslab, interval 1, probability 0, space 0, times 0 [ 3067.312809] CPU: 1 PID: 27205 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3067.313812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3067.314970] Call Trace: [ 3067.315298] dump_stack+0x107/0x167 [ 3067.315807] should_fail.cold+0x5/0xa [ 3067.316334] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3067.316924] should_failslab+0x5/0x20 [ 3067.317474] kmem_cache_alloc_trace+0x55/0x320 [ 3067.318118] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3067.318827] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3067.319537] __list_lru_init+0x44d/0x890 [ 3067.320110] alloc_super+0x8b8/0xa90 [ 3067.320632] sget_fc+0x110/0x860 [ 3067.321110] ? set_anon_super+0xc0/0xc0 [ 3067.321666] ? pseudo_fs_get_tree+0x20/0x20 [ 3067.322265] get_tree_nodev+0x24/0x1d0 [ 3067.322722] vfs_get_tree+0x8e/0x300 [ 3067.323235] path_mount+0x14ab/0x2200 [ 3067.323777] ? strncpy_from_user+0x9e/0x470 [ 3067.324378] ? finish_automount+0xa90/0xa90 [ 3067.324971] ? getname_flags.part.0+0x1dd/0x4f0 [ 3067.325635] __x64_sys_mount+0x282/0x300 [ 3067.326206] ? copy_mnt_ns+0xa00/0xa00 [ 3067.326753] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3067.327467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3067.328181] do_syscall_64+0x33/0x40 [ 3067.328701] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3067.329429] RIP: 0033:0x7f575796fb19 [ 3067.329866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3067.332399] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3067.333464] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3067.334290] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3067.335288] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3067.336269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3067.337265] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:03:02 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x475f, 0x0, 0x0, 0x80000000}) 16:03:02 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xafff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:03:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xc000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000001b000000002a000000"], 0x14}}, 0x0) 16:03:02 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x321, 0x80000000}) 16:03:02 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 32) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:02 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:03:02 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x474f, 0x0, 0x0, 0x80000000}) 16:03:02 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 96) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x5d, r1, 0x8, 0x70bd27, 0xffff7ffb, {0x2a}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x0, 0x33, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) [ 3079.691019] FAULT_INJECTION: forcing a failure. [ 3079.691019] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.692487] CPU: 1 PID: 27236 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3079.693289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3079.694234] Call Trace: [ 3079.694540] dump_stack+0x107/0x167 [ 3079.694958] should_fail.cold+0x5/0xa [ 3079.695487] ? create_object.isra.0+0x3a/0xa30 [ 3079.696153] should_failslab+0x5/0x20 [ 3079.696593] kmem_cache_alloc+0x5b/0x310 [ 3079.697054] ? mark_held_locks+0x9e/0xe0 [ 3079.697525] create_object.isra.0+0x3a/0xa30 [ 3079.698027] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3079.698605] kmem_cache_alloc_trace+0x151/0x320 [ 3079.699139] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3079.699702] __list_lru_init+0x44d/0x890 [ 3079.700173] alloc_super+0x8b8/0xa90 [ 3079.700595] sget_fc+0x110/0x860 [ 3079.700982] ? set_anon_super+0xc0/0xc0 [ 3079.701541] ? pseudo_fs_get_tree+0x20/0x20 [ 3079.702162] get_tree_nodev+0x24/0x1d0 [ 3079.702731] vfs_get_tree+0x8e/0x300 [ 3079.703266] path_mount+0x14ab/0x2200 [ 3079.703762] ? strncpy_from_user+0x9e/0x470 [ 3079.704253] ? finish_automount+0xa90/0xa90 [ 3079.704745] ? getname_flags.part.0+0x1dd/0x4f0 [ 3079.705288] __x64_sys_mount+0x282/0x300 [ 3079.705747] ? copy_mnt_ns+0xa00/0xa00 [ 3079.706193] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3079.706791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3079.707379] do_syscall_64+0x33/0x40 [ 3079.707880] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3079.708556] RIP: 0033:0x7f575796fb19 [ 3079.708980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.711073] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3079.712036] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3079.712847] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3079.713806] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.714673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3079.715590] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 3079.719876] FAULT_INJECTION: forcing a failure. [ 3079.719876] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.721168] CPU: 1 PID: 27238 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3079.721971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3079.722911] Call Trace: [ 3079.723216] dump_stack+0x107/0x167 [ 3079.723634] should_fail.cold+0x5/0xa [ 3079.724071] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3079.724643] should_failslab+0x5/0x20 [ 3079.725079] kmem_cache_alloc_trace+0x55/0x320 [ 3079.725607] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3079.726184] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3079.726743] __list_lru_init+0x44d/0x890 [ 3079.727210] alloc_super+0x8b8/0xa90 [ 3079.727638] sget_fc+0x110/0x860 [ 3079.728025] ? set_anon_super+0xc0/0xc0 [ 3079.728476] ? pseudo_fs_get_tree+0x20/0x20 [ 3079.728965] get_tree_nodev+0x24/0x1d0 [ 3079.729417] vfs_get_tree+0x8e/0x300 [ 3079.729840] path_mount+0x14ab/0x2200 [ 3079.730270] ? strncpy_from_user+0x9e/0x470 [ 3079.730765] ? finish_automount+0xa90/0xa90 [ 3079.731252] ? getname_flags.part.0+0x1dd/0x4f0 16:03:02 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 3079.731785] __x64_sys_mount+0x282/0x300 [ 3079.732377] ? copy_mnt_ns+0xa00/0xa00 [ 3079.732830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3079.733449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3079.734042] do_syscall_64+0x33/0x40 [ 3079.734469] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3079.735057] RIP: 0033:0x7fe94c52fb19 [ 3079.735485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.737582] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3079.738446] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3079.739256] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3079.740067] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.740878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3079.741693] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:03:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0020f5", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf2509000000050015003f00000005001d000600000005001d0011000000"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x20000841) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x529369068b0559b7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x4080) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:03:02 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x12, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:03:02 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xb7ff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:03:02 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 97) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:02 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 33) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) [ 3079.982240] FAULT_INJECTION: forcing a failure. [ 3079.982240] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.983631] CPU: 1 PID: 27260 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3079.984415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3079.985362] Call Trace: [ 3079.985672] dump_stack+0x107/0x167 [ 3079.986086] should_fail.cold+0x5/0xa [ 3079.986522] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3079.987098] should_failslab+0x5/0x20 [ 3079.987534] kmem_cache_alloc_trace+0x55/0x320 [ 3079.988051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3079.988631] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3079.989198] __list_lru_init+0x44d/0x890 [ 3079.989678] alloc_super+0x8b8/0xa90 [ 3079.990105] sget_fc+0x110/0x860 [ 3079.990489] ? set_anon_super+0xc0/0xc0 [ 3079.990948] ? pseudo_fs_get_tree+0x20/0x20 [ 3079.991443] get_tree_nodev+0x24/0x1d0 [ 3079.991889] vfs_get_tree+0x8e/0x300 [ 3079.992316] path_mount+0x14ab/0x2200 [ 3079.992755] ? strncpy_from_user+0x9e/0x470 [ 3079.993251] ? finish_automount+0xa90/0xa90 [ 3079.993743] ? getname_flags.part.0+0x1dd/0x4f0 [ 3079.994274] __x64_sys_mount+0x282/0x300 [ 3079.994739] ? copy_mnt_ns+0xa00/0xa00 [ 3079.994756] FAULT_INJECTION: forcing a failure. [ 3079.994756] name failslab, interval 1, probability 0, space 0, times 0 [ 3079.996450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3079.997049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3079.997650] do_syscall_64+0x33/0x40 [ 3079.998075] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3079.998661] RIP: 0033:0x7fe94c52fb19 [ 3079.999088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.001175] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3080.002054] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3080.002863] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3080.003682] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3080.004488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3080.005304] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 3080.006137] CPU: 0 PID: 27261 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3080.006983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.007927] Call Trace: [ 3080.008236] dump_stack+0x107/0x167 [ 3080.008654] should_fail.cold+0x5/0xa [ 3080.009092] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3080.009679] should_failslab+0x5/0x20 [ 3080.010114] kmem_cache_alloc_trace+0x55/0x320 [ 3080.010634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3080.011215] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3080.011775] __list_lru_init+0x44d/0x890 [ 3080.012245] alloc_super+0x8b8/0xa90 [ 3080.012675] sget_fc+0x110/0x860 [ 3080.013061] ? set_anon_super+0xc0/0xc0 [ 3080.013537] ? pseudo_fs_get_tree+0x20/0x20 [ 3080.014028] get_tree_nodev+0x24/0x1d0 [ 3080.014472] vfs_get_tree+0x8e/0x300 [ 3080.014896] path_mount+0x14ab/0x2200 [ 3080.015334] ? strncpy_from_user+0x9e/0x470 [ 3080.015828] ? finish_automount+0xa90/0xa90 [ 3080.016319] ? getname_flags.part.0+0x1dd/0x4f0 [ 3080.016854] __x64_sys_mount+0x282/0x300 [ 3080.017323] ? copy_mnt_ns+0xa00/0xa00 [ 3080.017770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3080.018368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3080.018956] do_syscall_64+0x33/0x40 [ 3080.019382] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3080.019968] RIP: 0033:0x7f575796fb19 [ 3080.020391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.022499] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3080.023372] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3080.024184] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3080.024988] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3080.025804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3080.026617] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:03:14 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 34) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:14 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xbfff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:03:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x7c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000014}, 0x4c006) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '/\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000001) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:03:14 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:03:14 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4767, 0x0, 0x0, 0x80000000}) 16:03:14 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x500, 0x80000000}) 16:03:14 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 98) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:14 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x64, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 3092.358075] FAULT_INJECTION: forcing a failure. [ 3092.358075] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.360843] CPU: 0 PID: 27290 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3092.362544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3092.364563] Call Trace: [ 3092.365223] dump_stack+0x107/0x167 [ 3092.366127] should_fail.cold+0x5/0xa [ 3092.367068] ? create_object.isra.0+0x3a/0xa30 [ 3092.368186] should_failslab+0x5/0x20 [ 3092.369124] kmem_cache_alloc+0x5b/0x310 [ 3092.370137] ? mark_held_locks+0x9e/0xe0 [ 3092.371157] create_object.isra.0+0x3a/0xa30 [ 3092.372241] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3092.373526] kmem_cache_alloc_trace+0x151/0x320 [ 3092.374693] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3092.375916] __list_lru_init+0x44d/0x890 [ 3092.376942] alloc_super+0x8b8/0xa90 [ 3092.377898] sget_fc+0x110/0x860 [ 3092.378746] ? set_anon_super+0xc0/0xc0 [ 3092.379744] ? pseudo_fs_get_tree+0x20/0x20 [ 3092.380805] get_tree_nodev+0x24/0x1d0 [ 3092.381633] vfs_get_tree+0x8e/0x300 [ 3092.382417] path_mount+0x14ab/0x2200 [ 3092.383228] ? strncpy_from_user+0x9e/0x470 [ 3092.384142] ? finish_automount+0xa90/0xa90 [ 3092.385056] ? getname_flags.part.0+0x1dd/0x4f0 [ 3092.386060] __x64_sys_mount+0x282/0x300 [ 3092.386915] ? copy_mnt_ns+0xa00/0xa00 [ 3092.387745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3092.388856] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3092.389955] do_syscall_64+0x33/0x40 [ 3092.390744] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3092.391837] RIP: 0033:0x7f575796fb19 [ 3092.392625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.396522] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3092.398142] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3092.399649] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3092.401151] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3092.402665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3092.404166] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 3092.517775] FAULT_INJECTION: forcing a failure. [ 3092.517775] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.520220] CPU: 1 PID: 27294 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3092.521692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3092.523443] Call Trace: [ 3092.524183] dump_stack+0x107/0x167 [ 3092.525085] should_fail.cold+0x5/0xa [ 3092.525899] ? create_object.isra.0+0x3a/0xa30 [ 3092.526858] should_failslab+0x5/0x20 [ 3092.527663] kmem_cache_alloc+0x5b/0x310 [ 3092.528515] ? mark_held_locks+0x9e/0xe0 [ 3092.529419] create_object.isra.0+0x3a/0xa30 [ 3092.530412] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3092.531764] kmem_cache_alloc_trace+0x151/0x320 [ 3092.532884] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3092.534178] __list_lru_init+0x44d/0x890 [ 3092.535213] alloc_super+0x8b8/0xa90 [ 3092.536177] sget_fc+0x110/0x860 [ 3092.537062] ? set_anon_super+0xc0/0xc0 [ 3092.538122] ? pseudo_fs_get_tree+0x20/0x20 [ 3092.539265] get_tree_nodev+0x24/0x1d0 [ 3092.540226] vfs_get_tree+0x8e/0x300 [ 3092.541218] path_mount+0x14ab/0x2200 [ 3092.542153] ? strncpy_from_user+0x9e/0x470 [ 3092.543225] ? finish_automount+0xa90/0xa90 [ 3092.544318] ? getname_flags.part.0+0x1dd/0x4f0 [ 3092.545497] __x64_sys_mount+0x282/0x300 [ 3092.546472] ? copy_mnt_ns+0xa00/0xa00 [ 3092.547338] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3092.548644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3092.549919] do_syscall_64+0x33/0x40 [ 3092.550979] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3092.552213] RIP: 0033:0x7fe94c52fb19 [ 3092.553132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.557730] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3092.559587] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3092.561287] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3092.563076] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3092.564828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3092.566605] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:03:15 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 99) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:15 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 3092.710573] FAULT_INJECTION: forcing a failure. [ 3092.710573] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.713578] CPU: 0 PID: 27300 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3092.715042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3092.716777] Call Trace: [ 3092.717339] dump_stack+0x107/0x167 [ 3092.718118] should_fail.cold+0x5/0xa [ 3092.718928] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3092.719995] should_failslab+0x5/0x20 [ 3092.720802] kmem_cache_alloc_trace+0x55/0x320 [ 3092.721772] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3092.722851] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3092.723894] __list_lru_init+0x44d/0x890 [ 3092.724757] alloc_super+0x8b8/0xa90 [ 3092.725555] sget_fc+0x110/0x860 [ 3092.726275] ? set_anon_super+0xc0/0xc0 [ 3092.727117] ? pseudo_fs_get_tree+0x20/0x20 [ 3092.728025] get_tree_nodev+0x24/0x1d0 [ 3092.728846] vfs_get_tree+0x8e/0x300 [ 3092.729668] path_mount+0x14ab/0x2200 [ 3092.730473] ? strncpy_from_user+0x9e/0x470 [ 3092.731376] ? finish_automount+0xa90/0xa90 [ 3092.732287] ? getname_flags.part.0+0x1dd/0x4f0 [ 3092.733278] __x64_sys_mount+0x282/0x300 [ 3092.734146] ? copy_mnt_ns+0xa00/0xa00 [ 3092.734973] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3092.736078] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3092.737179] do_syscall_64+0x33/0x40 [ 3092.737978] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3092.739054] RIP: 0033:0x7f575796fb19 16:03:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000c819bb7801903e0200d0af0f59126dd2d6a9a52d3b00003a050ee3bc96d60ee8ba4f99ecfb93a51e9f85a6b4520400a65022367257c1f2074a8a4e3e3db306b1e2cb2eac1bf0ce33bca1bd62c39accd2a44fd3c20856ea75b4bc71814f1dd2b236b320a86fde7c1b9241cf0897c50b4dfb26d43f53b9d128f8644999dcf3b551af65ff3a2ea2b6c1e5cd85f8491ed84e9bc72fa2a2a177baf34cd563fdc779499d10329a95e33c2710440c3f64e34ae530be615817bc1cfe50975e14649ac3fb2b9109"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40040) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x80) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) [ 3092.739843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.743914] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3092.745523] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3092.746996] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3092.748481] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3092.749968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3092.751449] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 16:03:15 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xf8, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:03:15 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x600, 0x80000000}) 16:03:15 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc7ff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:03:15 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 100) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:15 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x476f, 0x0, 0x0, 0x80000000}) 16:03:15 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 35) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="40f78269", @ANYRES16=r2, @ANYBLOB="010000000000000000002a000000"], 0x14}}, 0x0) 16:03:15 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4767, 0x0, 0x0, 0x80000000}) [ 3093.135213] FAULT_INJECTION: forcing a failure. [ 3093.135213] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.137848] CPU: 1 PID: 27323 Comm: syz-executor.0 Not tainted 5.10.248 #1 [ 3093.139417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3093.141220] Call Trace: [ 3093.141821] dump_stack+0x107/0x167 [ 3093.142743] should_fail.cold+0x5/0xa [ 3093.143605] ? create_object.isra.0+0x3a/0xa30 [ 3093.144585] should_failslab+0x5/0x20 [ 3093.145319] kmem_cache_alloc+0x5b/0x310 [ 3093.146115] ? mark_held_locks+0x9e/0xe0 [ 3093.146903] create_object.isra.0+0x3a/0xa30 [ 3093.147752] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3093.148921] kmem_cache_alloc_trace+0x151/0x320 [ 3093.150022] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3093.151152] __list_lru_init+0x44d/0x890 [ 3093.152114] alloc_super+0x8b8/0xa90 [ 3093.152916] sget_fc+0x110/0x860 [ 3093.153713] ? set_anon_super+0xc0/0xc0 [ 3093.154546] ? pseudo_fs_get_tree+0x20/0x20 [ 3093.155374] get_tree_nodev+0x24/0x1d0 [ 3093.156123] vfs_get_tree+0x8e/0x300 [ 3093.156991] path_mount+0x14ab/0x2200 [ 3093.157864] ? strncpy_from_user+0x9e/0x470 [ 3093.158834] ? finish_automount+0xa90/0xa90 [ 3093.159850] ? getname_flags.part.0+0x1dd/0x4f0 [ 3093.160880] __x64_sys_mount+0x282/0x300 [ 3093.161656] ? copy_mnt_ns+0xa00/0xa00 [ 3093.162544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3093.163680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3093.164704] do_syscall_64+0x33/0x40 [ 3093.165685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3093.166822] RIP: 0033:0x7f575796fb19 [ 3093.167660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3093.171675] RSP: 002b:00007f5754ec4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3093.173120] RAX: ffffffffffffffda RBX: 00007f5757a83020 RCX: 00007f575796fb19 [ 3093.174482] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3093.176104] RBP: 00007f5754ec41d0 R08: 0000000000000000 R09: 0000000000000000 [ 3093.177461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3093.178810] R13: 00007ffc26ef80cf R14: 00007f5754ec4300 R15: 0000000000022000 [ 3093.208012] FAULT_INJECTION: forcing a failure. [ 3093.208012] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.210657] CPU: 0 PID: 27330 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3093.212251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3093.214034] Call Trace: [ 3093.214597] dump_stack+0x107/0x167 [ 3093.215367] should_fail.cold+0x5/0xa [ 3093.216179] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3093.217249] should_failslab+0x5/0x20 [ 3093.218061] kmem_cache_alloc_trace+0x55/0x320 [ 3093.219023] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3093.220085] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3093.221116] __list_lru_init+0x44d/0x890 [ 3093.221979] alloc_super+0x8b8/0xa90 [ 3093.222775] sget_fc+0x110/0x860 [ 3093.223485] ? set_anon_super+0xc0/0xc0 [ 3093.224323] ? pseudo_fs_get_tree+0x20/0x20 [ 3093.225228] get_tree_nodev+0x24/0x1d0 [ 3093.226052] vfs_get_tree+0x8e/0x300 [ 3093.226833] path_mount+0x14ab/0x2200 [ 3093.227634] ? strncpy_from_user+0x9e/0x470 [ 3093.228551] ? finish_automount+0xa90/0xa90 [ 3093.229480] ? getname_flags.part.0+0x1dd/0x4f0 [ 3093.230473] __x64_sys_mount+0x282/0x300 [ 3093.231326] ? copy_mnt_ns+0xa00/0xa00 [ 3093.232150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3093.233253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3093.234354] do_syscall_64+0x33/0x40 [ 3093.235134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3093.236210] RIP: 0033:0x7fe94c52fb19 [ 3093.236998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3093.240873] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3093.242472] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3093.243970] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3093.245472] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3093.246969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3093.248470] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:03:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18c10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44005}, 0x4) 16:03:16 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xbfff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:03:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x40) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:03:16 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 36) fallocate(r0, 0x0, 0x0, 0x8000) [ 3093.727027] FAULT_INJECTION: forcing a failure. [ 3093.727027] name failslab, interval 1, probability 0, space 0, times 0 [ 3093.729660] CPU: 0 PID: 27343 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3093.731235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3093.733112] Call Trace: [ 3093.733740] dump_stack+0x107/0x167 [ 3093.734569] should_fail.cold+0x5/0xa [ 3093.735437] ? create_object.isra.0+0x3a/0xa30 [ 3093.736462] should_failslab+0x5/0x20 [ 3093.737318] kmem_cache_alloc+0x5b/0x310 [ 3093.738242] ? mark_held_locks+0x9e/0xe0 [ 3093.739163] create_object.isra.0+0x3a/0xa30 [ 3093.740145] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3093.741297] kmem_cache_alloc_trace+0x151/0x320 [ 3093.742365] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3093.743489] __list_lru_init+0x44d/0x890 [ 3093.744406] alloc_super+0x8b8/0xa90 [ 3093.745257] sget_fc+0x110/0x860 [ 3093.746026] ? set_anon_super+0xc0/0xc0 [ 3093.746927] ? pseudo_fs_get_tree+0x20/0x20 [ 3093.747889] get_tree_nodev+0x24/0x1d0 [ 3093.748776] vfs_get_tree+0x8e/0x300 [ 3093.749655] path_mount+0x14ab/0x2200 [ 3093.750542] ? strncpy_from_user+0x9e/0x470 [ 3093.751514] ? finish_automount+0xa90/0xa90 [ 3093.752507] ? getname_flags.part.0+0x1dd/0x4f0 [ 3093.753578] __x64_sys_mount+0x282/0x300 [ 3093.754505] ? copy_mnt_ns+0xa00/0xa00 [ 3093.755375] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3093.756561] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3093.757719] do_syscall_64+0x33/0x40 [ 3093.758563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3093.759700] RIP: 0033:0x7fe94c52fb19 [ 3093.760538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3093.764571] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3093.766264] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3093.767865] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3093.769482] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3093.771082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3093.772684] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 3098.154771] Bluetooth: hci2: command 0x0409 tx timeout [ 3100.202767] Bluetooth: hci2: command 0x041b tx timeout [ 3102.250654] Bluetooth: hci2: command 0x040f tx timeout [ 3102.738488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3102.740900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3102.744456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3102.791447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3102.792959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3102.794881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3104.298729] Bluetooth: hci2: command 0x0419 tx timeout [ 3108.203704] Bluetooth: hci4: command 0x0406 tx timeout 16:03:39 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0xc00, 0x80000000}) 16:03:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r5, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0xbc, r4, 0x1, 0x3, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:semanage_store_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4004}, 0xa59dc569062e4e34) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hald_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x74}, 0x1, 0x0, 0x0, 0x289c6a1ae80141be}, 0x850) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf2501000000050011008000000006000a000300000005001100c500000005001d0005000000050028fc8100000006000800ffff000006000a0003000000406ccb030462f88736cb915a18090cde8e463ff0f12eacff75d23fa4b8f91a8c621a1e724e"], 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4008841) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r8 = syz_open_dev$vcsu(&(0x7f0000000380), 0x9, 0x102) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r9, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x50, r7, 0x1, 0x0, 0x0, {0x2a}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x50}}, 0x0) 16:03:39 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xcfff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:03:39 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4837, 0x0, 0x0, 0x80000000}) 16:03:39 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:39 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x102, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:03:39 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 37) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:39 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x7c08, &(0x7f0000000180)={0x0, 0x2000000, 0x4, 0x0, 0x187, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_enter(r1, 0xf92, 0x723c, 0x3, &(0x7f0000000080)={[0x8]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}, {0x0}, {0x0}], 0x33}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)="df698c3b6a0697a08cba569c02978c1d8af4f9174fa03a59986e666a5fcda15b106355a20a431dedbcd16b922033029d840c627fa13dab9852fb5870767f4850678ad8a28b688ea70c5d8290e477faa4ea69d455261ff30c4b2e7f076fae3878e2a561d08ab96acf957e2b83d6f2c35176fbceb911b31ba2d4bc338c955bbd40ed578e6956073cede609ab", 0x8b, 0x24008001, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x72f, 0x1, &(0x7f00000000c0)="5199855441f0f59b2ed8c8fca2c919ec1c3b602efb851a99d4f2f67fd4d048b924ab14fb3ec6b835e6d9f6b3582e407b610512fa3618dce962945f98e54dc0ee0c0ffb6476d88d9cf4de5ff1dbc62778ccad8b52660b754dc4a4d49766ba17bb22fac40789", 0x8, 0x0, 0x0, {0x0, r7}}, 0x5) syz_io_uring_setup(0x4d4f, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 3117.003905] FAULT_INJECTION: forcing a failure. [ 3117.003905] name failslab, interval 1, probability 0, space 0, times 0 [ 3117.005290] CPU: 1 PID: 27829 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3117.006139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3117.007139] Call Trace: [ 3117.007466] dump_stack+0x107/0x167 [ 3117.007907] should_fail.cold+0x5/0xa [ 3117.008375] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3117.008989] should_failslab+0x5/0x20 [ 3117.009456] kmem_cache_alloc_trace+0x55/0x320 [ 3117.010030] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3117.010670] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3117.011266] __list_lru_init+0x44d/0x890 [ 3117.011759] alloc_super+0x8b8/0xa90 [ 3117.012213] sget_fc+0x110/0x860 [ 3117.012621] ? set_anon_super+0xc0/0xc0 [ 3117.013099] ? pseudo_fs_get_tree+0x20/0x20 [ 3117.013614] get_tree_nodev+0x24/0x1d0 [ 3117.014088] vfs_get_tree+0x8e/0x300 [ 3117.014535] path_mount+0x14ab/0x2200 [ 3117.014995] ? strncpy_from_user+0x9e/0x470 [ 3117.015513] ? finish_automount+0xa90/0xa90 [ 3117.016036] ? getname_flags.part.0+0x1dd/0x4f0 [ 3117.016599] __x64_sys_mount+0x282/0x300 [ 3117.017085] ? copy_mnt_ns+0xa00/0xa00 [ 3117.017560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3117.018199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3117.018821] do_syscall_64+0x33/0x40 [ 3117.019271] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3117.019890] RIP: 0033:0x7fe94c52fb19 [ 3117.020335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3117.022508] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3117.023401] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3117.024243] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3117.025099] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3117.025961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3117.026818] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:03:39 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x483f, 0x0, 0x0, 0x80000000}) 16:03:39 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 38) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:39 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="ae0b3700b48400d10e019f106a085c921aa4b15032ce93e16522e7f5c81fbdaa5aefbb2ab6b8b6167cf34ff8443da0fcdd06ac37f5e5fe92f314c0ea85ec6347c68c184d3214edaa2daf686c10f794a7748ad4acce9741b93dc7a954f87183297dab4bb5783959fb996878b5e6e513b86240a9e1db26e73f610b80", 0x7b, 0x20004000, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @scatter={0x1000000000000063, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/207, 0xcf}, {&(0x7f0000000640)=""/159, 0x99}]}, 0x0, 0x0, 0x0, 0x31, 0x1, 0x0}) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) 16:03:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40489d5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="09010000fdfbffff0001000000007dcd9ac32452fb21491a91a71614e8d7f320f32f58ed55230040a81c3f66132cd9f299ae7da95d8bd648ca0110d28e43f4b98c178ba9ebc66cf168af9061c310dbb1df7c11a31539d3a17b944a3f5e8a14bedced113c3622a57100"/115], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "62d70a82723015d5011762fff1b2dba519d5e4eec28f3c498fd44dbcdb5d009d"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "56ec6e321783d0ba0d4cf9960332a44e738085dadbef615d1350df6e2cd2a425"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000004}, 0x15) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x2d0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2dfd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffff000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdd29}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa785}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc0000000}]}, @TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9f, 0x3, "274b7d047b2d6f7e0b941940d0ff509d4537762a91009b228b54ce749ab48d296e6e622a20b5b6ffafd7442c0c7db9ab11022ece7958157a62e6b4327447673d5771461b7fb691f37f51c8114b96f4a25e2c1061a63f8cbdbec8204e530a32dc6a322f119981a8ff32c66ab5d47640e427f5fda48239ba577addcdc1bf53b42670b98ef79d72c9a57b01a30b788d6eb0da8fa7b88fd69181fe0ba7"}, @TIPC_NLA_NODE_ID={0xf6, 0x3, "849b588476ab7bd65498abe83e90a324fbf618843e664646d1c20e3feccd60d4a3cf5fa662db458140dba0f07dcc58dcebc0fedaa3f4575e651c953c9b0514b72100b3e0761ce4b25f85ffc83b247dd3c55c8fe1448d9cd6bf28a607183d6874c6d9ff44a432b2314ed3d756400ff7aecd27bb41908a22848ab4ff4ee6af262b28edcd60de1e07400763dc507bb93c1752cf164ccd7c0c1c4eb149bc3dea782df16d37fa7eb22f3fb4dcdff9bd8cfda77d4019691630489c6bc7cbe8ddce3127d3d2260bedbd5de777c7e1a02e4b943b598fb3732ab548b787459eb915f3b2d1933677043939301c4b960d5983ec22393e8f"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb14e}]}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0xc054}, 0x4335a3a378151d51) [ 3117.306967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.307653] blk_update_request: I/O error, dev sr0, sector 7 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 3117.308996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.309764] blk_update_request: I/O error, dev sr0, sector 263 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 3117.313245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.313941] blk_update_request: I/O error, dev sr0, sector 519 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 3117.323041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.323857] blk_update_request: I/O error, dev sr0, sector 775 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 16:03:40 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xd7ff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 3117.344965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.345027] FAULT_INJECTION: forcing a failure. [ 3117.345027] name failslab, interval 1, probability 0, space 0, times 0 [ 3117.346245] blk_update_request: I/O error, dev sr0, sector 1031 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 3117.347453] CPU: 1 PID: 27849 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3117.347460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3117.347472] Call Trace: [ 3117.349963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.350498] dump_stack+0x107/0x167 [ 3117.352352] blk_update_request: I/O error, dev sr0, sector 1287 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 3117.352559] should_fail.cold+0x5/0xa [ 3117.353819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.354077] ? create_object.isra.0+0x3a/0xa30 [ 3117.356363] blk_update_request: I/O error, dev sr0, sector 1543 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 3117.356723] should_failslab+0x5/0x20 [ 3117.356736] kmem_cache_alloc+0x5b/0x310 [ 3117.356748] ? mark_held_locks+0x9e/0xe0 [ 3117.356761] create_object.isra.0+0x3a/0xa30 [ 3117.356777] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3117.362005] kmem_cache_alloc_trace+0x151/0x320 [ 3117.362458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.362548] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3117.363767] blk_update_request: I/O error, dev sr0, sector 1799 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 3117.364230] __list_lru_init+0x44d/0x890 [ 3117.366704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.366855] alloc_super+0x8b8/0xa90 [ 3117.368054] blk_update_request: I/O error, dev sr0, sector 2055 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 3117.368382] sget_fc+0x110/0x860 [ 3117.370881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.370978] ? set_anon_super+0xc0/0xc0 [ 3117.372182] blk_update_request: I/O error, dev sr0, sector 2311 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 3117.372542] ? pseudo_fs_get_tree+0x20/0x20 [ 3117.375009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.375240] get_tree_nodev+0x24/0x1d0 [ 3117.375256] vfs_get_tree+0x8e/0x300 [ 3117.376730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.376799] path_mount+0x14ab/0x2200 [ 3117.377908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.378188] ? strncpy_from_user+0x9e/0x470 [ 3117.379292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.379575] ? finish_automount+0xa90/0xa90 [ 3117.380725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.381083] ? getname_flags.part.0+0x1dd/0x4f0 [ 3117.382416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.382588] __x64_sys_mount+0x282/0x300 [ 3117.383902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.384163] ? copy_mnt_ns+0xa00/0xa00 [ 3117.385320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.385611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3117.385624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3117.385651] do_syscall_64+0x33/0x40 [ 3117.386820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.387063] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3117.388468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.388747] RIP: 0033:0x7fe94c52fb19 [ 3117.388759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3117.388766] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3117.389891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.390147] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3117.390162] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3117.391858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.392245] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3117.392261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3117.398210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.398447] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 [ 3117.430795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.437127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.440217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.441043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.453205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.460812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.461524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.462324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:03:40 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x103, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:03:40 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4847, 0x0, 0x0, 0x80000000}) [ 3117.476804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.484539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.489754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.496581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.498340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.513355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.520568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.522208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.537340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.542255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.551233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.560437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.566508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.575999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.581850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.583199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.599285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.600922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.615175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:03:40 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 39) fallocate(r0, 0x0, 0x0, 0x8000) [ 3117.667457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:03:40 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xdfff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 3117.686402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.703685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.705110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.706529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.708305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.709752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.725985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.727501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.732827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.734245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.735661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.737035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.738421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.739765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.751689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.753199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.754746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.756112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.757494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.758916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.760299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 16:03:40 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x1200, 0x80000000}) [ 3117.761752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.763886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.765345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.766879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.768290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.769751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.771119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.772493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.773863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.775399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.776908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.778403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.779968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.781392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.783117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.784822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.786208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.787721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.789163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.790914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.794768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.795522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.796297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.797031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.797765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.798516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.799422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.800168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 3117.810459] FAULT_INJECTION: forcing a failure. [ 3117.810459] name failslab, interval 1, probability 0, space 0, times 0 [ 3117.812844] CPU: 0 PID: 27876 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3117.814323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3117.816078] Call Trace: [ 3117.816646] dump_stack+0x107/0x167 [ 3117.817419] should_fail.cold+0x5/0xa [ 3117.818233] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3117.819297] should_failslab+0x5/0x20 [ 3117.820102] kmem_cache_alloc_trace+0x55/0x320 [ 3117.821067] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3117.822149] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3117.823189] __list_lru_init+0x44d/0x890 [ 3117.824051] alloc_super+0x8b8/0xa90 [ 3117.824842] sget_fc+0x110/0x860 [ 3117.825556] ? set_anon_super+0xc0/0xc0 [ 3117.826420] ? pseudo_fs_get_tree+0x20/0x20 [ 3117.827325] get_tree_nodev+0x24/0x1d0 [ 3117.828145] vfs_get_tree+0x8e/0x300 [ 3117.828942] path_mount+0x14ab/0x2200 [ 3117.829754] ? strncpy_from_user+0x9e/0x470 [ 3117.830660] ? finish_automount+0xa90/0xa90 [ 3117.831579] ? getname_flags.part.0+0x1dd/0x4f0 [ 3117.832579] __x64_sys_mount+0x282/0x300 [ 3117.833435] ? copy_mnt_ns+0xa00/0xa00 [ 3117.834276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3117.835383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3117.836474] do_syscall_64+0x33/0x40 [ 3117.837265] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3117.838357] RIP: 0033:0x7fe94c52fb19 [ 3117.839151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3117.843043] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3117.844667] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3117.846186] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3117.847700] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3117.849212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3117.850725] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:03:54 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:54 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x2103, 0x80000000}) 16:03:54 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 40) fallocate(r0, 0x0, 0x0, 0x8000) 16:03:54 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) r1 = getegid() setresgid(r1, r1, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0xee01, r1) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x43000, &(0x7f0000000280)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0xffffffff}}, {@privport}, {@cache_fscache}, {@fscache}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@subj_role={'subj_role', 0x3d, '\\}\x19:'}}, {@subj_role}, {@context={'context', 0x3d, 'system_u'}}]}}) 16:03:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x150e54ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ca87770}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3503143d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fe2b56c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 16:03:54 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x484f, 0x0, 0x0, 0x80000000}) 16:03:54 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x10c, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:03:54 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xe7ff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 3131.583315] FAULT_INJECTION: forcing a failure. [ 3131.583315] name failslab, interval 1, probability 0, space 0, times 0 [ 3131.584866] CPU: 0 PID: 27900 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3131.585812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3131.586759] Call Trace: [ 3131.587096] dump_stack+0x107/0x167 [ 3131.587512] should_fail.cold+0x5/0xa [ 3131.587960] ? create_object.isra.0+0x3a/0xa30 [ 3131.588482] should_failslab+0x5/0x20 [ 3131.588932] kmem_cache_alloc+0x5b/0x310 [ 3131.589400] ? mark_held_locks+0x9e/0xe0 [ 3131.589888] create_object.isra.0+0x3a/0xa30 [ 3131.590387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3131.590987] kmem_cache_alloc_trace+0x151/0x320 [ 3131.591518] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3131.592100] __list_lru_init+0x44d/0x890 [ 3131.592566] alloc_super+0x8b8/0xa90 [ 3131.593013] sget_fc+0x110/0x860 [ 3131.593400] ? set_anon_super+0xc0/0xc0 [ 3131.593888] ? pseudo_fs_get_tree+0x20/0x20 [ 3131.594384] get_tree_nodev+0x24/0x1d0 [ 3131.594849] vfs_get_tree+0x8e/0x300 [ 3131.595275] path_mount+0x14ab/0x2200 [ 3131.595712] ? strncpy_from_user+0x9e/0x470 [ 3131.596214] ? finish_automount+0xa90/0xa90 [ 3131.596711] ? getname_flags.part.0+0x1dd/0x4f0 [ 3131.597260] __x64_sys_mount+0x282/0x300 [ 3131.597722] ? copy_mnt_ns+0xa00/0xa00 [ 3131.598188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3131.598794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3131.599388] do_syscall_64+0x33/0x40 [ 3131.599826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3131.600420] RIP: 0033:0x7fe94c52fb19 [ 3131.600857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3131.602974] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3131.603850] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3131.604661] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3131.605486] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3131.606318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3131.607140] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:04:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x3f00, 0x80000000}) 16:04:06 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x484f, 0x0, 0x0, 0x80000000}) 16:04:06 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4857, 0x0, 0x0, 0x80000000}) 16:04:06 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x201, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:04:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, r1, 0x6, 0x0, 0x0, {0x2a}}, 0x14}}, 0xe0a72fb38119d7e1) 16:04:06 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 41) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:06 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x3, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:06 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xefff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:04:06 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xdfff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:04:06 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xf7ff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 3144.030696] FAULT_INJECTION: forcing a failure. [ 3144.030696] name failslab, interval 1, probability 0, space 0, times 0 [ 3144.032309] CPU: 0 PID: 27932 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3144.033289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3144.034396] Call Trace: [ 3144.034770] dump_stack+0x107/0x167 [ 3144.035296] should_fail.cold+0x5/0xa [ 3144.035829] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3144.036531] should_failslab+0x5/0x20 [ 3144.037067] kmem_cache_alloc_trace+0x55/0x320 [ 3144.037711] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3144.038440] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3144.039128] __list_lru_init+0x44d/0x890 [ 3144.039715] alloc_super+0x8b8/0xa90 [ 3144.040253] sget_fc+0x110/0x860 [ 3144.040735] ? set_anon_super+0xc0/0xc0 [ 3144.041304] ? pseudo_fs_get_tree+0x20/0x20 [ 3144.041997] get_tree_nodev+0x24/0x1d0 [ 3144.042540] vfs_get_tree+0x8e/0x300 [ 3144.043067] path_mount+0x14ab/0x2200 [ 3144.043612] ? strncpy_from_user+0x9e/0x470 [ 3144.044215] ? finish_automount+0xa90/0xa90 [ 3144.044828] ? getname_flags.part.0+0x1dd/0x4f0 [ 3144.045480] __x64_sys_mount+0x282/0x300 [ 3144.046058] ? copy_mnt_ns+0xa00/0xa00 [ 3144.046613] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3144.047345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3144.048072] do_syscall_64+0x33/0x40 [ 3144.048596] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3144.049305] RIP: 0033:0x7fe94c52fb19 [ 3144.049805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3144.052416] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3144.053478] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3144.054495] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3144.055437] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3144.056373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3144.057315] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:04:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2a}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}]}, 0x1c}}, 0x0) 16:04:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14004800}, 0x4000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0) 16:04:06 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x485f, 0x0, 0x0, 0x80000000}) 16:04:07 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x4000, 0x80000000}) 16:04:07 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x281, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:04:19 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4867, 0x0, 0x0, 0x80000000}) 16:04:19 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x6400, 0x80000000}) 16:04:19 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:19 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xff01, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:04:19 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xf7ff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:04:19 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 42) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:19 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x300, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 3157.186788] FAULT_INJECTION: forcing a failure. [ 3157.186788] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.189433] CPU: 1 PID: 27968 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3157.191073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3157.192877] Call Trace: [ 3157.193464] dump_stack+0x107/0x167 [ 3157.194278] should_fail.cold+0x5/0xa [ 3157.195170] ? create_object.isra.0+0x3a/0xa30 [ 3157.196280] should_failslab+0x5/0x20 [ 3157.197129] kmem_cache_alloc+0x5b/0x310 [ 3157.198189] ? mark_held_locks+0x9e/0xe0 [ 3157.199257] create_object.isra.0+0x3a/0xa30 [ 3157.200215] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3157.201318] kmem_cache_alloc_trace+0x151/0x320 [ 3157.202419] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3157.203579] __list_lru_init+0x44d/0x890 [ 3157.204485] alloc_super+0x8b8/0xa90 [ 3157.205327] sget_fc+0x110/0x860 [ 3157.206077] ? set_anon_super+0xc0/0xc0 [ 3157.206959] ? pseudo_fs_get_tree+0x20/0x20 [ 3157.207890] get_tree_nodev+0x24/0x1d0 [ 3157.208741] vfs_get_tree+0x8e/0x300 [ 3157.209547] path_mount+0x14ab/0x2200 [ 3157.210474] ? strncpy_from_user+0x9e/0x470 [ 3157.211553] ? finish_automount+0xa90/0xa90 [ 3157.212484] ? getname_flags.part.0+0x1dd/0x4f0 [ 3157.213500] __x64_sys_mount+0x282/0x300 [ 3157.214383] ? copy_mnt_ns+0xa00/0xa00 [ 3157.215229] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3157.216363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3157.217489] do_syscall_64+0x33/0x40 [ 3157.218301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3157.219404] RIP: 0033:0x7fe94c52fb19 [ 3157.220208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3157.224178] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3157.225817] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 3157.227364] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3157.228899] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.230446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3157.231980] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 16:04:20 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 43) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:20 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:20 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x486f, 0x0, 0x0, 0x80000000}) 16:04:20 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xff07, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 3157.514301] FAULT_INJECTION: forcing a failure. [ 3157.514301] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.516807] CPU: 1 PID: 27989 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3157.518321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3157.520109] Call Trace: [ 3157.520686] dump_stack+0x107/0x167 [ 3157.521471] should_fail.cold+0x5/0xa [ 3157.522307] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3157.523401] should_failslab+0x5/0x20 [ 3157.524225] kmem_cache_alloc_trace+0x55/0x320 [ 3157.525216] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3157.526348] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3157.527415] __list_lru_init+0x44d/0x890 [ 3157.528303] alloc_super+0x8b8/0xa90 [ 3157.529112] sget_fc+0x110/0x860 [ 3157.529842] ? set_anon_super+0xc0/0xc0 [ 3157.530717] ? pseudo_fs_get_tree+0x20/0x20 [ 3157.531649] get_tree_nodev+0x24/0x1d0 [ 3157.532492] vfs_get_tree+0x8e/0x300 [ 3157.533302] path_mount+0x14ab/0x2200 [ 3157.534142] ? strncpy_from_user+0x9e/0x470 [ 3157.535074] ? finish_automount+0xa90/0xa90 [ 3157.536009] ? getname_flags.part.0+0x1dd/0x4f0 [ 3157.537030] __x64_sys_mount+0x282/0x300 [ 3157.537908] ? copy_mnt_ns+0xa00/0xa00 [ 3157.538765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3157.539903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3157.541021] do_syscall_64+0x33/0x40 [ 3157.541829] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3157.542948] RIP: 0033:0x7fe94c52fb19 [ 3157.543753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3157.547747] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3157.549396] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 3157.550944] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3157.552484] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.554024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3157.555572] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 16:04:20 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x80000, 0x80000000}) 16:04:20 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xf7ff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:04:20 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2e, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:20 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x301, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:04:33 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xf7ff, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:04:33 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4f47, 0x0, 0x0, 0x80000000}) 16:04:33 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x1000000, 0x80000000}) 16:04:33 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 44) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:33 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xff7f, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:04:33 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xf0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) [ 3170.325938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=28027 comm=syz-executor.1 16:04:33 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x321, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:04:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000840)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="68020000", @ANYRES16=r1, @ANYBLOB="00082dbd7000f9dbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x40005}, 0x20000810) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) [ 3170.358532] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=28027 comm=syz-executor.1 [ 3170.366414] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=28027 comm=syz-executor.1 [ 3170.403139] FAULT_INJECTION: forcing a failure. [ 3170.403139] name failslab, interval 1, probability 0, space 0, times 0 [ 3170.404486] CPU: 0 PID: 28029 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3170.405312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3170.406325] Call Trace: [ 3170.406649] dump_stack+0x107/0x167 [ 3170.407091] should_fail.cold+0x5/0xa [ 3170.407543] ? create_object.isra.0+0x3a/0xa30 [ 3170.408179] should_failslab+0x5/0x20 [ 3170.408660] kmem_cache_alloc+0x5b/0x310 [ 3170.409124] create_object.isra.0+0x3a/0xa30 [ 3170.409619] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3170.410231] kmem_cache_alloc_trace+0x151/0x320 [ 3170.410773] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3170.411327] __list_lru_init+0x44d/0x890 [ 3170.411819] alloc_super+0x8b8/0xa90 [ 3170.412244] sget_fc+0x110/0x860 [ 3170.412654] ? set_anon_super+0xc0/0xc0 [ 3170.413108] ? pseudo_fs_get_tree+0x20/0x20 [ 3170.413626] get_tree_nodev+0x24/0x1d0 [ 3170.414071] vfs_get_tree+0x8e/0x300 [ 3170.414546] path_mount+0x14ab/0x2200 [ 3170.414987] ? strncpy_from_user+0x9e/0x470 [ 3170.415472] ? finish_automount+0xa90/0xa90 [ 3170.415962] ? getname_flags.part.0+0x1dd/0x4f0 [ 3170.416491] __x64_sys_mount+0x282/0x300 [ 3170.416947] ? copy_mnt_ns+0xa00/0xa00 [ 3170.417388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3170.417985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3170.418572] do_syscall_64+0x33/0x40 [ 3170.418992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3170.419603] RIP: 0033:0x7fe94c52fb19 [ 3170.420025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3170.422226] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3170.423091] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3170.423595] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=28037 comm=syz-executor.1 [ 3170.423890] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3170.423908] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3170.428050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3170.428846] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:04:33 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x110, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="948126eacc69412714e90100000048c269bceff0445f8dc770550151a8"], 0x14}}, 0x0) 16:04:33 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x4f48, 0x0, 0x0, 0x80000000}) 16:04:33 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xff87, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:04:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:04:33 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x2000000, 0x80000000}) 16:04:33 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5747, 0x0, 0x0, 0x80000000}) 16:04:33 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x500, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:04:33 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2e, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:33 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 45) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc7e1959ac239d6d1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) [ 3170.930254] FAULT_INJECTION: forcing a failure. [ 3170.930254] name failslab, interval 1, probability 0, space 0, times 0 [ 3170.931515] CPU: 0 PID: 28071 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3170.932255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3170.933139] Call Trace: [ 3170.933434] dump_stack+0x107/0x167 [ 3170.933828] should_fail.cold+0x5/0xa [ 3170.934247] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3170.934792] should_failslab+0x5/0x20 [ 3170.935204] kmem_cache_alloc_trace+0x55/0x320 [ 3170.935692] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3170.936236] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3170.936763] __list_lru_init+0x44d/0x890 [ 3170.937204] alloc_super+0x8b8/0xa90 [ 3170.937605] sget_fc+0x110/0x860 [ 3170.937969] ? set_anon_super+0xc0/0xc0 [ 3170.938404] ? pseudo_fs_get_tree+0x20/0x20 [ 3170.938863] get_tree_nodev+0x24/0x1d0 [ 3170.939285] vfs_get_tree+0x8e/0x300 [ 3170.939685] path_mount+0x14ab/0x2200 [ 3170.940104] ? strncpy_from_user+0x9e/0x470 [ 3170.940566] ? finish_automount+0xa90/0xa90 [ 3170.941031] ? getname_flags.part.0+0x1dd/0x4f0 [ 3170.941534] __x64_sys_mount+0x282/0x300 [ 3170.941969] ? copy_mnt_ns+0xa00/0xa00 [ 3170.942401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3170.942965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3170.943516] do_syscall_64+0x33/0x40 [ 3170.943917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3170.944465] RIP: 0033:0x7fe94c52fb19 [ 3170.944874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3170.946990] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3170.947822] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 3170.948645] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3170.949460] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3170.950284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3170.951100] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 16:04:33 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x485f, 0x0, 0x0, 0x80000000}) 16:04:33 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1fc, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:33 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xff8f, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:04:33 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:04:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x800, 0x3, 0xffffffff, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 16:04:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000580), 0x2f, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xfc1}}, './file0\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000000)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000100)) sendfile(r1, r0, 0x0, 0xf7) 16:04:33 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 46) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:33 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x277, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:33 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5748, 0x0, 0x0, 0x80000000}) 16:04:33 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xff97, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 3171.337013] FAULT_INJECTION: forcing a failure. [ 3171.337013] name failslab, interval 1, probability 0, space 0, times 0 [ 3171.340084] CPU: 1 PID: 28107 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3171.341839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3171.343963] Call Trace: [ 3171.344645] dump_stack+0x107/0x167 [ 3171.345589] should_fail.cold+0x5/0xa [ 3171.346588] ? create_object.isra.0+0x3a/0xa30 [ 3171.347770] should_failslab+0x5/0x20 [ 3171.348768] kmem_cache_alloc+0x5b/0x310 [ 3171.349839] ? mark_held_locks+0x9e/0xe0 [ 3171.350899] create_object.isra.0+0x3a/0xa30 [ 3171.352040] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3171.353370] kmem_cache_alloc_trace+0x151/0x320 [ 3171.354603] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3171.355656] __list_lru_init+0x44d/0x890 [ 3171.356723] alloc_super+0x8b8/0xa90 [ 3171.357689] sget_fc+0x110/0x860 [ 3171.358562] ? set_anon_super+0xc0/0xc0 [ 3171.359586] ? pseudo_fs_get_tree+0x20/0x20 [ 3171.360702] get_tree_nodev+0x24/0x1d0 [ 3171.361718] vfs_get_tree+0x8e/0x300 [ 3171.362696] path_mount+0x14ab/0x2200 [ 3171.363705] ? strncpy_from_user+0x9e/0x470 [ 3171.364831] ? finish_automount+0xa90/0xa90 [ 3171.365752] ? getname_flags.part.0+0x1dd/0x4f0 [ 3171.366981] __x64_sys_mount+0x282/0x300 [ 3171.368032] ? copy_mnt_ns+0xa00/0xa00 [ 3171.369055] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3171.370412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3171.371750] do_syscall_64+0x33/0x40 [ 3171.372732] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3171.374051] RIP: 0033:0x7fe94c52fb19 [ 3171.375027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3171.379901] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3171.381850] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3171.383931] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3171.385774] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3171.387615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3171.389459] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:04:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[&(0x7f0000000140)=']\x00', 0x0, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', 0x0, &(0x7f00000000c0)='}&+&\x00'], &(0x7f00000002c0)=[0x0, &(0x7f0000000100)='\x00', &(0x7f0000000240)=']\x00'], 0x1000) ftruncate(r0, 0x1000003) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004850) openat(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x4a) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xb2, 0xd34, 0x1, 0x0, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000440)=""/82) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 16:04:50 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x3000000, 0x80000000}) 16:04:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:04:50 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x300, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:50 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xff9f, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:04:50 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x57ff, 0x0, 0x0, 0x80000000}) 16:04:50 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 47) fallocate(r0, 0x0, 0x0, 0x8000) 16:04:50 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x600, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 3187.795533] FAULT_INJECTION: forcing a failure. [ 3187.795533] name failslab, interval 1, probability 0, space 0, times 0 [ 3187.798298] CPU: 1 PID: 28130 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3187.799849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3187.801667] Call Trace: [ 3187.802250] dump_stack+0x107/0x167 [ 3187.803058] should_fail.cold+0x5/0xa [ 3187.803890] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3187.804989] should_failslab+0x5/0x20 [ 3187.805817] kmem_cache_alloc_trace+0x55/0x320 [ 3187.806821] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3187.807930] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3187.808999] __list_lru_init+0x44d/0x890 [ 3187.809889] alloc_super+0x8b8/0xa90 [ 3187.810709] sget_fc+0x110/0x860 [ 3187.811450] ? set_anon_super+0xc0/0xc0 [ 3187.812319] ? pseudo_fs_get_tree+0x20/0x20 [ 3187.813258] get_tree_nodev+0x24/0x1d0 [ 3187.814105] vfs_get_tree+0x8e/0x300 [ 3187.814924] path_mount+0x14ab/0x2200 [ 3187.815756] ? strncpy_from_user+0x9e/0x470 [ 3187.816698] ? finish_automount+0xa90/0xa90 [ 3187.817637] ? getname_flags.part.0+0x1dd/0x4f0 [ 3187.818670] __x64_sys_mount+0x282/0x300 [ 3187.819549] ? copy_mnt_ns+0xa00/0xa00 [ 3187.820400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3187.821542] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3187.822674] do_syscall_64+0x33/0x40 [ 3187.823477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3187.824600] RIP: 0033:0x7fe94c52fb19 [ 3187.825402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3187.829372] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3187.831015] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3187.832551] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3187.834084] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3187.835628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3187.837157] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:04:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c810}, 0x8010) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00000f4b10f0000000a5df4e804a26f82c4123970afe14c224e6af26e42b9966d677dd633d5bd8f52ae3fa999f81aafe652706b81d0fe852dd07a3703cc6c891905183166734ca6786ad6e5314d907ae7fdcc3195de33b9a6be4f1dcdfb5aae1d5e545aa67f0c4bd7e800d8601387637060946144823eccbbac2c1e687c78ade61e2f603de16f25c6f5b6b550adfe4cf39424a85f501aa4a44bd6abae6352cfa7da73d6878889012863f17f572d994ee5f2c2bd9b57134ee409546aec574782432e6f4341bb400b13c41f9859dcbf44cb13c242dd24b1fba055130d522e1948faf79f0de9c306dd850e10625dcf027e5"], 0x14}}, 0x0) 16:05:07 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1001, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:05:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[&(0x7f0000000140)=']\x00', 0x0, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', 0x0, &(0x7f00000000c0)='}&+&\x00'], &(0x7f00000002c0)=[0x0, &(0x7f0000000100)='\x00', &(0x7f0000000240)=']\x00'], 0x1000) ftruncate(r0, 0x1000003) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004850) openat(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x4a) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xb2, 0xd34, 0x1, 0x0, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000440)=""/82) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 16:05:07 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x4000000, 0x80000000}) 16:05:07 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xffa7, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:05:07 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x700, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:05:07 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5f47, 0x0, 0x0, 0x80000000}) 16:05:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {0x2a}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}]}, 0x1c}}, 0x4014000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc3bd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9aa2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa320}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20000890) 16:05:07 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 48) fallocate(r0, 0x0, 0x0, 0x8000) [ 3205.296798] FAULT_INJECTION: forcing a failure. [ 3205.296798] name failslab, interval 1, probability 0, space 0, times 0 [ 3205.299286] CPU: 0 PID: 28170 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3205.300734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3205.302709] Call Trace: [ 3205.303280] dump_stack+0x107/0x167 [ 3205.304061] should_fail.cold+0x5/0xa [ 3205.304859] ? create_object.isra.0+0x3a/0xa30 [ 3205.305815] should_failslab+0x5/0x20 [ 3205.306609] kmem_cache_alloc+0x5b/0x310 [ 3205.307471] ? mark_held_locks+0x9e/0xe0 [ 3205.308326] create_object.isra.0+0x3a/0xa30 [ 3205.309248] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3205.310308] kmem_cache_alloc_trace+0x151/0x320 [ 3205.311296] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3205.312334] __list_lru_init+0x44d/0x890 [ 3205.313199] alloc_super+0x8b8/0xa90 [ 3205.313994] sget_fc+0x110/0x860 [ 3205.314709] ? set_anon_super+0xc0/0xc0 [ 3205.315542] ? pseudo_fs_get_tree+0x20/0x20 [ 3205.316442] get_tree_nodev+0x24/0x1d0 [ 3205.317253] vfs_get_tree+0x8e/0x300 [ 3205.318031] path_mount+0x14ab/0x2200 [ 3205.318838] ? strncpy_from_user+0x9e/0x470 [ 3205.319750] ? finish_automount+0xa90/0xa90 [ 3205.320654] ? getname_flags.part.0+0x1dd/0x4f0 [ 3205.321637] __x64_sys_mount+0x282/0x300 [ 3205.322488] ? copy_mnt_ns+0xa00/0xa00 [ 3205.323332] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3205.324434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3205.325510] do_syscall_64+0x33/0x40 [ 3205.326296] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3205.327362] RIP: 0033:0x7fe94c52fb19 [ 3205.328135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3205.331974] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3205.333557] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3205.335050] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3205.336543] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3205.338029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 16:05:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x801) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x1, 0x20, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x153094e49edcc597}, 0x0) [ 3205.339526] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:05:08 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1020, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:05:08 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x5000000, 0x80000000}) 16:05:08 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5f48, 0x0, 0x0, 0x80000000}) 16:05:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x20, 0x70bd28, 0x1, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) 16:05:08 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x900, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) [ 3210.283681] Bluetooth: hci4: command 0x0409 tx timeout [ 3212.331694] Bluetooth: hci4: command 0x041b tx timeout [ 3214.378715] Bluetooth: hci4: command 0x040f tx timeout [ 3215.514535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3215.516811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3215.520127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3215.543985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3215.546111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3215.549143] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3216.426665] Bluetooth: hci4: command 0x0419 tx timeout [ 3218.794756] Bluetooth: hci2: command 0x0406 tx timeout 16:05:37 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 49) fallocate(r0, 0x0, 0x0, 0x8000) 16:05:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7ca6, &(0x7f0000000040)={0x0, 0x138f, 0x8, 0x3, 0x149, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000a4b000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)) syz_io_uring_setup(0x6897, &(0x7f0000000340)={0x0, 0x86b5, 0x0, 0x3, 0x23a}, &(0x7f0000603000/0x3000)=nil, &(0x7f00004c1000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x80010, r1, 0x10000000) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) connect$unix(r4, &(0x7f0000000280)=@abs, 0x6e) syz_io_uring_submit(r8, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_io_uring_complete(r6) dup2(r0, r9) 16:05:37 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xa00, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:05:37 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xffaf, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:05:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:05:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100c000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x0, 0x70bd28, 0x6, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:05:37 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x6000000, 0x80000000}) 16:05:37 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5fff, 0x0, 0x0, 0x80000000}) [ 3234.832854] FAULT_INJECTION: forcing a failure. [ 3234.832854] name failslab, interval 1, probability 0, space 0, times 0 [ 3234.834258] CPU: 0 PID: 28683 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3234.835108] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3234.836110] Call Trace: [ 3234.836439] dump_stack+0x107/0x167 [ 3234.836879] should_fail.cold+0x5/0xa [ 3234.837345] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3234.837953] should_failslab+0x5/0x20 [ 3234.838421] kmem_cache_alloc_trace+0x55/0x320 [ 3234.838972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3234.839604] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3234.840198] __list_lru_init+0x44d/0x890 [ 3234.840693] alloc_super+0x8b8/0xa90 [ 3234.841146] sget_fc+0x110/0x860 [ 3234.841558] ? set_anon_super+0xc0/0xc0 [ 3234.842042] ? pseudo_fs_get_tree+0x20/0x20 [ 3234.842563] get_tree_nodev+0x24/0x1d0 [ 3234.843045] vfs_get_tree+0x8e/0x300 [ 3234.843495] path_mount+0x14ab/0x2200 [ 3234.843963] ? strncpy_from_user+0x9e/0x470 [ 3234.844488] ? finish_automount+0xa90/0xa90 [ 3234.845012] ? getname_flags.part.0+0x1dd/0x4f0 [ 3234.845582] __x64_sys_mount+0x282/0x300 [ 3234.846073] ? copy_mnt_ns+0xa00/0xa00 [ 3234.846552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3234.847195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3234.847823] do_syscall_64+0x33/0x40 [ 3234.848271] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3234.848889] RIP: 0033:0x7fe94c52fb19 [ 3234.849342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3234.851563] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3234.852477] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3234.853331] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3234.854183] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3234.855059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3234.855948] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:05:37 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2010, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:05:37 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xffb7, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:05:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xc8, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11c85f88}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29d6a86a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x286f53cb}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2da68d59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e128db}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x300978ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39dc4899}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x581782e5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x102d6afb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ac8397d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46890009}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x2004c000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:05:37 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 50) fallocate(r0, 0x0, 0x0, 0x8000) 16:05:37 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xb00, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:05:37 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6400, 0x0, 0x0, 0x80000000}) 16:05:37 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x5fff, 0x0, 0x0, 0x80000000}) [ 3235.270031] FAULT_INJECTION: forcing a failure. [ 3235.270031] name failslab, interval 1, probability 0, space 0, times 0 [ 3235.271355] CPU: 0 PID: 28712 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3235.272138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3235.273071] Call Trace: [ 3235.273375] dump_stack+0x107/0x167 [ 3235.273788] should_fail.cold+0x5/0xa [ 3235.274225] ? create_object.isra.0+0x3a/0xa30 [ 3235.274743] should_failslab+0x5/0x20 [ 3235.275195] kmem_cache_alloc+0x5b/0x310 [ 3235.275657] ? mark_held_locks+0x9e/0xe0 [ 3235.276119] create_object.isra.0+0x3a/0xa30 [ 3235.276617] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3235.277201] kmem_cache_alloc_trace+0x151/0x320 [ 3235.277731] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3235.278285] __list_lru_init+0x44d/0x890 [ 3235.278755] alloc_super+0x8b8/0xa90 [ 3235.279304] sget_fc+0x110/0x860 [ 3235.279688] ? set_anon_super+0xc0/0xc0 [ 3235.280158] ? pseudo_fs_get_tree+0x20/0x20 [ 3235.280643] get_tree_nodev+0x24/0x1d0 [ 3235.281084] vfs_get_tree+0x8e/0x300 [ 3235.281509] path_mount+0x14ab/0x2200 [ 3235.281948] ? strncpy_from_user+0x9e/0x470 [ 3235.282434] ? finish_automount+0xa90/0xa90 [ 3235.282925] ? getname_flags.part.0+0x1dd/0x4f0 [ 3235.283466] __x64_sys_mount+0x282/0x300 [ 3235.283930] ? copy_mnt_ns+0xa00/0xa00 [ 3235.284369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3235.284969] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3235.285553] do_syscall_64+0x33/0x40 [ 3235.285978] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3235.286578] RIP: 0033:0x7fe94c52fb19 [ 3235.287002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3235.289096] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3235.289954] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3235.290758] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3235.291575] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3235.292380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3235.293189] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:05:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x8000) 16:05:38 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6747, 0x0, 0x0, 0x80000000}) 16:05:50 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2e00, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:05:50 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xffbf, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 3248.144218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 16:05:50 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6748, 0x0, 0x0, 0x80000000}) 16:05:50 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc00, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:05:50 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0xc000000, 0x80000000}) 16:05:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x4, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008081}, 0x4040800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, r2, 0x128, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040840}, 0x40) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000b167134c2a000000bc2f7bbf54fd50e00ca6f16ae98fabb9477159f37190ddc40fa5f6f5c9470c2403c9f7182eec0fe8510312d08e4db446760da926f0114d213ede4fe510a05332c4f6820835360c72a98857577aef5d8062a409aa9ec4c875f8d9558094"], 0x14}}, 0x0) 16:05:50 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 51) fallocate(r0, 0x0, 0x0, 0x8000) 16:05:50 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5, 0x8005, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3ff, 0xfffffffffffffffe}, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001780)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@empty, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x78}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc1}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0x11, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x10000000}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x440982, 0x10) dup3(r1, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x8, 0x3, 0x80, 0xf0, 0x0, 0x7ffe, 0x10001, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x62f, 0x7}, 0x2, 0xffffffffffff8001, 0xffffff74, 0x0, 0xea0, 0x8, 0x6, 0x0, 0x5, 0x0, 0x80000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) 16:05:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) [ 3248.224717] FAULT_INJECTION: forcing a failure. [ 3248.224717] name failslab, interval 1, probability 0, space 0, times 0 [ 3248.226132] CPU: 0 PID: 28754 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3248.227076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3248.228099] Call Trace: [ 3248.228428] dump_stack+0x107/0x167 [ 3248.228878] should_fail.cold+0x5/0xa [ 3248.229345] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3248.229962] should_failslab+0x5/0x20 [ 3248.230426] kmem_cache_alloc_trace+0x55/0x320 [ 3248.230978] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3248.231608] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3248.232213] __list_lru_init+0x44d/0x890 [ 3248.232712] alloc_super+0x8b8/0xa90 [ 3248.233170] sget_fc+0x110/0x860 [ 3248.233584] ? set_anon_super+0xc0/0xc0 [ 3248.234072] ? pseudo_fs_get_tree+0x20/0x20 [ 3248.234593] get_tree_nodev+0x24/0x1d0 [ 3248.235069] vfs_get_tree+0x8e/0x300 [ 3248.235530] path_mount+0x14ab/0x2200 [ 3248.235996] ? strncpy_from_user+0x9e/0x470 [ 3248.236519] ? finish_automount+0xa90/0xa90 [ 3248.237045] ? getname_flags.part.0+0x1dd/0x4f0 [ 3248.237616] __x64_sys_mount+0x282/0x300 [ 3248.238111] ? copy_mnt_ns+0xa00/0xa00 [ 3248.238590] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3248.239236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3248.239864] do_syscall_64+0x33/0x40 [ 3248.240319] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3248.240942] RIP: 0033:0x7fe94c52fb19 [ 3248.241391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3248.243616] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3248.244542] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3248.245406] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3248.246273] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3248.247142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3248.248006] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:06:02 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x67ff, 0x0, 0x0, 0x80000000}) 16:06:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0xc, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a9a6e6e9fe897e130a29abd7", &(0x7f0000000240)=""/35, 0x0, 0x0, 0x0, 0x0}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x88009}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 16:06:02 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xc01, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:06:02 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 52) fallocate(r0, 0x0, 0x0, 0x8000) 16:06:02 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xffb7, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:06:02 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x3f00, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:06:02 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xffc7, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:06:02 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x10000000, 0x80000000}) [ 3260.005006] FAULT_INJECTION: forcing a failure. [ 3260.005006] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.007916] CPU: 1 PID: 28780 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3260.009672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3260.011807] Call Trace: [ 3260.012489] dump_stack+0x107/0x167 [ 3260.013424] should_fail.cold+0x5/0xa [ 3260.014405] ? create_object.isra.0+0x3a/0xa30 [ 3260.015732] should_failslab+0x5/0x20 [ 3260.016663] kmem_cache_alloc+0x5b/0x310 [ 3260.017589] ? mark_held_locks+0x9e/0xe0 [ 3260.018504] create_object.isra.0+0x3a/0xa30 [ 3260.019505] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3260.020675] kmem_cache_alloc_trace+0x151/0x320 [ 3260.021739] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3260.022853] __list_lru_init+0x44d/0x890 [ 3260.023787] alloc_super+0x8b8/0xa90 [ 3260.024631] sget_fc+0x110/0x860 [ 3260.025396] ? set_anon_super+0xc0/0xc0 [ 3260.026300] ? pseudo_fs_get_tree+0x20/0x20 [ 3260.027284] get_tree_nodev+0x24/0x1d0 [ 3260.028166] vfs_get_tree+0x8e/0x300 [ 3260.029013] path_mount+0x14ab/0x2200 [ 3260.029878] ? strncpy_from_user+0x9e/0x470 [ 3260.030844] ? finish_automount+0xa90/0xa90 [ 3260.031818] ? getname_flags.part.0+0x1dd/0x4f0 [ 3260.032873] __x64_sys_mount+0x282/0x300 [ 3260.033782] ? copy_mnt_ns+0xa00/0xa00 [ 3260.034664] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3260.035849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3260.037007] do_syscall_64+0x33/0x40 [ 3260.037837] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3260.038993] RIP: 0033:0x7fe94c52fb19 [ 3260.039844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3260.044492] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3260.046194] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 3260.047962] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3260.049832] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3260.051450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3260.053055] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 16:06:02 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6748, 0x0, 0x0, 0x80000000}) 16:06:02 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 53) fallocate(r0, 0x0, 0x0, 0x8000) 16:06:03 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xd00, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:06:03 executing program 4: add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000340)='logon\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x42) 16:06:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:06:03 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:06:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x12000000, 0x80000000}) [ 3260.404693] FAULT_INJECTION: forcing a failure. [ 3260.404693] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.407387] CPU: 1 PID: 28814 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3260.408938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3260.410790] Call Trace: [ 3260.411394] dump_stack+0x107/0x167 [ 3260.412216] should_fail.cold+0x5/0xa [ 3260.413071] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3260.414222] should_failslab+0x5/0x20 [ 3260.415086] kmem_cache_alloc_trace+0x55/0x320 [ 3260.416400] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3260.417764] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3260.419147] __list_lru_init+0x44d/0x890 [ 3260.420331] alloc_super+0x8b8/0xa90 [ 3260.421373] sget_fc+0x110/0x860 [ 3260.422293] ? set_anon_super+0xc0/0xc0 [ 3260.423375] ? pseudo_fs_get_tree+0x20/0x20 [ 3260.424562] get_tree_nodev+0x24/0x1d0 [ 3260.425442] vfs_get_tree+0x8e/0x300 [ 3260.426286] path_mount+0x14ab/0x2200 [ 3260.427142] ? strncpy_from_user+0x9e/0x470 [ 3260.428130] ? finish_automount+0xa90/0xa90 [ 3260.429101] ? getname_flags.part.0+0x1dd/0x4f0 [ 3260.430151] __x64_sys_mount+0x282/0x300 [ 3260.431065] ? copy_mnt_ns+0xa00/0xa00 [ 3260.431961] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3260.433136] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3260.434306] do_syscall_64+0x33/0x40 [ 3260.435138] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3260.436286] RIP: 0033:0x7fe94c52fb19 [ 3260.437125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3260.441241] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3260.442941] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3260.444536] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3260.446122] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3260.447719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3260.449313] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:06:03 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x6f47, 0x0, 0x0, 0x80000000}) 16:06:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x4008000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008000}, 0x85) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100001b0000000000002a150000"], 0x14}}, 0x0) 16:06:03 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 54) fallocate(r0, 0x0, 0x0, 0x8000) 16:06:03 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xe00, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:06:03 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xffcf, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) [ 3260.728879] FAULT_INJECTION: forcing a failure. [ 3260.728879] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.730290] CPU: 0 PID: 28838 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3260.731082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3260.732029] Call Trace: [ 3260.732335] dump_stack+0x107/0x167 [ 3260.732797] should_fail.cold+0x5/0xa [ 3260.733451] ? create_object.isra.0+0x3a/0xa30 [ 3260.733968] should_failslab+0x5/0x20 [ 3260.734404] kmem_cache_alloc+0x5b/0x310 [ 3260.734867] ? mark_held_locks+0x9e/0xe0 [ 3260.735339] create_object.isra.0+0x3a/0xa30 [ 3260.735844] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3260.736424] kmem_cache_alloc_trace+0x151/0x320 [ 3260.736955] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3260.737514] __list_lru_init+0x44d/0x890 [ 3260.737985] alloc_super+0x8b8/0xa90 [ 3260.738409] sget_fc+0x110/0x860 [ 3260.738796] ? set_anon_super+0xc0/0xc0 [ 3260.739249] ? pseudo_fs_get_tree+0x20/0x20 [ 3260.739748] get_tree_nodev+0x24/0x1d0 [ 3260.740196] vfs_get_tree+0x8e/0x300 [ 3260.740619] path_mount+0x14ab/0x2200 [ 3260.741052] ? strncpy_from_user+0x9e/0x470 [ 3260.741539] ? finish_automount+0xa90/0xa90 [ 3260.742029] ? getname_flags.part.0+0x1dd/0x4f0 [ 3260.742575] __x64_sys_mount+0x282/0x300 [ 3260.743037] ? copy_mnt_ns+0xa00/0xa00 [ 3260.743495] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3260.744089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3260.744680] do_syscall_64+0x33/0x40 [ 3260.745111] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3260.745691] RIP: 0033:0x7fe94c52fb19 [ 3260.746119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3260.748214] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3260.749088] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3260.749895] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3260.750707] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3260.751534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3260.752342] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 16:06:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100"/14], 0x14}}, 0x0) 16:06:03 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 55) fallocate(r0, 0x0, 0x0, 0x8000) 16:06:03 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xffd7, 0x0, 0x0, 0x80000000}) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x0) 16:06:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="0900000075000000000000000000204edec61648ebe235740a3e884a3f22dc68be1e4d8a82857566dcc67d776f76ef7f478c5ba5656e587e4b9f35eadfef853b0099316dc732da78c425dd25fc8fbd1705098b38cd99b415bbbcc128abd1bdaace674e1643ead31854c38faf37d0065e8edab18e951c7f85aa04fad1941bacb430160db64aee6f2c5dcd632f2972f4ba31b56edcc963b7a0f8a38a431ef896a92c2d6149ccbe135bda812670d1c143", @ANYRES16=r1, @ANYBLOB="010000ed8c00000000002a000000"], 0x14}}, 0x0) [ 3260.977539] FAULT_INJECTION: forcing a failure. [ 3260.977539] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.980200] CPU: 1 PID: 28848 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3260.981766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3260.983637] Call Trace: [ 3260.984235] dump_stack+0x107/0x167 [ 3260.985073] should_fail.cold+0x5/0xa [ 3260.985937] ? __memcg_init_list_lru_node+0x7f/0x1e0 [ 3260.987072] should_failslab+0x5/0x20 [ 3260.987935] kmem_cache_alloc_trace+0x55/0x320 [ 3260.988967] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3260.990117] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3260.991220] __list_lru_init+0x44d/0x890 [ 3260.992153] alloc_super+0x8b8/0xa90 [ 3260.992992] sget_fc+0x110/0x860 [ 3260.993761] ? set_anon_super+0xc0/0xc0 [ 3260.994667] ? pseudo_fs_get_tree+0x20/0x20 [ 3260.995644] get_tree_nodev+0x24/0x1d0 [ 3260.996520] vfs_get_tree+0x8e/0x300 [ 3260.997353] path_mount+0x14ab/0x2200 [ 3260.998219] ? strncpy_from_user+0x9e/0x470 [ 3260.999184] ? finish_automount+0xa90/0xa90 [ 3261.000160] ? getname_flags.part.0+0x1dd/0x4f0 [ 3261.001214] __x64_sys_mount+0x282/0x300 [ 3261.002122] ? copy_mnt_ns+0xa00/0xa00 [ 3261.003015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3261.004198] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3261.005364] do_syscall_64+0x33/0x40 [ 3261.006204] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3261.007365] RIP: 0033:0x7fe94c52fb19 [ 3261.008200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3261.012332] RSP: 002b:00007fe949aa5188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3261.014055] RAX: ffffffffffffffda RBX: 00007fe94c642f60 RCX: 00007fe94c52fb19 [ 3261.015662] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3261.017269] RBP: 00007fe949aa51d0 R08: 0000000000000000 R09: 0000000000000000 [ 3261.018864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3261.020488] R13: 00007fff9b663eef R14: 00007fe949aa5300 R15: 0000000000022000 16:06:03 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x7702, 0x0) fallocate(r0, 0x0, 0x0, 0x8000) 16:06:03 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0xf00, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) 16:06:03 executing program 4: r0 = request_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000004640)='iso9660\x00', 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000004680)={r0, 0xc5, 0x6}, &(0x7f00000046c0)={'enc=', 'raw', ' hash=', {'blake2s-128-x86\x00'}}, &(0x7f0000004740)="9a6ecb0e9e8fb585d2469cdb76cfac9183747955c593ccfc4ef1bd01dada44d3150db3b3285ddb7af848881ca31eccb8b77a2580d3bd00082fed132acb04377f3b9c2b5a482d577c244c0105c812ba8c1784f2bd8e781472cd0dddf61ecaeed187827a2eca33a8f487f15d237ff126432c5bc0f147adfc362a018bf9288f5b37e58d57412f7bb0e52c8c3bd13324ed862d4db8b6628976655ab02bb218c802ddf3d7d54c425ca316f0d6a33e8de066038aab76e64c69a41f62a269b72408a6dca2b758fb59", &(0x7f0000004840)=""/6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x43f8, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x610, 0x5, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x4c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x17c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x91}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5a6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x90}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd0}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xca}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x165}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4109eb46}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb9c3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1a4, 0x5, 0x0, 0x1, [{0x184, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x45}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5a}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0xd00, 0x5, 0x0, 0x1, [{0x9cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xaf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x42c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x64}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x68}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xda2a71aa65b16ed2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x689}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8de}]}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xf8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x694}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4d}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x235}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xe4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0xa4c, 0x5, 0x0, 0x1, [{0x368, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x359}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x320, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3bdd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x6a4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x250, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x164, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x639b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4c2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xb67e62eb042cd4b1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x130, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5f00}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x82}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0xc70, 0x5, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}]}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xba}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9c0}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x27c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x613}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x169}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x60b}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1dc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x54}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x327}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x335}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf0}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}]}]}, {0x38c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x37c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2584}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x17c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0xc68, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ec}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ba}]}]}, {0x168, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x18, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x83c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x706}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x318, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3106}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x92ee}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7529}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x158a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x31}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd75}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x82}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x6dc, 0x5, 0x0, 0x1, [{0x3d0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x324, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5f8d1148476c45db}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x262}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x49ef}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x16c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x168, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x78}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x49}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xafb3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0x528, 0x5, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x490, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x190, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x158, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa8ae}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}]}]}]}]}, 0x43f8}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b8000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011700)) 16:06:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x80}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x55}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 16:06:03 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x80000000}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 56) fallocate(r0, 0x0, 0x0, 0x8000) [ 3261.273365] FAULT_INJECTION: forcing a failure. [ 3261.273365] name failslab, interval 1, probability 0, space 0, times 0 [ 3261.274913] CPU: 0 PID: 28872 Comm: syz-executor.7 Not tainted 5.10.248 #1 [ 3261.275839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3261.276775] Call Trace: [ 3261.277079] dump_stack+0x107/0x167 [ 3261.277494] should_fail.cold+0x5/0xa [ 3261.277927] ? create_object.isra.0+0x3a/0xa30 [ 3261.278445] should_failslab+0x5/0x20 [ 3261.278874] kmem_cache_alloc+0x5b/0x310 [ 3261.279343] ? mark_held_locks+0x9e/0xe0 [ 3261.279803] create_object.isra.0+0x3a/0xa30 [ 3261.280300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3261.280876] kmem_cache_alloc_trace+0x151/0x320 [ 3261.281408] __memcg_init_list_lru_node+0x7f/0x1e0 [ 3261.281964] __list_lru_init+0x44d/0x890 [ 3261.282427] alloc_super+0x8b8/0xa90 [ 3261.282850] sget_fc+0x110/0x860 [ 3261.283234] ? set_anon_super+0xc0/0xc0 [ 3261.283694] ? pseudo_fs_get_tree+0x20/0x20 [ 3261.284178] get_tree_nodev+0x24/0x1d0 [ 3261.284620] vfs_get_tree+0x8e/0x300 [ 3261.285039] path_mount+0x14ab/0x2200 [ 3261.285472] ? strncpy_from_user+0x9e/0x470 [ 3261.285956] ? finish_automount+0xa90/0xa90 [ 3261.286442] ? getname_flags.part.0+0x1dd/0x4f0 [ 3261.286973] __x64_sys_mount+0x282/0x300 [ 3261.287440] ? copy_mnt_ns+0xa00/0xa00 [ 3261.287885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3261.288477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3261.289060] do_syscall_64+0x33/0x40 [ 3261.289478] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3261.290057] RIP: 0033:0x7fe94c52fb19 [ 3261.290477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3261.292559] RSP: 002b:00007fe949a84188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3261.293424] RAX: ffffffffffffffda RBX: 00007fe94c643020 RCX: 00007fe94c52fb19 [ 3261.294233] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 3261.295037] RBP: 00007fe949a841d0 R08: 0000000000000000 R09: 0000000000000000 [ 3261.295848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3261.296654] R13: 00007fff9b663eef R14: 00007fe949a84300 R15: 0000000000022000 unexpected fault address 0x7f9d1ed94000 fatal error: fault [signal SIGBUS: bus error code=0x2 addr=0x7f9d1ed94000 pc=0x5cde47] goroutine 28 [running]: runtime.throw(0x991ed0, 0x5) /src/goroot/src/runtime/panic.go:1116 +0x72 fp=0xc007381128 sp=0xc0073810f8 pc=0x433a72 runtime.sigpanic() /src/goroot/src/runtime/signal_unix.go:692 +0x443 fp=0xc007381158 sp=0xc007381128 pc=0x44a3d3 encoding/binary.littleEndian.PutUint64(...) /src/goroot/src/encoding/binary/binary.go:91 github.com/google/syzkaller/prog.(*execContext).write(0xc007383a40, 0x20001e38) /src/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:248 +0x37 fp=0xc007381178 sp=0xc007381158 pc=0x5cde47 github.com/google/syzkaller/prog.(*execContext).writeCopyin.func1(0xea89c0, 0xc006289100, 0xc0049e3e00) /src/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:165 +0x18c fp=0xc0073811e8 sp=0xc007381178 pc=0x5f2d3c github.com/google/syzkaller/prog.foreachArgImpl(0xea89c0, 0xc006289100, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x119 fp=0xc007381388 sp=0xc0073811e8 pc=0x5baa49 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00465a3c0, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007381528 sp=0xc007381388 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8b00, 0xc00465a3e0, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:159 +0x5dc fp=0xc0073816c8 sp=0xc007381528 pc=0x5baf0c github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00465a440, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007381868 sp=0xc0073816c8 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00465a460, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007381a08 sp=0xc007381868 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8b00, 0xc00465a480, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:159 +0x5dc fp=0xc007381ba8 sp=0xc007381a08 pc=0x5baf0c github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00465ac80, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007381d48 sp=0xc007381ba8 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00465aca0, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007381ee8 sp=0xc007381d48 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8b00, 0xc00465acc0, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:159 +0x5dc fp=0xc007382088 sp=0xc007381ee8 pc=0x5baf0c github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00465b660, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007382228 sp=0xc007382088 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00465b680, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc0073823c8 sp=0xc007382228 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8b00, 0xc00465b6a0, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:159 +0x5dc fp=0xc007382568 sp=0xc0073823c8 pc=0x5baf0c github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc007142d60, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007382708 sp=0xc007382568 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc007142d80, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc0073828a8 sp=0xc007382708 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc007143140, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007382a48 sp=0xc0073828a8 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc007143160, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007382be8 sp=0xc007382a48 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8b00, 0xc007143180, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:159 +0x5dc fp=0xc007382d88 sp=0xc007382be8 pc=0x5baf0c github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00443c300, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007382f28 sp=0xc007382d88 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00443c320, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc0073830c8 sp=0xc007382f28 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc001143ad0, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x656 fp=0xc007383268 sp=0xc0073830c8 pc=0x5baf86 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00443c600, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007383408 sp=0xc007383268 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc001143b00, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x656 fp=0xc0073835a8 sp=0xc007383408 pc=0x5baf86 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00443c640, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 fp=0xc007383748 sp=0xc0073835a8 pc=0x5babd9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc001143b30, 0xc0049e3e00, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x656 fp=0xc0073838e8 sp=0xc007383748 pc=0x5baf86 github.com/google/syzkaller/prog.ForeachArg(0xc0051f9ac0, 0xc007383948) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd fp=0xc007383938 sp=0xc0073838e8 pc=0x5ba89d github.com/google/syzkaller/prog.(*execContext).writeCopyin(0xc007383a40, 0xc0051f9ac0) /src/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:147 +0x53 fp=0xc007383968 sp=0xc007383938 pc=0x5cd5f3 github.com/google/syzkaller/prog.(*execContext).serializeCall(0xc007383a40, 0xc0051f9ac0) /src/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:88 +0x39 fp=0xc0073839d8 sp=0xc007383968 pc=0x5cd269 github.com/google/syzkaller/prog.(*Prog).SerializeForExec(0xc0051f9a00, 0x7f9d1ed70000, 0x400000, 0x400000, 0xc004fcc000, 0x10, 0xc0012cc430) /src/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:76 +0x17e fp=0xc007383be8 sp=0xc0073839d8 pc=0x5cd12e github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc0035e8120, 0xc000014228, 0xc0051f9a00, 0x10, 0xc001452d70, 0x8, 0x18, 0x2, 0xc003e844c0, 0xc001285ec0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:255 +0x62 fp=0xc007383cd0 sp=0xc007383be8 pc=0x85fd42 main.(*Proc).executeRaw(0xc005248540, 0xc000014228, 0xc0051f9a00, 0x1, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 fp=0xc007383dd8 sp=0xc007383cd0 pc=0x8a2df4 main.(*Proc).execute(0xc005248540, 0xc000014228, 0xc0051f9a00, 0x0, 0x1, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a fp=0xc007383f08 sp=0xc007383dd8 pc=0x8a270a main.(*Proc).loop(0xc005248540) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:97 +0x4be fp=0xc007383fd8 sp=0xc007383f08 pc=0x8a154e runtime.goexit() /src/goroot/src/runtime/asm_amd64.s:1373 +0x1 fp=0xc007383fe0 sp=0xc007383fd8 pc=0x4643c1 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 1 [select]: main.(*Fuzzer).pollLoop(0xc0000761a0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:364 +0x13a main.main() /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:292 +0x15fa goroutine 21 [syscall, 53 minutes]: os/signal.signal_recv(0x0) /src/goroot/src/runtime/sigqueue.go:147 +0x9c os/signal.loop() /src/goroot/src/os/signal/signal_unix.go:23 +0x22 created by os/signal.Notify.func1 /src/goroot/src/os/signal/signal.go:127 +0x44 goroutine 16 [chan receive, 53 minutes]: main.main.func1(0xc0000820c0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:164 +0x34 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:162 +0x563 goroutine 15 [chan receive, 53 minutes]: github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1(0xc0000820c0) /src/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:79 +0xb6 created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts /src/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:76 +0x3f goroutine 23 [IO wait]: internal/poll.runtime_pollWait(0x7f9d24b9e500, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc000062598, 0x72, 0x1000, 0x1000, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc000062580, 0xc000220000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b net.(*netFD).Read(0xc000062580, 0xc000220000, 0x1000, 0x1000, 0xc000306000, 0x7f9d4ba00108, 0x0) /src/goroot/src/net/fd_unix.go:202 +0x4f net.(*conn).Read(0xc0001a0290, 0xc000220000, 0x1000, 0x1000, 0x0, 0x0, 0x0) /src/goroot/src/net/net.go:184 +0x8e bufio.(*Reader).fill(0xc000054ba0) /src/goroot/src/bufio/bufio.go:100 +0x103 bufio.(*Reader).ReadByte(0xc000054ba0, 0xc0002df958, 0xf5bdc739f0815c01, 0xf500000000000000) /src/goroot/src/bufio/bufio.go:252 +0x39 compress/flate.(*decompressor).moreBits(0xc000370000, 0xc00809ea20, 0x199) /src/goroot/src/compress/flate/inflate.go:696 +0x37 compress/flate.(*decompressor).nextBlock(0xc000370000) /src/goroot/src/compress/flate/inflate.go:303 +0x36 compress/flate.(*decompressor).Read(0xc000370000, 0xc000165000, 0x1000, 0x1000, 0x86b71b, 0xc000344000, 0xc00009db40) /src/goroot/src/compress/flate/inflate.go:347 +0x77 github.com/google/syzkaller/pkg/rpctype.(*flateConn).Read(0xc0002f24e0, 0xc000165000, 0x1000, 0x1000, 0x199, 0x872857, 0x2) /src/gopath/src/github.com/google/syzkaller/pkg/rpctype/rpc.go:136 +0x51 bufio.(*Reader).Read(0xc000054c00, 0xc000150830, 0x1, 0x9, 0xc0000b09a0, 0xc00809ea20, 0x87d03f) /src/goroot/src/bufio/bufio.go:226 +0x24f io.ReadAtLeast(0xe9e820, 0xc000054c00, 0xc000150830, 0x1, 0x9, 0x1, 0x1, 0x0, 0xeb09c0) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 encoding/gob.decodeUintReader(0xe9e820, 0xc000054c00, 0xc000150830, 0x9, 0x9, 0xc000000180, 0x4, 0xc00045fd90, 0x4056dc) /src/goroot/src/encoding/gob/decode.go:120 +0x6f encoding/gob.(*Decoder).recvMessage(0xc000344000, 0xc000000180) /src/goroot/src/encoding/gob/decoder.go:81 +0x57 encoding/gob.(*Decoder).decodeTypeSequence(0xc000344000, 0xc006d42f00, 0xc00045fe70) /src/goroot/src/encoding/gob/decoder.go:143 +0x10c encoding/gob.(*Decoder).DecodeValue(0xc000344000, 0x8d98c0, 0xc00030a360, 0x16, 0x0, 0x0) /src/goroot/src/encoding/gob/decoder.go:211 +0xdb encoding/gob.(*Decoder).Decode(0xc000344000, 0x8d98c0, 0xc00030a360, 0x0, 0x0) /src/goroot/src/encoding/gob/decoder.go:188 +0x16d net/rpc.(*gobClientCodec).ReadResponseHeader(0xc0002f2990, 0xc00030a360, 0xc00809ea20, 0x0) /src/goroot/src/net/rpc/client.go:228 +0x45 net/rpc.(*Client).input(0xc000054cc0) /src/goroot/src/net/rpc/client.go:109 +0xa5 created by net/rpc.NewClientWithCodec /src/goroot/src/net/rpc/client.go:206 +0x89 goroutine 24 [runnable]: syscall.Syscall(0x0, 0x18, 0xc006b510d0, 0xc, 0xc, 0xc, 0x0) /src/goroot/src/syscall/asm_linux_amd64.s:18 +0x5 syscall.read(0x18, 0xc006b510d0, 0xc, 0xc, 0x0, 0xe9f9a0, 0x12149d8) /src/goroot/src/syscall/zsyscall_linux_amd64.go:686 +0x5a syscall.Read(...) /src/goroot/src/syscall/syscall_unix.go:189 internal/poll.(*FD).Read(0xc0062ec3c0, 0xc006b510d0, 0xc, 0xc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:165 +0x133 os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0000a8748, 0xc006b510d0, 0xc, 0xc, 0xc0069eb548, 0x40ccc8, 0x10) /src/goroot/src/os/file.go:116 +0x71 io.ReadAtLeast(0xe9ef20, 0xc0000a8748, 0xc006b510d0, 0xc, 0xc, 0xc, 0x0, 0x7f9d23d703c8, 0x3ffc38) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc0071d00e0, 0xc000014228, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc006b510c0, 0xc006b510b8, 0x1f20820, ...) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:770 +0x2ce github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc00029be60, 0xc000014228, 0xc003f00440, 0xc0069eb800, 0x2, 0x2, 0xc00506f500, 0xc000020800, 0x4, 0x5) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:284 +0x108 main.(*Proc).executeRaw(0xc005248240, 0xc000014228, 0xc003f00440, 0x6, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 main.(*Proc).execute(0xc005248240, 0xc000014228, 0xc003f00440, 0x0, 0x6, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).executeHintSeed.func1(0xc003f00440) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:244 +0xc6 github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func1() /src/gopath/src/github.com/google/syzkaller/prog/hints.go:76 +0x67 github.com/google/syzkaller/prog.checkConstArg(0xc0035366a0, 0xc0038435f0, 0xc0069ebdd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:129 +0xfc github.com/google/syzkaller/prog.generateHints(0xc0038435f0, 0xea89c0, 0xc0035366a0, 0xc0069ebdd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:117 +0xef github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func2(0xea89c0, 0xc0035366a0, 0xc003f00600) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:79 +0x47 github.com/google/syzkaller/prog.foreachArgImpl(0xea89c0, 0xc0035366a0, 0xc003f00600, 0xc0069ebdb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x119 github.com/google/syzkaller/prog.ForeachArg(0xc003f00540, 0xc0069ebdb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc000d93080, 0x3, 0xc0038435f0, 0xc0069ebe30) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xb8 main.(*Proc).executeHintSeed(0xc005248240, 0xc000d93080, 0x3) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:242 +0x126 main.(*Proc).smashInput(0xc005248240, 0xc001f5cd80) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:208 +0x210 main.(*Proc).loop(0xc005248240) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 25 [sync.Cond.Wait]: runtime.goparkunlock(...) /src/goroot/src/runtime/proc.go:310 sync.runtime_notifyListWait(0xc000392250, 0xc000000730) /src/goroot/src/runtime/sema.go:513 +0xf8 sync.(*Cond).Wait(0xc000392240) /src/goroot/src/sync/cond.go:56 +0x9d github.com/google/syzkaller/pkg/ipc.(*Gate).Enter(0xc0003923c0, 0xc0012cf0c0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/gate.go:34 +0x4d main.(*Proc).executeRaw(0xc005248440, 0xc000014228, 0xc0012cf0c0, 0x5, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:284 +0x99 main.(*Proc).execute(0xc005248440, 0xc000014228, 0xc0012cf0c0, 0x0, 0x5, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).smashInput(0xc005248440, 0xc00309e820) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:215 +0x1d8 main.(*Proc).loop(0xc005248440) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 26 [sync.Cond.Wait]: runtime.goparkunlock(...) /src/goroot/src/runtime/proc.go:310 sync.runtime_notifyListWait(0xc000392250, 0xc000000731) /src/goroot/src/runtime/sema.go:513 +0xf8 sync.(*Cond).Wait(0xc000392240) /src/goroot/src/sync/cond.go:56 +0x9d github.com/google/syzkaller/pkg/ipc.(*Gate).Enter(0xc0003923c0, 0xc0080bcb80) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/gate.go:34 +0x4d main.(*Proc).executeRaw(0xc0052484c0, 0xc000014228, 0xc0080bcb80, 0x6, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:284 +0x99 main.(*Proc).execute(0xc0052484c0, 0xc000014228, 0xc0080bcb80, 0x0, 0x6, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).executeHintSeed.func1(0xc0080bcb80) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:244 +0xc6 github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func1() /src/gopath/src/github.com/google/syzkaller/prog/hints.go:76 +0x67 github.com/google/syzkaller/prog.checkConstArg(0xc0080b8df0, 0xc0080db8f0, 0xc00384ddd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:129 +0xfc github.com/google/syzkaller/prog.generateHints(0xc0080db8f0, 0xea89c0, 0xc0080b8df0, 0xc00384ddd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:117 +0xef github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func2(0xea89c0, 0xc0080b8df0, 0xc0080bcd40) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:79 +0x47 github.com/google/syzkaller/prog.foreachArgImpl(0xea89c0, 0xc0080b8df0, 0xc0080bcd40, 0xc00384ddb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x119 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc0080b3cc0, 0xc0080bcd40, 0xc00384ddb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc00812d8c0, 0xc0080bcd40, 0xc00384ddb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x656 github.com/google/syzkaller/prog.ForeachArg(0xc0080bcc40, 0xc00384ddb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc00121a740, 0x2, 0xc0080db8f0, 0xc00384de30) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xb8 main.(*Proc).executeHintSeed(0xc0052484c0, 0xc00121a740, 0x2) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:242 +0x126 main.(*Proc).smashInput(0xc0052484c0, 0xc0034e3c00) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:208 +0x210 main.(*Proc).loop(0xc0052484c0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 27 [IO wait]: internal/poll.runtime_pollWait(0x7f9d24b9da80, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc006a4e678, 0x72, 0x1, 0xc, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc006a4e660, 0xc0060f1f10, 0xc, 0xc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc00000e168, 0xc0060f1f10, 0xc, 0xc, 0xc0069f1208, 0x40ccc8, 0x10) /src/goroot/src/os/file.go:116 +0x71 io.ReadAtLeast(0xe9ef20, 0xc00000e168, 0xc0060f1f10, 0xc, 0xc, 0xc, 0x0, 0x7f9d20170258, 0x3ffda8) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc006aef490, 0xc000014228, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0060f1ef8, 0xc0060f1ef0, 0x1f20820, ...) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:770 +0x2ce github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc0035e8090, 0xc000014228, 0xc002f5d000, 0xc0069f1500, 0x2, 0x2, 0xc00809f1a0, 0xc00378e300, 0x2, 0x3) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:284 +0x108 main.(*Proc).executeRaw(0xc005248500, 0xc000014228, 0xc002f5d000, 0x6, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 main.(*Proc).execute(0xc005248500, 0xc000014228, 0xc002f5d000, 0x0, 0x6, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).executeHintSeed.func1(0xc002f5d000) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:244 +0xc6 github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func1() /src/gopath/src/github.com/google/syzkaller/prog/hints.go:76 +0x67 github.com/google/syzkaller/prog.checkConstArg(0xc0028e1d20, 0xc003856a20, 0xc0069f1dd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:129 +0xfc github.com/google/syzkaller/prog.generateHints(0xc003856a20, 0xea89c0, 0xc0028e1d20, 0xc0069f1dd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:117 +0xef github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func2(0xea89c0, 0xc0028e1d20, 0xc002f5d100) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:79 +0x47 github.com/google/syzkaller/prog.foreachArgImpl(0xea89c0, 0xc0028e1d20, 0xc002f5d100, 0xc0069f1db8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x119 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc00525ca20, 0xc002f5d100, 0xc0069f1db8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc000780d80, 0xc002f5d100, 0xc0069f1db8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x656 github.com/google/syzkaller/prog.ForeachArg(0xc002f5d0c0, 0xc0069f1db8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc002959f00, 0x2, 0xc003856a20, 0xc0069f1e30) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xb8 main.(*Proc).executeHintSeed(0xc005248500, 0xc002959f00, 0x2) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:242 +0x126 main.(*Proc).smashInput(0xc005248500, 0xc003795e60) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:208 +0x210 main.(*Proc).loop(0xc005248500) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 29 [sync.Cond.Wait]: runtime.goparkunlock(...) /src/goroot/src/runtime/proc.go:310 sync.runtime_notifyListWait(0xc000392250, 0x72f) /src/goroot/src/runtime/sema.go:513 +0xf8 sync.(*Cond).Wait(0xc000392240) /src/goroot/src/sync/cond.go:56 +0x9d github.com/google/syzkaller/pkg/ipc.(*Gate).Leave(0xc0003923c0, 0x0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/gate.go:66 +0xa2 main.(*Proc).executeRaw(0xc004e1cb00, 0xc000014228, 0xc000feb440, 0x6, 0xc00506f8c0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:307 +0x4c3 main.(*Proc).execute(0xc004e1cb00, 0xc000014228, 0xc000feb440, 0x0, 0x6, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).executeHintSeed.func1(0xc000feb440) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:244 +0xc6 github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func1() /src/gopath/src/github.com/google/syzkaller/prog/hints.go:76 +0x67 github.com/google/syzkaller/prog.checkConstArg(0xc002401d40, 0xc002f95f20, 0xc0069eddd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:129 +0xfc github.com/google/syzkaller/prog.generateHints(0xc002f95f20, 0xea89c0, 0xc002401d40, 0xc0069eddd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:117 +0xef github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func2(0xea89c0, 0xc002401d40, 0xc000feb540) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:79 +0x47 github.com/google/syzkaller/prog.foreachArgImpl(0xea89c0, 0xc002401d40, 0xc000feb540, 0xc0069eddb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x119 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc003f4e0e0, 0xc000feb540, 0xc0069eddb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc000926a80, 0xc000feb540, 0xc0069eddb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x656 github.com/google/syzkaller/prog.ForeachArg(0xc000feb500, 0xc0069eddb8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc004d2d0c0, 0x2, 0xc002f95f20, 0xc0069ede30) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xb8 main.(*Proc).executeHintSeed(0xc004e1cb00, 0xc004d2d0c0, 0x2) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:242 +0x126 main.(*Proc).smashInput(0xc004e1cb00, 0xc0034e3010) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:208 +0x210 main.(*Proc).loop(0xc004e1cb00) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 49 [IO wait]: internal/poll.runtime_pollWait(0x7f9d24845698, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc006104978, 0x72, 0x1, 0xc, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc006104960, 0xc006b50cc0, 0xc, 0xc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0002e5350, 0xc006b50cc0, 0xc, 0xc, 0xc000647208, 0x40ccc8, 0x10) /src/goroot/src/os/file.go:116 +0x71 io.ReadAtLeast(0xe9ef20, 0xc0002e5350, 0xc006b50cc0, 0xc, 0xc, 0xc, 0x0, 0x7f9d1c5703a0, 0x3ffc60) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc0054ac150, 0xc000014228, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc006b50cb0, 0xc006b50ca8, 0x1f20820, ...) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:770 +0x2ce github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc000a7a000, 0xc000014228, 0xc0003c0940, 0xc000647500, 0x2, 0x2, 0xc00506f2c0, 0xc0056d6700, 0x4, 0x5) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:284 +0x108 main.(*Proc).executeRaw(0xc000a46c00, 0xc000014228, 0xc0003c0940, 0x6, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 main.(*Proc).execute(0xc000a46c00, 0xc000014228, 0xc0003c0940, 0x0, 0x6, 0x1) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:249 +0x6a main.(*Proc).executeHintSeed.func1(0xc0003c0940) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:244 +0xc6 github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func1() /src/gopath/src/github.com/google/syzkaller/prog/hints.go:76 +0x67 github.com/google/syzkaller/prog.checkConstArg(0xc0003be200, 0xc000ab6ab0, 0xc000647dd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:129 +0xfc github.com/google/syzkaller/prog.generateHints(0xc000ab6ab0, 0xea89c0, 0xc0003be200, 0xc000647dd0) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:117 +0xef github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func2(0xea89c0, 0xc0003be200, 0xc0003c0b00) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:79 +0x47 github.com/google/syzkaller/prog.foreachArgImpl(0xea89c0, 0xc0003be200, 0xc0003c0b00, 0xc000647db8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x119 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a40, 0xc0060fcc80, 0xc0003c0b00, 0xc000647db8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a9 github.com/google/syzkaller/prog.foreachArgImpl(0xea8a80, 0xc000f38ae0, 0xc0003c0b00, 0xc000647db8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x656 github.com/google/syzkaller/prog.ForeachArg(0xc0003c0a00, 0xc000647db8) /src/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc002f5da80, 0x2, 0xc000ab6ab0, 0xc000647e30) /src/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xb8 main.(*Proc).executeHintSeed(0xc000a46c00, 0xc002f5da80, 0x2) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:242 +0x126 main.(*Proc).smashInput(0xc000a46c00, 0xc003e849d0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:208 +0x210 main.(*Proc).loop(0xc000a46c00) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 50 [IO wait]: internal/poll.runtime_pollWait(0x7f9d24b9dc40, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc0061046d8, 0x72, 0x1, 0xc, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc0061046c0, 0xc0012ccdd0, 0xc, 0xc, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0000a9e98, 0xc0012ccdd0, 0xc, 0xc, 0xc000463a00, 0x40ccc8, 0x10) /src/goroot/src/os/file.go:116 +0x71 io.ReadAtLeast(0xe9ef20, 0xc0000a9e98, 0xc0012ccdd0, 0xc, 0xc, 0xc, 0x0, 0x7f9d1b1703d8, 0x3ffc28) /src/goroot/src/io/io.go:310 +0x87 io.ReadFull(...) /src/goroot/src/io/io.go:329 github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc0054ac0e0, 0xc000014228, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0012ccda0, 0xc0012ccd98, 0x1f20820, ...) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:770 +0x2ce github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc000a7a090, 0xc000014228, 0xc0012cea00, 0xc005144ec0, 0xc005144f30, 0xc0028bbec0, 0xc001293980, 0x5, 0xe103d18c00000000, 0xc000463d38) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:284 +0x108 main.(*Proc).executeRaw(0xc000a46c40, 0xc000014228, 0xc0012cea00, 0x5, 0x0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:290 +0x214 main.(*Proc).failCall(0xc000a46c40, 0xc005144d80, 0x3) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:224 +0x16c main.(*Proc).smashInput(0xc000a46c40, 0xc0034e3ff0) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:205 +0x233 main.(*Proc).loop(0xc000a46c40) /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1d7 created by main.main /src/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:289 +0x1481 goroutine 2302 [IO wait, 21 minutes]: internal/poll.runtime_pollWait(0x7f9d24845858, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc0046c2018, 0x72, 0x20001, 0x20000, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc0046c2000, 0xc002eb8000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0001a0500, 0xc002eb8000, 0x20000, 0x20000, 0x0, 0x1, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0001a0500, 0xc00628c0e0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 3814 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc0054ac150, 0xc005168060, 0xc0034d9f80) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0xba created by github.com/google/syzkaller/pkg/ipc.(*command).exec /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:753 +0x1e6 goroutine 3817 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc0054ac0e0, 0xc0051682a0, 0xc005168240) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0xba created by github.com/google/syzkaller/pkg/ipc.(*command).exec /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:753 +0x1e6 goroutine 2071 [IO wait, 25 minutes]: internal/poll.runtime_pollWait(0x7f9d24b9e260, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc0062ec318, 0x72, 0x20001, 0x20000, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc0062ec300, 0xc0038b0000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0000a82f0, 0xc0038b0000, 0x20000, 0x20000, 0x0, 0x1, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0000a82f0, 0xc0071d00e0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 3802 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc006aef490, 0xc000aaa5a0, 0xc000aaa540) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0xba created by github.com/google/syzkaller/pkg/ipc.(*command).exec /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:753 +0x1e6 goroutine 3637 [IO wait, 2 minutes]: internal/poll.runtime_pollWait(0x7f9d24845d98, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc006a4f278, 0x72, 0x20001, 0x20000, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc006a4f260, 0xc00487e000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0014525e8, 0xc00487e000, 0x20000, 0x20000, 0x0, 0x1, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0014525e8, 0xc0069803f0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 3816 [select]: github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc0071d00e0, 0xc0051681e0, 0xc005168180) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:755 +0xba created by github.com/google/syzkaller/pkg/ipc.(*command).exec /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:753 +0x1e6 goroutine 2543 [IO wait, 18 minutes]: internal/poll.runtime_pollWait(0x7f9d24b9dee0, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc006104618, 0x72, 0x20001, 0x20000, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc006104600, 0xc002100000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0000a8ac8, 0xc002100000, 0x20000, 0x20000, 0x0, 0xe9ea80, 0xc000084050) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0000a8ac8, 0xc0054ac0e0) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 3410 [IO wait, 5 minutes]: internal/poll.runtime_pollWait(0x7f9d24846118, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc005cd41f8, 0x72, 0x20001, 0x20000, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc005cd41e0, 0xc00458c000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc004daa000, 0xc00458c000, 0x20000, 0x20000, 0x0, 0x1, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc004daa000, 0xc0055f8000) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 2733 [IO wait, 15 minutes]: internal/poll.runtime_pollWait(0x7f9d24847410, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc0061048b8, 0x72, 0x20001, 0x20000, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc0061048a0, 0xc004680000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0002e4d80, 0xc004680000, 0x20000, 0x20000, 0x0, 0x1, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0002e4d80, 0xc0054ac150) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 2972 [IO wait, 12 minutes]: internal/poll.runtime_pollWait(0x7f9d24b9e340, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc006a4e5b8, 0x72, 0x20001, 0x20000, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc006a4e5a0, 0xc0046e0000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc0001a16d8, 0xc0046e0000, 0x20000, 0x20000, 0x0, 0x1, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc0001a16d8, 0xc006aef490) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 goroutine 3758 [IO wait]: internal/poll.runtime_pollWait(0x7f9d24b9d9a0, 0x72, 0xffffffffffffffff) /src/goroot/src/runtime/netpoll.go:203 +0x55 internal/poll.(*pollDesc).wait(0xc0034ae0d8, 0x72, 0x20001, 0x20000, 0xffffffffffffffff) /src/goroot/src/internal/poll/fd_poll_runtime.go:87 +0x45 internal/poll.(*pollDesc).waitRead(...) /src/goroot/src/internal/poll/fd_poll_runtime.go:92 internal/poll.(*FD).Read(0xc0034ae0c0, 0xc000900000, 0x20000, 0x20000, 0x0, 0x0, 0x0) /src/goroot/src/internal/poll/fd_unix.go:169 +0x19b os.(*File).read(...) /src/goroot/src/os/file_unix.go:263 os.(*File).Read(0xc001452000, 0xc000900000, 0x20000, 0x20000, 0x0, 0x1, 0x0) /src/goroot/src/os/file.go:116 +0x71 github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc001452000, 0xc0055f8070) /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:615 +0xaf created by github.com/google/syzkaller/pkg/ipc.makeCommand /src/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:609 +0x936 VM DIAGNOSIS: 16:06:04 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea0000e23d00 RCX=ffffffff81699879 RDX=ffff88800d3e8000 RSI=0000000000000008 RDI=ffffea0000e23d00 RBP=ffffea0000e23d00 RSP=ffff88803d7f7700 R8 =0000000000000000 R9 =ffffffff868736a7 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffea0000e23d08 R14=0000000000000000 R15=dead000000000100 RIP=ffffffff816cc194 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7827fca008 CR3=0000000016d7e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=652022746f6f72223d74636361207469 XMM02=3d6c616e696d72657420322e322e302e XMM03=3d656d616e74736f682022646873732f XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=652075253d64692073253d706f000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000005 RBX=ffff88800924a3b0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff84ff9bc0 RDI=ffff88800924a3b0 RBP=ffffffff84ff9bc0 RSP=ffff88800f4a7a78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000003fff R11=0000000000000001 R12=ffff888009249a40 R13=ffff88800924a388 R14=00000000ffffffff R15=ffff88800924a3b0 RIP=ffffffff83e851f4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb9c1cac500 CR3=000000000db9a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756f6a2f646d65747379732f6e75722f XMM01=00676f6c7379732f6c616e72756f6a2f XMM02=756f6a2f646d65747379732f6e75722f XMM03=006c616e72756f6a2f646d6574737973 XMM04=5ad38092fe8dc81c00000000000ae8f0 XMM05=e19ffe8601b7c45e00000000006737f0 XMM06=2c67c8bc2e329bc300000000006734d8 XMM07=58f17c1affdc82d600000000006733d8 XMM08=4f5453444600273d67736d000d0a0920 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000